Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File:                     Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier:          VnHJLxxDgLiE3MMzSsfwgnLV/6PA2jGsgrpY0KDJhU8=
Subject key identifier:   A9:62:20:84:C3:F6:58:B6:4F:FD:55:D1:A2:E7:C2:F6:C5:48:F3:43
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer:       /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial:       0198D7E1483C979EBDB280B45A0A68E76D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 17:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:02 +0000
Files and hashes:         1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
                          2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: zulKsgK1KJkRvfki0TOLSagcXCOhanCOfcltEKxU37c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:48:3c:97:9e:bd:b2:80:b4:5a:0a:68:e7:6d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
        Validity
            Not Before: Aug 23 17:02:02 2025 GMT
            Not After : Aug 24 17:02:02 2025 GMT
        Subject: CN=a9622084c3f658b64ffd55d1a2e7c2f6c548f343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:7a:4a:3f:0c:d7:88:fd:ac:20:81:12:f1:
                    68:e8:f0:78:9c:a1:5e:64:94:37:34:03:63:0b:f7:
                    cd:54:d2:74:6c:bf:7a:f2:59:30:30:b5:09:6e:c8:
                    4a:33:ab:a7:3f:f1:c2:96:c0:62:53:14:77:4e:34:
                    c7:f1:bf:07:79:b5:45:c1:2b:ed:2a:cb:b1:0a:78:
                    22:82:12:d6:47:89:95:80:c2:4a:df:fe:7c:d3:83:
                    c9:9a:4f:92:92:00:d6:58:9c:43:53:49:31:97:6b:
                    13:a5:5d:84:bc:b5:45:02:71:7d:65:c2:6d:b0:1a:
                    41:78:19:34:4e:dd:54:2d:e8:6d:b5:6a:90:c0:ae:
                    6e:62:e5:7e:51:d4:8f:47:de:60:93:80:74:37:65:
                    23:90:8d:aa:f3:8e:c4:a7:18:b7:c5:27:67:f5:07:
                    19:11:64:b2:86:a5:3c:d4:fc:70:31:29:d0:a5:eb:
                    82:b1:8c:e8:a2:4a:25:a8:ed:a1:3d:18:01:2d:48:
                    af:d1:ab:69:12:ff:69:a0:32:f4:73:a7:51:40:a8:
                    e5:9f:e9:61:cd:fa:27:01:2a:b4:0a:98:61:bc:25:
                    54:a3:1d:18:11:02:2d:8a:66:bf:3a:f0:d0:fa:74:
                    f1:b2:de:6b:e5:f1:16:e2:3f:f0:b4:ce:72:89:a3:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:20:84:C3:F6:58:B6:4F:FD:55:D1:A2:E7:C2:F6:C5:48:F3:43
            X509v3 Authority Key Identifier:
                keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:3e:1c:49:72:95:64:11:b2:55:5e:94:50:c0:9e:39:fd:
         9e:fa:1f:02:6d:43:8c:53:19:ca:ca:c1:d1:7f:12:15:e2:8a:
         8d:30:46:65:9f:63:3e:4d:c2:12:64:5d:ee:0b:d0:3e:34:59:
         b8:3a:93:c7:42:21:07:63:ef:49:d1:2f:10:c8:71:54:6c:7a:
         bc:f8:0f:87:52:b0:7c:1c:a7:b6:71:38:ad:50:e0:d3:c5:ac:
         35:49:e8:24:df:b2:53:38:f9:24:b2:b1:67:5e:b6:c5:37:99:
         c4:2c:10:32:91:71:4a:4f:68:0f:59:13:a9:45:b3:d4:19:85:
         10:23:80:3e:76:2d:a5:1b:ba:ae:80:fe:2b:14:68:b6:09:ac:
         f4:f5:c9:d9:60:4f:bf:de:6a:0d:a1:92:0c:a4:23:db:32:a7:
         fe:44:5a:9e:56:f1:35:c3:d2:0e:aa:1d:e5:aa:2a:a0:ee:aa:
         11:10:21:75:0c:dc:68:86:a8:ee:00:47:39:c8:79:d7:9e:97:
         8e:4a:b8:94:06:5e:f9:9a:93:4b:19:6f:2e:bd:ec:5d:9f:2b:
         41:90:7a:54:94:cc:52:15:97:62:63:a7:44:41:cf:9c:d9:bf:
         28:bc:9f:7c:be:56:d5:c8:80:1a:40:26:52:03:ea:e5:6b:b2:
         20:ef:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:36 2025 by rpki-client