Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          pEeuLtl4sKiolmCNtn1Z4jqTnmfWBDSRB9XsdCIPvv4=
Subject key identifier:   3F:14:43:07:5A:6A:4E:84:8F:D9:D7:6F:CD:0C:AD:C2:31:B7:63:09
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       0197CA27267B1567F301A7C3890AB200FF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          15BF
Signing time:             Wed 02 Jul 2025 08:00:52 +0000
Manifest this update:     Wed 02 Jul 2025 08:00:52 +0000
Manifest next update:     Thu 03 Jul 2025 08:00:52 +0000
Files and hashes:         1: 1-PxoxI0pjeoIhSSKerY6tOEWuoI.roa (hash: lBboLe7L0MERYDzzwiB1Vs/DVbFyBwYxqUhr24nvp7g=)
                          2: Q6c7o6uPHQhvoxwmQLzyhtDVMdE.roa (hash: zg0a7LCWPIx/36rTK801mypOCjtsncvR5b3j9h5SrdE=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: 74qzLVRljR73ybSZ941MNe7tltS0h+v+U+JSuIiaRZo=)
                          4: VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa (hash: AKl6rPAajDxxJI7lqm70ylWzJOjVOPio/I4CI3XKjZk=)
                          5: najBQqT2olWE08kevELmXwGT57k.roa (hash: jNHLSsFQzYHW7iCGieIcoIMgADSGMSuS0qYYEJ2UrZ0=)
                          6: qaBXI4wwGXreuW0Ec50OaM6eig8.roa (hash: QyvTL1zDVNiNDlo1UO2uwprzV09ftV1cWpvfl0kl1WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:27:26:7b:15:67:f3:01:a7:c3:89:0a:b2:00:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Jul  2 08:00:52 2025 GMT
            Not After : Jul  3 08:00:52 2025 GMT
        Subject: CN=3f1443075a6a4e848fd9d76fcd0cadc231b76309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:fb:9d:ff:92:bb:b4:34:58:fe:ec:61:49:
                    5c:15:d5:19:fe:03:2b:55:bb:d0:8c:9b:f7:04:25:
                    00:32:dd:76:d1:71:6c:74:13:3b:a3:11:fc:52:e5:
                    6e:ec:4d:9f:35:a4:e0:85:3b:9b:de:11:d9:37:d5:
                    f2:44:66:9a:26:fc:10:d7:67:3f:c4:44:d2:7e:b4:
                    8b:23:12:f7:06:c6:8e:bc:89:01:1b:a7:59:18:5f:
                    58:04:a0:23:b0:7e:4f:6e:d0:29:9c:68:4d:7c:1a:
                    e3:9d:c6:2e:58:f3:ef:39:44:bb:9c:ed:fc:7b:e6:
                    cf:21:79:20:db:26:9f:a0:6f:61:00:52:1a:4b:25:
                    15:a0:dc:9d:ca:b7:a3:3a:91:be:dc:e0:55:41:29:
                    59:e7:83:98:99:dd:7b:91:da:19:8e:f3:8b:15:80:
                    71:11:ef:ef:cb:8c:55:a8:17:eb:87:ef:27:7b:05:
                    c5:99:ce:47:7c:b9:c3:af:9e:4e:7b:5b:42:e5:b0:
                    d9:03:f3:04:9f:1d:ca:f5:65:2f:5a:bd:cc:00:19:
                    ba:e7:1d:f4:2b:62:40:86:15:db:6f:61:3e:68:fd:
                    01:e6:d2:1d:ab:62:6a:dc:28:67:c5:8b:64:a2:c3:
                    91:de:09:7f:2d:14:c2:25:55:15:c3:7a:3b:c6:a3:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:43:07:5A:6A:4E:84:8F:D9:D7:6F:CD:0C:AD:C2:31:B7:63:09
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:a2:fb:2f:0d:51:5b:52:8c:4a:1d:cb:d9:10:65:a3:97:5e:
         1a:e9:04:c9:a7:05:c7:27:ee:22:2e:71:03:64:55:55:20:23:
         8d:53:50:e0:dc:9e:3c:f5:b4:68:18:13:51:5e:a5:63:f7:62:
         ee:b9:e8:0a:a9:b9:e2:bc:2b:ca:be:2f:18:2f:c3:a0:41:ef:
         db:0a:30:68:f5:43:17:4c:88:44:f3:56:03:bb:40:e3:74:6c:
         3c:77:f9:55:7e:7f:6e:47:54:ba:c9:74:5e:62:ce:b4:fd:1b:
         2b:17:26:b6:b3:fb:e1:8b:3d:2b:d3:a4:58:f1:01:76:06:a1:
         f9:f8:fe:ab:b1:1b:cb:5e:d0:79:f8:72:82:12:f5:7d:a2:5e:
         6d:5f:08:c1:aa:6d:3c:db:b0:cb:43:26:00:0f:bf:51:c9:85:
         4d:b5:08:d8:f9:3f:89:aa:23:6b:37:e9:98:20:c6:14:71:c2:
         75:9c:3f:d4:19:bf:7d:64:7f:c7:f7:91:d1:4b:a4:79:b3:3a:
         ae:3d:40:46:a6:7e:72:df:e6:fc:e9:fe:1f:23:6e:f7:74:50:
         49:28:cd:9d:a1:a4:f6:4b:f6:49:50:c8:19:fe:68:53:cd:7c:
         9c:5e:f9:23:6d:58:fb:2d:d0:f5:1d:10:5a:85:31:82:bd:9a:
         59:29:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:35:23 2025 by rpki-client