Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          q60GNTBWV+7KQcHgP5GeMFpzwj6JEf0REhFb2Es0y4Q=
Subject key identifier:   A8:FE:07:7D:F8:52:CA:1A:10:E2:C6:FF:90:63:35:C7:B6:23:6D:8A
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       0198D473B53F19D84FD28455F8D3AE728A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          0F73
Signing time:             Sat 23 Aug 2025 01:03:29 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:29 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:29 +0000
Files and hashes:         1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: ALIU5JcqoWuIs5ntD7vcyxk8oOSPQLD061VfVtZgIZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:b5:3f:19:d8:4f:d2:84:55:f8:d3:ae:72:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Aug 23 01:03:29 2025 GMT
            Not After : Aug 24 01:03:29 2025 GMT
        Subject: CN=a8fe077df852ca1a10e2c6ff906335c7b6236d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:d7:f9:11:41:9c:8c:21:17:47:c3:ca:3c:
                    aa:cd:f7:5e:d2:8f:83:4d:b7:52:3e:10:31:a6:9b:
                    45:75:0a:73:d2:1e:a9:56:c0:59:d8:3c:78:8d:a4:
                    6d:43:87:ba:ea:55:a4:b7:4f:3c:b8:58:da:be:85:
                    72:ac:54:32:48:d3:2d:23:a2:57:55:13:0d:65:bd:
                    a1:03:2d:b1:8b:c0:cb:1a:78:e3:d9:c7:e7:59:a3:
                    08:32:df:9f:23:ea:1d:cc:b9:e4:a5:c3:17:45:62:
                    b4:7d:77:f2:ad:c6:b3:c2:aa:14:82:92:d4:48:74:
                    8c:ac:69:67:49:75:d5:bb:29:d5:b1:f2:2a:96:09:
                    4d:e2:96:fb:16:f6:fd:73:76:c1:33:44:69:dc:b4:
                    31:b3:1a:72:c9:8d:73:14:3f:e4:36:97:b5:99:a3:
                    51:b0:c6:aa:7d:e5:df:73:a1:31:8f:a9:90:25:a9:
                    4c:b0:d4:b6:7e:c3:6d:d6:d7:87:96:3a:f9:81:f8:
                    22:68:64:ed:34:14:8b:8d:ab:61:3f:ff:e7:cf:5c:
                    a8:2b:30:e8:dd:3b:a9:ad:14:3d:c8:bb:93:5b:0e:
                    c6:2f:33:d5:ce:cb:2c:be:cf:a9:b7:ae:8d:17:75:
                    f8:dd:72:99:85:a2:06:62:76:da:8e:10:19:f0:fc:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FE:07:7D:F8:52:CA:1A:10:E2:C6:FF:90:63:35:C7:B6:23:6D:8A
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:fc:7e:71:1d:95:de:1e:70:5b:ee:f1:23:4e:c5:dc:c1:
         34:3f:15:08:22:eb:52:63:a6:67:0b:f6:02:37:2e:a6:20:40:
         dc:d2:ea:6c:62:96:95:87:2a:36:ef:2c:15:40:45:76:15:96:
         41:15:5b:c3:3b:9b:4f:c2:ae:58:47:6e:6c:05:d6:d9:d8:52:
         6d:dc:72:32:f2:36:fd:97:47:ab:4c:0c:37:0c:21:70:1c:c6:
         38:48:34:3a:a4:b5:2c:61:61:05:bc:1f:44:42:1a:7e:e7:9b:
         ef:11:f0:3b:a4:1e:cc:80:ad:30:c6:0e:a2:e9:ca:1e:3e:a9:
         45:b3:f0:7c:ec:53:f0:e9:9b:81:8b:bb:f7:f4:83:66:92:da:
         54:b0:a1:a4:69:8c:46:c7:1e:eb:06:a9:0e:b7:5c:66:05:21:
         44:fa:49:9a:19:04:df:94:44:89:57:f7:a0:be:90:f3:ab:a6:
         d8:cd:0d:1e:b9:ca:c8:b0:57:5f:56:5d:ee:72:71:73:aa:60:
         16:43:88:65:96:2a:2e:90:8e:bb:c2:4d:4b:41:95:43:22:d5:
         59:d6:e9:22:18:95:eb:00:93:5d:70:63:af:7a:78:11:20:a4:
         8c:1a:93:9c:92:f8:37:f8:d9:00:87:4c:2c:a5:df:34:b8:ae:
         c3:7b:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:07 2025 by rpki-client