Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
File:                     UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json)
Hash identifier:          R9azvUySyBYEQvUlhWQ/2Fbtf9EwgFAKuCUZpj2S1OY=
Subject key identifier:   43:4B:22:1C:32:B0:B9:8A:10:75:18:74:0E:B4:3B:35:84:31:39:C7
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Certificate issuer:       /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial:       0198D5F1D2734483BEEBF44F90F3953B083A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
Manifest number:          1651
Signing time:             Sat 23 Aug 2025 08:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:51 +0000
Files and hashes:         1: 680g9QNm1e-ThM3i1QaScS4bSbw.roa (hash: npGuthO7au6knt0v4xQS1R1nwKbXpzRRvDz8rwf17yQ=)
                          2: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: lNdA/4d6/DgWQb9lqoYT4rEdmpBPSpElVkJUBaxi+KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:d2:73:44:83:be:eb:f4:4f:90:f3:95:3b:08:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
        Validity
            Not Before: Aug 23 08:00:51 2025 GMT
            Not After : Aug 24 08:00:51 2025 GMT
        Subject: CN=434b221c32b0b98a107518740eb43b35843139c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:0e:8a:b0:21:f5:16:b0:04:59:6d:fc:41:
                    fd:07:15:dd:fd:19:3a:33:67:e0:34:01:bd:33:6c:
                    74:7e:f9:1d:ef:23:1a:8d:49:06:a4:f8:59:2e:de:
                    eb:3c:18:68:44:79:e9:57:13:7f:94:b7:25:f0:4a:
                    fb:12:d6:f0:4d:d5:85:8b:bb:77:56:57:54:a7:2f:
                    d0:36:92:d8:32:af:10:f6:e9:4c:9f:ef:4e:9a:13:
                    1f:09:ec:29:85:27:bf:93:6f:91:99:42:f4:dd:50:
                    22:3e:42:33:6f:03:4e:eb:20:39:01:67:ef:5b:ff:
                    4a:0b:e5:be:4f:f7:de:61:5c:a3:65:f2:d9:62:c4:
                    9b:89:7e:d9:fc:71:31:3a:4f:0f:5f:fe:9d:02:e8:
                    78:97:2b:c6:16:23:2b:46:a0:75:27:cb:82:cf:b8:
                    7d:6e:3c:25:35:3f:57:ba:06:2f:af:c2:e2:b4:58:
                    18:09:a0:3a:09:1c:4d:2d:65:c6:74:49:94:34:77:
                    1f:ed:a6:b6:ab:c1:2c:83:f9:69:72:4b:58:03:52:
                    ee:a7:95:05:2a:ed:e8:f4:f7:64:3c:e0:42:a7:d6:
                    a3:b6:f7:d4:db:ec:b2:fe:6d:83:bd:fb:0b:bb:5c:
                    6f:3b:c9:31:5b:73:e1:10:98:d2:3f:db:19:27:3c:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4B:22:1C:32:B0:B9:8A:10:75:18:74:0E:B4:3B:35:84:31:39:C7
            X509v3 Authority Key Identifier:
                keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:94:f2:d6:50:a6:78:fb:f8:d2:2f:18:0c:3b:4c:4c:8a:c6:
         fd:43:e3:e9:3e:15:82:3e:66:fb:65:78:7e:28:a1:d6:31:2d:
         e0:51:e2:83:f0:ee:a7:88:0f:f4:bb:e9:2c:0f:bd:0c:eb:c2:
         fb:e0:ad:71:dd:0e:a0:e7:19:e2:2c:75:61:c7:1f:0a:68:c4:
         f9:4b:bd:94:31:18:fd:0f:f1:b5:53:55:14:76:bd:9f:d9:05:
         0f:7d:0f:ee:25:8b:7d:79:99:ec:61:9b:6d:d6:04:8d:0c:14:
         8b:6d:b4:e8:ba:0d:4d:5e:ac:ca:ef:c4:5b:37:73:7b:c3:90:
         47:8d:e1:5e:37:fe:ab:2b:f5:14:50:91:7d:db:f7:f9:61:57:
         e5:42:38:11:0b:56:52:6c:90:f1:f9:10:a4:53:6d:87:2c:ef:
         c6:11:fd:c0:1d:9f:62:08:65:46:c4:1f:15:49:09:b6:95:29:
         34:22:84:15:11:d1:76:ca:6a:bd:eb:cc:a8:72:62:2d:c8:66:
         12:9e:f6:b9:9d:e2:ef:aa:ee:f4:1f:53:5f:b0:de:26:5c:2e:
         8f:a4:18:e4:36:fc:4d:7d:f6:19:5c:9a:2e:a4:dc:db:60:bb:
         c3:12:99:38:cd:9d:8f:5e:5a:d3:0b:d4:82:50:17:aa:4a:9a:
         1e:c1:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:03 2025 by rpki-client