Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          9sVwFaX/7qoXuDyqGt3ggcyTWlC0mlEphV3CnaSyMIY=
Subject key identifier:   06:46:18:23:84:7A:A0:14:C1:DD:92:2E:6B:6D:25:68:37:65:ED:3A
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       0198D7A8C8B6A9572CB21B3FE7E4F3F9E8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          0F5F
Signing time:             Sat 23 Aug 2025 16:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:19 +0000
Files and hashes:         1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: kvXF78fbXBmJ390xQFqCkkOZ6iSVHijaYBxZTOftCFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:c8:b6:a9:57:2c:b2:1b:3f:e7:e4:f3:f9:e8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Aug 23 16:00:19 2025 GMT
            Not After : Aug 24 16:00:19 2025 GMT
        Subject: CN=06461823847aa014c1dd922e6b6d25683765ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:c9:e0:9e:68:ee:0e:36:54:95:b8:9f:d5:
                    f4:43:42:a6:3a:06:3f:0c:33:c2:2d:51:0e:b3:5b:
                    76:e1:4b:f8:bf:56:27:e9:0b:60:0e:b2:cd:fc:96:
                    97:e9:91:d9:a6:2d:e4:34:38:51:9b:90:58:b8:f8:
                    ea:0c:f3:2f:9d:d0:0b:25:9d:8d:e7:e7:73:44:c5:
                    f9:b2:b7:ff:d5:f1:6c:ea:18:85:7a:19:61:bd:ea:
                    40:72:83:5b:e2:4e:df:75:06:6a:ce:86:61:f5:fd:
                    ce:ca:f3:7a:7a:32:37:e5:39:fa:29:b1:ae:62:16:
                    2b:87:d3:c8:b5:cd:d2:33:dc:78:4b:3e:88:72:22:
                    f7:66:70:48:95:c1:da:bb:87:22:60:47:ca:95:c7:
                    67:73:61:ab:26:6e:00:3c:b3:41:23:72:b0:32:9e:
                    c8:42:01:cd:70:ca:29:93:98:69:4f:cd:3f:1b:91:
                    00:a7:01:9e:b1:59:b5:f2:96:88:df:94:2d:5d:ac:
                    3f:7f:c0:ba:dd:6c:fb:9f:9e:17:a1:26:1f:07:8f:
                    81:a5:23:e4:93:13:12:b0:e5:82:40:b5:72:fb:7f:
                    87:bf:83:2d:c5:85:a1:c1:d4:c4:74:5f:39:27:5d:
                    ca:e4:5d:98:74:0c:7f:12:e4:83:ba:66:2d:19:f7:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:18:23:84:7A:A0:14:C1:DD:92:2E:6B:6D:25:68:37:65:ED:3A
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:2a:48:6f:e7:d1:8e:24:99:07:0a:b0:53:5b:15:43:2b:
         10:be:2c:b8:be:df:d1:65:75:24:6d:9e:bd:f7:9e:74:eb:68:
         80:27:ad:e2:bc:ef:db:3c:48:3d:93:71:42:06:c0:9b:6d:08:
         b2:ff:14:ff:f1:a0:82:1d:28:c7:54:06:1f:07:e7:b7:2a:65:
         f3:9b:d7:e7:64:16:f1:1b:fb:13:3f:ad:58:35:4b:65:9f:f6:
         6d:50:9a:f5:05:2b:a6:6c:a0:24:0d:df:16:2d:c6:87:2d:60:
         de:bb:da:2f:b6:23:57:07:57:bc:4d:60:b6:0f:43:5b:b6:69:
         d0:bb:10:dc:11:11:c8:3f:e2:34:d4:4b:dc:a5:a7:68:10:52:
         b2:0f:f8:22:b3:47:6c:6b:f9:42:a0:3f:6b:db:94:fb:39:15:
         18:d0:6d:07:ba:ac:f8:23:12:1d:46:70:b7:1f:7c:ae:b0:c0:
         dd:60:65:29:86:08:cc:ac:72:82:db:9e:6d:af:50:88:db:f3:
         cd:70:3e:f2:ee:36:8b:50:f6:65:94:b4:e5:e6:92:d2:a1:d3:
         de:27:95:31:74:5d:1c:46:2b:e8:80:b0:de:a0:c8:77:aa:a8:
         8d:4e:e6:8a:14:f0:65:09:34:70:1b:de:c9:9f:84:50:15:d8:
         cb:cb:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:37 2025 by rpki-client