Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File:                     UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier:          y8AMQnU9MA3DBw/9qr7B1wBfENzkSHJhksndow4mtMc=
Subject key identifier:   40:20:6D:C3:B9:D7:DB:86:1C:8C:2F:A9:0B:E8:7C:DB:47:A1:02:12
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       0197B70F0E279E2A865F262FD40504A3E992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:46 +0000
Files and hashes:         1: L27R15PpwOrseUIl0bvCnFwws2s.roa (hash: D/qY8BujaGg4Lgye4hDMzpmCE3IJ8h3XVyZtL65ycpQ=)
                          2: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: GQm/n1A2Zh8qWoXaqBf8nD2Gu9QkYr/bDfRA0ybi05c=)
                          3: pRF0g-KmjQVzQy4b6X1bq_CpEUE.roa (hash: fou9eP6aKJvlZgNY8H8VBsOY1ef+bJJW7cLSICuAHvo=)
                          4: qY-nefcH-LOOVfCQihz5CCt5mqI.roa (hash: Dn21UEBAZW+JYaxSGEnZx/UyFGhOmUarhMAoNzBQGQ0=)
                          5: rFlugNGr-3DyDG3Ypn6kJRgihYw.roa (hash: Moz7baZEmGb60gs946/SMPJbRzqsgdeQtjmQD/8Bfj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:0e:27:9e:2a:86:5f:26:2f:d4:05:04:a3:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Jun 28 15:01:46 2025 GMT
            Not After : Jun 29 15:01:46 2025 GMT
        Subject: CN=40206dc3b9d7db861c8c2fa90be87cdb47a10212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:d1:4d:c2:fd:f4:66:e4:20:a2:ef:7b:e2:
                    13:21:38:36:45:b6:64:97:54:77:31:81:f9:91:17:
                    b6:a8:9e:ea:16:d2:4d:ae:02:72:f7:c5:fd:c5:1e:
                    9f:51:c5:f4:21:b3:f8:26:07:c5:72:0f:37:15:f8:
                    63:53:36:7e:6a:0d:ea:4f:7e:d3:7b:07:6f:5f:02:
                    35:46:15:16:89:34:1d:0f:26:a3:d6:d8:72:58:5a:
                    79:28:99:27:0f:75:e9:67:60:7e:0f:1d:31:de:bd:
                    25:b7:a3:3e:04:18:b2:61:72:9e:5c:29:86:fa:26:
                    ec:7f:74:a5:31:ab:e6:01:31:eb:85:36:33:f4:df:
                    c9:10:92:94:d9:79:f0:50:be:07:ea:cb:95:5d:b8:
                    d0:07:02:c4:69:0b:1c:52:82:c1:7e:58:51:eb:37:
                    22:1f:30:41:7d:31:af:40:07:87:83:4c:28:19:c4:
                    76:76:fa:f4:d7:75:4a:5a:b7:dc:49:0f:fe:59:66:
                    5a:8a:6c:76:29:70:81:bb:8c:c9:f2:74:d0:03:bb:
                    f0:86:86:97:49:73:5f:42:fa:cd:49:56:ea:50:98:
                    64:dc:be:42:fd:59:8e:ba:b0:ef:b1:61:93:87:bf:
                    fc:e5:ac:37:b9:a9:69:04:9e:d4:8f:01:14:65:58:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:20:6D:C3:B9:D7:DB:86:1C:8C:2F:A9:0B:E8:7C:DB:47:A1:02:12
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:77:d6:df:eb:b5:fc:12:e2:c0:a2:0b:5e:8e:5f:0f:58:e3:
         0d:42:f9:e1:1f:00:91:d9:46:ab:95:62:4d:fa:f9:a6:1f:fa:
         c7:ef:d8:88:b6:4e:b0:05:77:64:5e:08:d8:fa:b1:31:8b:19:
         14:01:16:f2:3e:3b:1b:65:01:b1:d1:f9:26:fe:c9:a6:71:c1:
         5d:96:e0:c6:43:3f:02:19:67:92:3b:d3:62:6b:e7:20:06:11:
         73:90:73:04:00:39:d0:94:c2:a3:77:45:22:b7:9b:55:b0:fd:
         cf:38:40:38:ee:52:9f:ff:3d:ba:84:d6:f2:b3:8f:8a:2f:90:
         26:6f:c9:8e:19:f2:64:1b:c4:b1:74:b5:58:1f:36:c4:9d:6b:
         01:89:9a:66:5d:ab:f9:56:51:f4:25:c6:94:01:c8:41:f2:f1:
         6b:e0:df:06:52:43:b1:de:f2:1a:4e:bd:eb:d3:41:0e:0f:26:
         93:c3:f0:00:10:0c:8a:84:ce:e2:57:9b:14:ec:d8:39:a6:90:
         55:a3:67:2f:ea:f9:48:d0:f8:e3:28:8f:62:e9:e2:54:d8:a2:
         10:65:ac:99:b7:0b:e8:43:03:27:46:c3:4b:16:cf:ee:80:4e:
         bd:1a:e2:a5:d7:23:a4:23:4f:d7:e3:26:86:c5:78:57:20:03:
         05:11:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:29 2025 by rpki-client