Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          fVgzklQM8sHcZBrhSH0eDd73XSqAtUdgi3Z+r1lzuqw=
Subject key identifier:   1A:09:B2:E0:7E:70:8B:88:28:B2:0D:CA:7D:8C:01:3B:E6:F5:1A:73
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       0198D54E5A09CBDECDCE9EDAD37CD36BBC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          132D
Signing time:             Sat 23 Aug 2025 05:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:18 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: yH0Tno7YONIHxuEzPUxBqwP4eYur8Ps0CmiTcKejmgw=)
                          2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:5a:09:cb:de:cd:ce:9e:da:d3:7c:d3:6b:bc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Aug 23 05:02:18 2025 GMT
            Not After : Aug 24 05:02:18 2025 GMT
        Subject: CN=1a09b2e07e708b8828b20dca7d8c013be6f51a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:6d:30:b0:7f:20:b0:b4:4e:2e:71:3d:61:
                    02:7e:6a:3d:1e:a0:45:f8:a5:ba:6b:e7:7f:f3:e6:
                    24:eb:b9:10:28:0f:d4:d9:7b:2c:da:e5:68:08:63:
                    19:77:d0:ef:49:7a:f9:fd:4f:11:2e:9a:41:f4:ab:
                    93:2b:b7:73:13:6c:d7:2e:c9:f6:58:a1:c2:2c:96:
                    13:87:9c:d5:80:a3:f2:8a:78:40:9a:58:1f:ba:7a:
                    0e:1e:42:fa:52:35:97:6e:39:b1:9a:11:b1:46:27:
                    2d:a7:d4:3c:5b:f2:75:a9:00:c7:4b:3b:a0:c0:d0:
                    8a:6e:57:a6:59:4c:1a:00:dc:0a:15:2a:b9:00:74:
                    9f:43:c3:f2:97:44:6c:21:cf:f3:29:41:40:d2:65:
                    c5:57:07:48:6c:2d:08:fb:79:2e:32:31:ff:fa:ae:
                    55:4c:c3:53:42:c3:8a:9c:3e:9e:a3:76:cf:2d:a2:
                    63:ea:31:4a:ee:1e:d3:ef:1b:bb:9e:26:f6:b3:a7:
                    a4:ad:98:8b:0d:e2:46:cd:09:26:c2:31:74:b3:da:
                    eb:01:7e:1d:19:50:d1:d4:53:3b:00:90:e4:75:e5:
                    43:64:6f:46:ae:43:45:64:78:d2:fe:5f:80:14:02:
                    72:96:dd:76:2d:d9:58:3a:7e:ab:ab:01:2f:b8:6e:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:09:B2:E0:7E:70:8B:88:28:B2:0D:CA:7D:8C:01:3B:E6:F5:1A:73
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:be:55:21:f3:fe:b0:80:2c:7a:25:14:05:b3:39:d5:be:
         30:27:92:1b:86:89:3e:fc:ee:5d:69:92:ae:ba:e2:cd:08:fd:
         2d:d4:cb:45:3d:3a:2f:bd:d9:c9:29:9d:32:53:1d:ec:ff:52:
         7a:af:52:e1:83:04:29:4f:f9:14:c9:6d:30:6b:50:f2:22:8d:
         b2:3a:95:d8:21:c0:a5:7e:eb:dc:fa:c8:a5:0c:d5:de:79:b0:
         f6:a0:60:75:78:df:e7:dd:c4:60:4c:b6:a5:3c:2d:73:74:98:
         15:0f:f0:90:a1:41:a3:d5:5d:cc:4e:e9:9b:96:09:8e:ae:30:
         df:4b:b3:86:d0:cc:25:c8:07:66:91:91:bd:0a:14:1b:a7:dd:
         9d:ff:f4:99:5c:fc:d6:cf:a1:df:b0:9b:b0:7e:66:94:39:2f:
         c7:9b:4f:6e:fc:c3:4f:d6:81:14:cf:75:5c:c8:b0:2e:8d:15:
         a0:9e:05:f9:35:72:1e:51:9a:33:7c:cd:e3:5b:ea:c6:84:28:
         7d:55:b0:e3:b1:44:5f:47:81:94:f2:d2:d2:2b:af:89:0c:31:
         36:67:6f:52:d5:0c:5e:b1:1e:49:8d:e8:39:62:35:8a:0a:68:
         79:38:42:c3:aa:d8:c7:f9:6c:8a:83:65:09:96:ba:a5:f6:0c:
         ef:d0:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:38 2025 by rpki-client