Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
File:                     elUMgGW_YDP8xqOwOBPvknGSQZY.mft (raw, json)
Hash identifier:          dRmdtOSXFRAX6xeqvc1BnEHB3iTVgMdY3gt5ff7w0nY=
Subject key identifier:   BE:04:B1:2B:33:37:34:6B:8C:8A:DB:94:96:D3:6D:2B:13:6D:EF:17
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Certificate issuer:       /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial:       0198D54E0666AF27408FD5D051FE3D1D426D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
Manifest number:          0AB3
Signing time:             Sat 23 Aug 2025 05:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:57 +0000
Files and hashes:         1: 8bm2v05Cci050GG81KJuy05pI_A.roa (hash: WQq4H/F9fltXEKAzp88xq0uJAhnzAkfYy8vG0Rs7Ric=)
                          2: MIcKbcX6sCg2UYL51k9PfAb2yXk.roa (hash: kvxBXVnEalI9jTyDI+HBKgmRDyoiQHFIPceL8IvKfYg=)
                          3: YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa (hash: VvBURRBsPT2z47HjiEc1H7dnCFoGIcl2xyHs5PJifoM=)
                          4: elUMgGW_YDP8xqOwOBPvknGSQZY.crl (hash: aiSFQLxulJLDWSb0n5+FIY2YJ9O4oQsVFKqWGqiVzM4=)
                          5: lwcaxHGxZGYqPpFywMXAQis0_48.roa (hash: bvDYr9v7hEAaIJ3YVNoznlJECQRudV3izaNo7DTPlvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:06:66:af:27:40:8f:d5:d0:51:fe:3d:1d:42:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
        Validity
            Not Before: Aug 23 05:01:57 2025 GMT
            Not After : Aug 24 05:01:57 2025 GMT
        Subject: CN=be04b12b3337346b8c8adb9496d36d2b136def17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:f9:20:48:df:d6:f1:2b:6b:e9:2f:73:81:
                    49:3a:11:d8:5a:d2:da:21:f7:be:46:37:76:d4:4e:
                    d9:15:3e:ff:07:1b:17:2e:e5:4f:87:85:63:57:c6:
                    a4:7c:49:2c:5e:44:28:7b:a5:c1:c9:37:85:6b:21:
                    55:9b:6f:48:aa:a2:84:3a:15:38:79:a2:c7:61:08:
                    0b:1b:4a:71:76:bd:c5:9b:61:0a:fe:99:46:54:46:
                    d5:ca:06:73:fa:5a:00:b9:a3:63:2d:b0:c1:57:b7:
                    4f:6b:bd:ff:13:45:8b:9d:2c:de:a8:d0:48:8f:f1:
                    17:7b:29:e6:0d:d5:8e:1a:03:a0:18:f6:22:b6:36:
                    59:a1:9e:bb:f3:18:f9:57:55:99:8b:7f:33:e8:a6:
                    d1:cf:b5:fe:24:bf:2b:ee:44:b4:c4:10:7b:a5:69:
                    34:fe:b3:bf:4a:8c:cd:6f:9d:57:a9:fe:5c:76:ab:
                    47:cf:4a:8e:1f:d8:32:fb:a6:83:b5:6f:a4:7e:86:
                    e8:af:78:aa:19:d1:37:89:10:fb:93:8e:a7:48:7b:
                    89:67:e1:a0:55:14:17:c2:d3:3f:ea:49:9b:70:5d:
                    87:89:5f:1d:b1:00:89:e1:b0:4e:7d:87:fa:4c:d1:
                    bb:25:19:59:19:34:27:73:38:e7:f2:69:0c:78:b1:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:04:B1:2B:33:37:34:6B:8C:8A:DB:94:96:D3:6D:2B:13:6D:EF:17
            X509v3 Authority Key Identifier:
                keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:98:4e:bc:e5:b3:49:52:85:e8:70:a8:68:01:c1:a7:b8:31:
         e1:a4:95:5f:87:31:91:6f:c4:38:13:da:b8:ed:1d:15:70:a9:
         d2:79:1f:a8:de:bd:70:b7:cb:e2:0e:cb:52:0f:ac:79:e2:86:
         45:76:35:ad:6a:d3:22:98:86:a2:ea:f5:8e:5d:93:b9:b8:f0:
         5a:f3:58:96:04:b8:1c:40:f5:40:69:64:ad:82:89:98:8b:7c:
         b8:d3:0e:66:2a:46:ec:f0:d0:91:d8:e6:5d:09:e6:a1:08:45:
         24:ae:5d:9b:06:78:75:53:88:77:f3:5e:9f:b7:f0:24:c7:de:
         1b:95:ac:38:69:bf:af:55:1b:a9:a3:f5:a7:b7:7c:0d:71:81:
         94:c3:fc:2b:5a:df:0e:31:c9:b1:a4:8c:bb:5f:49:26:b1:e6:
         42:ee:f6:ec:3b:86:4e:e1:74:da:5b:d4:87:52:fc:d0:ca:65:
         bd:1d:7d:7b:05:ea:f6:29:d6:58:47:9c:9c:00:55:ac:49:0a:
         4e:28:17:ba:0c:65:7b:6a:cf:b2:01:82:c4:b8:9e:f8:b9:d2:
         ec:3c:ab:15:ec:3a:72:ef:26:69:fd:72:89:c9:b5:97:85:90:
         0d:15:a4:3b:92:db:7a:19:cf:75:8e:19:e2:ae:68:40:ba:ae:
         02:f3:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:11 2025 by rpki-client