Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File:                     UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier:          k5r1Cl3t4fyZlZjKEhWN/h3b+0jvAA97X7v16cfW714=
Subject key identifier:   09:34:4E:54:7C:2C:33:75:BB:72:C7:59:AE:D9:74:A0:3F:4C:C4:9B
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer:       /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial:       0198D5BC36E2A3CCA7040E309E3EEAECD963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number:          051A
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=)
                          2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: CkNYFo8w27QuTrQa0m5K8gqcRc5ZC6npdiI3qf66JMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:36:e2:a3:cc:a7:04:0e:30:9e:3e:ea:ec:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=09344e547c2c3375bb72c759aed974a03f4cc49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:bd:6b:92:22:38:7b:1a:34:ad:55:57:26:
                    99:09:f7:ad:17:3d:a3:c4:8e:fd:d1:9b:00:8a:97:
                    a9:e7:ee:b5:5b:5e:6f:ca:ea:9e:a0:8f:0e:c7:a5:
                    bd:57:f9:0d:82:66:0b:52:fe:07:6b:11:ac:6b:bd:
                    67:25:7e:8b:eb:f8:f5:09:d9:75:8c:d0:1c:27:37:
                    f7:cd:f7:1c:7e:ce:29:cf:32:60:b8:a2:fd:bd:0d:
                    e4:0d:d4:ef:57:d9:f8:22:82:92:46:af:01:6f:2a:
                    99:b9:45:fc:00:19:c7:41:1a:42:7c:08:7d:15:b0:
                    9b:cb:2f:22:bb:4a:a5:97:fa:67:77:77:39:f0:bb:
                    24:22:1f:8a:b4:d8:50:bb:56:55:21:47:92:af:72:
                    0a:16:ee:e8:52:55:ec:b9:8c:e3:e6:d8:c8:e7:03:
                    d5:82:61:7a:a7:f8:86:e0:e5:01:5a:22:30:ec:1b:
                    c8:66:1f:f3:db:1f:29:b4:0a:4c:ef:3a:56:a1:99:
                    84:12:7c:d6:26:e3:2b:d0:87:a3:0e:c1:17:87:b8:
                    93:b8:96:5a:dc:4d:0e:50:8a:dc:85:08:60:1c:b5:
                    c5:e6:15:31:dd:cd:29:5c:08:09:13:6d:64:4c:73:
                    91:86:82:42:c9:cf:af:1e:4a:24:ed:77:5f:eb:fc:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:4E:54:7C:2C:33:75:BB:72:C7:59:AE:D9:74:A0:3F:4C:C4:9B
            X509v3 Authority Key Identifier:
                keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:37:10:d8:e9:45:3c:69:a5:f7:3f:3b:27:92:21:92:81:
         fc:f0:3d:75:47:6d:b6:cc:bb:d5:23:49:e8:0b:3d:01:84:81:
         d0:47:88:5e:ec:fd:c9:4f:eb:90:84:65:de:a5:06:ff:8b:2c:
         e0:82:ac:b1:91:3f:58:ca:fc:40:fc:95:14:78:a8:bb:90:2e:
         ca:f3:9d:50:3f:f7:86:f1:89:e2:b3:e6:d0:9c:3b:6e:21:4a:
         07:85:69:27:6d:18:5f:6f:37:5c:ab:40:8d:f1:cc:09:42:47:
         9b:94:45:4b:8a:df:88:97:96:8d:9d:88:3e:42:b4:a8:89:52:
         6d:29:0e:45:e0:d0:54:f8:ac:bd:21:7e:b5:1b:e7:42:55:c4:
         59:56:c7:51:1b:5a:e8:7a:70:66:0a:14:f7:67:4f:70:89:a3:
         9f:0d:64:bd:5c:cf:80:82:f6:a1:42:d6:c2:b6:ea:ba:c1:ca:
         5a:ab:82:49:72:18:62:52:d2:a5:e8:15:51:74:63:32:92:85:
         91:80:d4:58:e6:86:d5:60:54:47:4f:38:de:4d:67:69:5d:a5:
         50:f7:4b:b7:97:57:cf:44:57:f0:34:4a:41:7c:c4:7b:d8:dc:
         b0:f9:4a:22:36:3b:0d:b9:12:00:76:2c:97:32:c4:dc:a0:f6:
         30:63:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:37 2025 by rpki-client