Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File:                     Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier:          I4ONZ4at6zCqO+HUy2hlbkKX4yzdcVWgUQQGaBSjoRE=
Subject key identifier:   7A:46:0F:CD:CA:06:90:25:98:D1:0F:13:4B:93:A2:7D:45:51:F4:63
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer:       /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial:       0198D5BB8865AF514E0479EBC2CE74C39D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number:          151F
Signing time:             Sat 23 Aug 2025 07:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:33 +0000
Files and hashes:         1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: ergdZ5AN9piHgcfMFLRAbVuvYB1qH1JNWXZUxkuvRD8=)
                          2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:88:65:af:51:4e:04:79:eb:c2:ce:74:c3:9d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
        Validity
            Not Before: Aug 23 07:01:33 2025 GMT
            Not After : Aug 24 07:01:33 2025 GMT
        Subject: CN=7a460fcdca06902598d10f134b93a27d4551f463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:47:f7:0b:c5:ce:f5:3e:1a:8a:e8:7a:e4:
                    f0:95:ab:7a:79:97:82:b2:69:ad:ce:cb:e8:7d:8a:
                    e3:34:5e:20:f6:10:24:40:32:17:64:58:ca:7c:6e:
                    2c:f4:60:e2:3e:c3:a0:84:3b:63:f4:64:f2:f1:d5:
                    b4:57:3c:ba:0a:53:08:82:a1:f8:a7:00:c5:64:50:
                    06:ad:1a:75:1f:37:18:1e:ed:cd:38:07:5b:a1:fc:
                    6f:31:a3:59:f1:c1:60:63:7d:bc:73:56:8c:ad:9f:
                    14:2b:7a:3f:02:f6:96:01:49:67:4d:01:ee:ea:67:
                    7c:9c:50:e7:86:37:13:ab:5e:bf:dc:aa:18:2e:e1:
                    20:f3:b0:c4:73:d1:97:b4:ae:fc:0d:ee:1d:66:ee:
                    71:53:34:b8:3a:4c:0c:4d:9a:45:71:98:b4:56:24:
                    71:77:49:85:4c:75:b9:ba:03:ad:b4:b9:92:76:d7:
                    f3:4f:9b:6c:33:1c:72:e3:e6:89:b1:46:ad:16:de:
                    aa:3d:9b:f5:de:0d:04:a2:80:56:47:12:e3:29:5c:
                    cd:cb:f5:b8:29:e1:bd:93:20:f1:7c:ec:21:79:33:
                    a6:ba:ed:76:3c:ad:2c:a4:64:5d:94:b7:d8:55:1f:
                    9c:68:03:a5:aa:a5:62:51:8e:65:f3:25:04:e9:8e:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:0F:CD:CA:06:90:25:98:D1:0F:13:4B:93:A2:7D:45:51:F4:63
            X509v3 Authority Key Identifier:
                keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:b6:ea:6e:4d:49:6c:43:14:a7:3e:68:e0:1c:a0:f2:0e:
         53:e3:fd:16:be:7d:37:bc:b1:18:8f:0d:dd:e9:33:86:2b:58:
         c2:fe:84:34:ed:d4:cf:35:79:15:e8:7c:c3:15:46:8d:b0:be:
         c5:0f:cc:c4:7a:ea:5a:58:27:d7:2f:af:fd:a3:9f:44:7b:70:
         18:fa:a0:70:b1:a8:68:77:01:89:61:45:4f:83:fd:6f:a3:48:
         1a:ab:b1:97:78:c6:dd:c5:f2:22:1d:b9:25:a3:03:9e:38:f8:
         10:72:a7:d5:46:ad:d2:62:09:60:55:eb:1c:69:59:21:ad:d1:
         80:3b:39:76:af:99:8e:1c:27:f1:06:cb:f0:52:7e:e4:4f:03:
         5a:08:a1:1a:92:4d:2f:83:35:99:87:ae:c9:f3:29:dd:97:01:
         97:ea:38:0b:8b:b0:cb:a0:d0:eb:6a:65:d5:a4:fa:28:ed:06:
         8b:73:16:65:ba:b8:1f:3b:dd:2c:55:ba:96:0c:ce:5b:8e:67:
         63:a2:cf:2e:33:01:b0:db:45:ef:73:93:83:06:6c:b2:6f:1b:
         4b:29:e2:a3:c5:57:67:50:b0:a2:74:e5:6e:04:2f:5e:ce:3c:
         28:2b:b0:0f:4e:68:a9:99:66:10:d4:73:71:b0:84:44:8c:ef:
         be:5c:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:48 2025 by rpki-client