Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File:                     uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier:          nACoiRJBTebn4wFgajFgs3xvGUUud2zYrQ9+8JpvJ2Q=
Subject key identifier:   67:D2:58:6B:98:DB:52:1A:98:99:99:25:09:2F:70:70:63:14:79:D8
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer:       /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial:       0198D54E183D30E299D17EDE0AE23063CEB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number:          09BE
Signing time:             Sat 23 Aug 2025 05:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:01 +0000
Files and hashes:         1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
                          2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: ivIsVdA1O2dQ+qxFTC7x24uPoQqqCBnm7xpyLaQTfqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:18:3d:30:e2:99:d1:7e:de:0a:e2:30:63:ce:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
        Validity
            Not Before: Aug 23 05:02:01 2025 GMT
            Not After : Aug 24 05:02:01 2025 GMT
        Subject: CN=67d2586b98db521a98999925092f7070631479d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:42:67:e3:6c:36:89:88:fd:c1:d1:5a:0f:
                    de:0e:7a:0f:17:21:ac:82:3a:f0:8e:25:5d:a0:c1:
                    5d:68:b4:ec:a7:52:10:2e:5d:8a:2f:be:04:ea:e7:
                    ef:06:a1:de:6b:9a:c9:9c:d9:a6:0d:00:c2:e6:de:
                    c3:db:ea:5e:11:89:83:71:39:73:d7:6d:1c:6c:12:
                    0d:54:7c:8a:c7:40:4c:0a:f8:c2:1e:5f:9a:48:b2:
                    a6:1e:59:d3:0f:ae:86:b7:12:68:6a:fb:ff:00:24:
                    1b:b9:7a:ae:5d:f9:94:e0:c5:fe:92:8f:cf:1e:98:
                    c4:4b:dc:47:5f:ce:de:44:38:35:df:23:a2:d9:db:
                    81:a5:40:52:8b:d2:2d:95:d7:55:a9:dd:b2:a3:8e:
                    3c:e9:88:82:7b:01:87:73:0b:62:64:2f:4e:0f:10:
                    dd:2a:76:19:da:22:6a:cc:fb:5a:f8:09:90:d0:ea:
                    cd:8b:af:13:a1:46:58:f4:66:5d:26:3c:f0:1b:04:
                    a0:9d:de:e0:6f:93:66:8b:7d:23:00:a8:ba:0f:62:
                    a5:85:2e:97:4c:1a:a2:82:90:bf:62:46:8d:79:db:
                    d0:31:c3:84:78:9c:4a:8a:22:ba:54:8a:5e:89:84:
                    d6:8f:7b:c4:a6:2d:a2:f7:42:32:65:4f:ec:d8:37:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D2:58:6B:98:DB:52:1A:98:99:99:25:09:2F:70:70:63:14:79:D8
            X509v3 Authority Key Identifier:
                keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:31:a0:fd:45:e9:55:54:a7:e7:b1:91:91:6d:55:67:58:4f:
         7a:e5:b4:ca:b3:b6:9f:4b:2a:e8:9d:19:13:a8:88:78:6a:8d:
         3d:c1:07:fd:e5:5e:79:33:ac:04:d2:5d:18:b5:77:e4:db:f2:
         1a:66:dc:2d:ae:bc:c1:d4:a2:d4:fa:83:8e:6f:bc:e7:6d:52:
         96:76:98:33:66:19:89:5c:6b:3d:a9:8c:66:45:a1:53:d9:16:
         fb:15:04:a2:0b:36:af:4a:4f:64:23:58:80:e0:73:95:64:00:
         f2:69:0d:b9:3f:ef:65:80:1e:82:ad:3b:d0:b7:03:98:9a:c1:
         ba:f5:d3:68:14:a9:f9:05:6f:6e:17:a4:bb:0c:97:45:9a:2b:
         3b:9f:11:a6:47:72:6e:6b:c9:85:96:ec:b6:3f:37:cc:d4:4c:
         a1:30:74:65:e2:a8:bc:9b:40:49:58:f4:d4:01:e8:66:c5:15:
         e8:0d:d0:6f:82:5d:d2:77:62:5c:70:c9:c0:2e:07:97:b3:77:
         55:0f:2e:83:fb:5e:6b:54:a7:52:e5:68:38:04:ba:87:50:4c:
         ea:7a:4a:85:e7:e0:43:bf:d4:1d:4b:1a:b5:dc:08:21:ff:bd:
         2c:10:d9:80:ad:7b:91:21:99:b3:62:04:eb:5c:70:07:17:ce:
         c6:3d:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:59 2025 by rpki-client