Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File:                     uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier:          OwTXSsIf/lXw1wfVStmhumU+3+NZQGSazF3OCmUwL7o=
Subject key identifier:   A4:12:39:F0:36:14:2D:FF:35:40:F9:E0:A3:02:A1:A8:58:9F:2A:A5
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer:       /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial:       0198D5BBBFF5202250CFC382CC5EC697553A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number:          08FF
Signing time:             Sat 23 Aug 2025 07:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:48 +0000
Files and hashes:         1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
                          2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: r2x5KZuRdig1jeAKzjWXu/EfVVLK1EslNb3Fgj8UweA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:bf:f5:20:22:50:cf:c3:82:cc:5e:c6:97:55:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
        Validity
            Not Before: Aug 23 07:01:48 2025 GMT
            Not After : Aug 24 07:01:48 2025 GMT
        Subject: CN=a41239f036142dff3540f9e0a302a1a8589f2aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:fb:1a:95:0d:01:0a:5f:ac:c2:ce:1c:71:
                    e2:9b:fc:50:3e:1c:9e:47:53:ec:37:46:68:ca:35:
                    28:c0:87:7d:5e:bc:84:ee:ac:51:7d:c7:31:9e:8f:
                    4f:1a:dc:65:a9:97:9d:40:50:69:16:bd:03:c2:02:
                    08:43:a2:2d:e3:90:99:5b:fa:b3:1e:28:76:7f:70:
                    0c:aa:cd:0b:ad:0f:87:4b:73:27:fa:a5:46:c1:20:
                    52:49:48:6d:43:1c:04:0b:57:3a:15:15:4c:d9:ed:
                    02:f2:a8:87:62:a2:7f:0b:0b:d1:3e:61:8f:6b:5c:
                    e8:69:ae:97:f8:59:0e:0e:a8:e4:da:0c:0d:a1:78:
                    7a:ff:89:b5:2e:88:65:20:28:3a:f2:78:bb:96:a5:
                    c2:03:5f:57:bb:16:c2:83:e8:3a:e6:91:42:1a:49:
                    02:c5:05:18:e8:20:90:c7:26:7d:41:15:bb:52:08:
                    85:53:a8:0f:04:2e:e5:07:63:76:2c:cd:f9:85:ca:
                    41:03:62:73:c6:4c:8c:34:49:5d:4c:4d:9a:73:e4:
                    22:61:36:ef:83:33:a8:c4:34:6e:eb:cc:44:0c:18:
                    68:29:8c:19:ba:fd:de:d1:04:58:2e:8a:42:3f:7c:
                    33:d2:76:93:ca:7d:43:84:0e:13:63:75:e8:b4:8c:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:12:39:F0:36:14:2D:FF:35:40:F9:E0:A3:02:A1:A8:58:9F:2A:A5
            X509v3 Authority Key Identifier:
                keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:de:9c:8f:b7:13:3e:eb:2c:7b:a1:e0:76:a3:64:52:19:53:
         7e:6a:9f:93:d2:80:26:08:b7:f9:e0:d7:37:d3:8d:65:7b:b8:
         11:7a:29:2b:c1:bc:38:13:99:59:df:e4:e1:31:23:5b:55:19:
         9c:56:90:9b:b6:c9:75:58:9d:c9:b2:ba:84:48:ad:ab:a6:13:
         57:91:a6:03:60:cc:f5:94:9b:ad:af:89:fe:4c:82:ac:9d:f3:
         ad:46:30:4d:f9:75:2c:b9:8e:9c:f5:5c:47:70:38:b0:e2:30:
         44:9f:2f:7a:1d:50:ee:a3:64:5b:e8:43:df:92:4a:31:17:d2:
         d1:cb:58:6b:1e:3d:89:8d:e0:ec:03:48:b0:53:fe:dd:bc:b3:
         bd:f0:a0:01:93:a9:01:fd:f5:f7:e9:3f:69:a2:92:60:d4:b3:
         18:b5:80:5c:8c:29:36:f0:51:f8:2d:2f:12:a9:14:04:ae:d6:
         b4:ae:80:80:5a:d5:0a:48:b0:73:b2:fe:b0:a7:bc:f8:78:24:
         9d:2d:16:65:15:85:08:77:85:2e:fe:66:75:01:3e:c6:e9:bf:
         a1:38:fa:83:ad:59:79:2f:89:4f:d5:da:4b:98:94:56:3a:2b:
         31:3e:41:cb:21:b1:9f:1c:47:be:16:a1:e0:7f:de:d8:d7:16:
         85:1b:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:31 2025 by rpki-client