Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File:                     uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier:          VEV2hSji1AYLO362WQlkCkF+geHO306QZtNrX+B0uL8=
Subject key identifier:   EB:4B:36:DF:6E:54:75:A3:D2:FC:F6:9F:3B:BD:C6:D4:62:DA:3B:DB
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer:       /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial:       0198D47421428842AB8293FB1CC22E98236A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number:          0E49
Signing time:             Sat 23 Aug 2025 01:03:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:57 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:57 +0000
Files and hashes:         1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
                          2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: blBKyeT+qXfol40AltTsNZRwvYKEILEEdfx5k8Aq6+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:21:42:88:42:ab:82:93:fb:1c:c2:2e:98:23:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
        Validity
            Not Before: Aug 23 01:03:57 2025 GMT
            Not After : Aug 24 01:03:57 2025 GMT
        Subject: CN=eb4b36df6e5475a3d2fcf69f3bbdc6d462da3bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:98:f1:a1:36:2a:d6:6b:50:06:b0:b7:87:
                    15:d8:a2:30:70:09:a2:42:99:67:c3:4d:35:0f:ce:
                    8f:47:b6:e0:76:5b:99:b7:cc:42:7f:73:57:bc:d1:
                    1f:21:d1:87:6d:b6:81:16:97:96:58:ce:34:13:d7:
                    86:9b:5e:30:97:20:35:4c:0c:fa:e1:b6:8e:17:69:
                    41:ea:f2:f1:07:6b:97:3e:cc:42:e0:aa:1b:d6:79:
                    56:10:7f:86:95:ec:f4:a4:8d:8e:1d:94:1a:5e:4b:
                    0f:18:cc:56:61:cb:13:b6:72:73:27:c4:37:ee:e6:
                    58:e7:23:d3:51:10:0e:31:2d:a7:1f:44:31:8f:05:
                    90:52:1e:15:7e:eb:4a:72:42:6a:8c:1c:c8:43:d8:
                    4b:ff:6f:72:75:da:c9:cc:b0:e2:cc:d5:b5:46:2b:
                    ce:ec:50:52:03:b4:27:ac:3e:3f:50:10:d8:70:8f:
                    19:36:6f:70:28:f2:21:99:eb:a5:12:48:fe:0f:14:
                    f9:64:2c:2e:50:31:54:29:87:f9:2d:ef:8b:d3:30:
                    43:fb:df:df:7c:9a:63:6f:92:5c:fa:df:3f:70:a3:
                    ef:ea:ba:3a:13:11:22:9f:ae:da:a5:96:b7:95:6e:
                    32:e0:b2:69:d3:f6:3c:51:32:00:e1:fc:7c:39:02:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4B:36:DF:6E:54:75:A3:D2:FC:F6:9F:3B:BD:C6:D4:62:DA:3B:DB
            X509v3 Authority Key Identifier:
                keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:95:36:2b:89:2d:70:bd:22:34:e7:d3:6a:90:f8:34:cd:ed:
         44:d7:5c:ab:d2:91:8f:68:a0:80:04:1d:03:8a:96:89:0d:60:
         49:80:6a:0f:75:e9:c8:da:fb:13:31:30:bb:76:0c:3d:f5:37:
         b0:53:6a:1a:85:53:18:2f:7c:36:cc:fd:0a:4d:ca:2c:1e:b7:
         a3:3d:08:88:fb:83:51:bc:cb:7e:2b:be:6a:7d:de:06:f1:0a:
         07:9b:06:dc:44:d9:61:bd:9a:4c:9d:e2:76:20:7b:9b:ec:28:
         b1:7b:d1:16:4f:ac:55:96:3a:a1:c0:a5:92:11:5d:1f:e7:1e:
         7b:00:72:70:25:88:ec:2a:37:a4:78:a1:31:e6:2e:26:54:b0:
         65:81:e7:e0:a4:54:13:ce:03:e1:a7:73:07:f3:b1:80:49:cc:
         71:d6:b7:ec:ad:30:0f:87:2e:29:06:51:ac:37:f8:dc:a8:91:
         6a:10:9d:b5:bf:d2:7e:42:43:f8:41:cb:d0:79:19:6a:11:1b:
         fa:cb:ed:e6:0a:89:b9:f6:08:ad:c4:fe:2c:f3:31:7b:c3:15:
         f5:a6:29:7c:b2:e6:91:45:53:96:bd:55:51:f5:2f:64:f5:4a:
         70:5f:cc:22:1f:e8:b0:f2:58:64:93:a3:a3:a6:3c:de:d4:68:
         9f:c5:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:02 2025 by rpki-client