Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File:                     UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier:          1Z0InuPixWB4FcmcsaSdEb62jzkI4Lbeco9Eq/d8/ZA=
Subject key identifier:   CE:06:9F:C7:17:AC:BC:3B:18:7C:79:C4:2F:60:AC:F5:7F:00:C7:6D
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer:       /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial:       0198D6980C57FCBB4A6290C982510D20868E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number:          0F22
Signing time:             Sat 23 Aug 2025 11:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:25 +0000
Files and hashes:         1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: cxaJqo8NpXQKyHlF/g75bRSPQiAZHoRYRVzY2gcLRQ4=)
                          2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:0c:57:fc:bb:4a:62:90:c9:82:51:0d:20:86:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
        Validity
            Not Before: Aug 23 11:02:25 2025 GMT
            Not After : Aug 24 11:02:25 2025 GMT
        Subject: CN=ce069fc717acbc3b187c79c42f60acf57f00c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:8e:ac:ed:89:04:bd:ca:69:65:21:f0:ba:
                    e5:20:22:c7:16:64:b8:a1:ca:ef:af:ad:fe:9a:7e:
                    35:b6:bb:82:a2:33:b6:d2:59:2d:34:ad:d9:a7:ce:
                    73:87:b5:82:d2:7c:15:e0:12:32:15:c8:2a:2b:da:
                    ec:dc:00:3c:b4:aa:17:b0:2b:d3:ff:6b:09:3c:5b:
                    55:53:5d:1e:83:b0:11:c7:be:91:86:39:25:cf:5e:
                    e1:7f:91:e7:3a:ad:fd:b9:b1:8e:95:b1:52:0e:70:
                    53:ef:09:33:c2:6f:78:b5:d4:5c:d9:26:d1:51:3b:
                    10:13:bb:22:9b:20:8e:22:51:77:91:34:49:a3:7f:
                    33:e3:fc:93:93:07:e5:47:bc:bf:38:1d:c2:c5:26:
                    0a:32:13:9e:5e:7f:de:5f:77:23:60:f2:8a:7f:ec:
                    62:0e:4a:4e:e0:8f:81:a4:11:c2:60:5b:cf:5c:1a:
                    9b:a9:8c:cf:b1:2e:0f:d7:65:34:2a:5c:f2:8b:b5:
                    7c:7b:8f:f9:9d:fb:82:23:d5:47:88:74:8e:80:de:
                    6a:c9:31:b4:df:81:61:5f:8f:1d:f5:52:93:6e:65:
                    44:33:19:81:e2:b5:92:33:d6:ab:85:93:21:05:e5:
                    87:0d:6f:6f:e8:7a:b0:b7:85:01:3c:b0:a0:67:3d:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:06:9F:C7:17:AC:BC:3B:18:7C:79:C4:2F:60:AC:F5:7F:00:C7:6D
            X509v3 Authority Key Identifier:
                keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:c9:46:81:6d:bc:9a:1e:d2:48:cf:f3:95:5e:f5:fa:47:
         5f:d5:6f:1d:0a:5f:bb:9f:24:5f:8c:d0:ab:92:3f:0c:3a:3a:
         a2:1d:2e:cc:43:49:65:8c:8f:ea:b4:d4:5b:bc:39:5f:7e:c4:
         c0:e0:35:cb:28:0c:be:f0:22:63:d8:bc:43:92:24:7b:13:30:
         50:09:41:1c:14:6c:bb:9e:ee:f7:9a:29:07:a1:84:5e:1d:fa:
         d0:04:0d:fa:01:4e:7d:cd:44:06:8a:93:2a:c7:bc:63:20:54:
         33:56:82:c6:a9:0e:4e:b8:2f:0a:9b:a5:84:65:75:04:17:0d:
         2e:c3:eb:f0:40:c1:d3:ff:12:7c:8e:9e:37:ec:f8:f4:79:2c:
         dd:51:70:d5:68:48:a3:2a:9d:b0:71:12:9d:d1:f6:16:1f:44:
         18:09:8b:18:aa:3b:4b:e1:26:bd:1f:98:c3:4c:ef:b1:24:48:
         67:6e:9e:8f:6a:dc:75:9c:0e:93:cd:11:79:3f:cc:65:d9:5e:
         e4:14:a7:56:9f:43:b8:da:d8:fb:2d:ae:e1:d7:1e:4f:90:87:
         69:21:91:cb:c9:d2:19:28:2c:d1:4d:18:45:6c:fe:d8:27:a8:
         d9:3c:68:d9:02:7e:7a:5e:db:9c:57:fa:a5:1d:da:e9:21:7c:
         06:c1:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:13 2025 by rpki-client