Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File:                     UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier:          MIqiLdCZZVzdra2z/jxJwfzwBtJWMxh05xnc6jTr0Hw=
Subject key identifier:   63:69:32:FA:FC:20:6F:1F:21:1A:45:5D:85:F3:8B:76:51:72:84:FC
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer:       /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial:       0198D5F123823E2DC271B3C16EA380D93047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number:          0503
Signing time:             Sat 23 Aug 2025 08:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:06 +0000
Files and hashes:         1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
                          2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: X5+Ta5k8aMhvmOsB2l9quLbpssyEDQfrQfQp6gSEg7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:23:82:3e:2d:c2:71:b3:c1:6e:a3:80:d9:30:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
        Validity
            Not Before: Aug 23 08:00:06 2025 GMT
            Not After : Aug 24 08:00:06 2025 GMT
        Subject: CN=636932fafc206f1f211a455d85f38b76517284fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:84:03:82:60:d9:74:0c:8c:07:e4:aa:f8:78:
                    a1:e1:4d:9e:7f:58:e1:4c:5a:08:b6:63:6e:7b:8f:
                    fe:f1:4e:50:ce:0d:05:28:b9:ed:3f:5c:2c:6b:79:
                    4d:d3:ca:11:b6:56:77:17:bc:8c:43:e5:5f:2d:d6:
                    6f:62:80:fd:39:d7:2a:5f:c2:46:12:13:51:95:35:
                    10:7c:0d:80:8f:c5:d7:2f:5a:49:81:31:39:61:84:
                    28:12:02:8a:08:f1:ed:38:e1:1c:81:3d:c4:90:78:
                    65:3c:6d:d0:40:21:31:d6:41:67:5b:27:c7:af:0f:
                    33:15:d1:20:06:37:16:67:0f:38:d9:c6:a6:ed:fe:
                    32:01:5c:e5:8b:a2:c9:31:50:62:91:41:81:4c:25:
                    db:5b:49:97:16:cc:f2:f5:c6:eb:cd:d0:fe:95:c6:
                    1b:9a:48:01:46:e3:dc:bc:ae:e2:bc:bc:b2:ca:45:
                    b8:95:f3:bb:9f:ae:3f:06:76:a1:25:20:59:9b:10:
                    96:20:d5:15:c8:eb:4b:8d:2a:14:d0:c6:3a:e6:a0:
                    fb:2d:72:84:0e:44:3e:92:b8:1a:e7:cb:6a:81:aa:
                    38:df:28:00:a1:dc:da:b6:32:c0:ff:d1:55:ed:50:
                    2b:8a:38:32:36:06:3d:2b:c1:4c:fc:b6:ee:12:74:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:32:FA:FC:20:6F:1F:21:1A:45:5D:85:F3:8B:76:51:72:84:FC
            X509v3 Authority Key Identifier:
                keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:8a:7f:0d:cf:ee:31:31:b6:12:e3:eb:45:32:38:3d:d8:
         2d:37:c4:0f:f6:02:f0:f3:77:6d:55:29:7e:13:9a:9c:00:72:
         6d:80:ba:47:63:fb:64:6b:50:81:75:5d:ec:35:a1:31:39:e4:
         d7:14:3e:30:87:dd:98:c4:d3:31:b4:01:1d:62:c2:af:34:7a:
         5f:81:3a:4c:d5:13:91:2f:54:62:88:14:e2:39:80:e9:d2:54:
         5c:9d:5b:e7:d2:66:fb:79:a8:89:b4:14:b7:36:db:68:4e:17:
         61:8c:d8:8c:76:4d:e6:43:47:a4:1a:fc:7c:0a:2f:9a:a1:91:
         51:b5:df:d3:1e:23:dc:46:b9:db:ae:a7:ef:c8:2f:5e:f1:3e:
         81:03:d8:ef:a4:05:63:e6:cf:d3:3e:8d:14:1e:8e:e3:19:6f:
         ae:e7:a8:b8:b7:42:37:2b:b4:5a:1c:78:32:bc:bd:84:74:66:
         ae:9b:a8:d6:e8:ec:8e:3c:df:95:dd:2b:a4:4e:81:c4:33:c8:
         c1:85:c0:a5:b5:53:73:eb:e1:71:0c:33:25:33:ed:fc:08:96:
         a2:3d:ec:05:50:03:af:28:e7:42:77:b1:3c:52:71:8a:64:a5:
         90:ac:5e:2e:ea:ca:55:09:57:5f:42:8a:fa:2f:d1:a1:3a:0a:
         7a:05:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:42 2025 by rpki-client