Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
File:                     UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json)
Hash identifier:          nD/Rn1rFuInbZ2/D55Lh0KTkqC+OmQHx32RnGeekoso=
Subject key identifier:   A7:8F:34:72:40:A8:13:F6:CE:87:FB:63:F5:F4:7C:B0:86:41:BC:3F
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Certificate issuer:       /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial:       0198D6CD9F238BF6A0B1484A1F6080972C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 12:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:56 +0000
Files and hashes:         1: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: OW3eD3peOyrU9K3YqF5cIpfojzhkP+kwiHS/kp0U+dM=)
                          2: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (hash: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:9f:23:8b:f6:a0:b1:48:4a:1f:60:80:97:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
        Validity
            Not Before: Aug 23 12:00:56 2025 GMT
            Not After : Aug 24 12:00:56 2025 GMT
        Subject: CN=a78f347240a813f6ce87fb63f5f47cb08641bc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:95:2f:42:84:1f:04:13:24:12:0f:53:e6:
                    25:7b:d1:b3:39:53:1a:45:e7:c9:4a:d7:fc:0c:61:
                    1a:17:90:88:16:a9:36:49:5e:e3:d2:e5:9c:b8:0e:
                    29:6c:6e:06:43:36:4d:cf:7d:88:ff:21:87:6d:83:
                    d9:f8:d5:39:ef:0e:2c:ab:3e:5f:5c:d4:00:27:79:
                    36:cc:26:4e:b9:77:3c:9a:b9:de:a7:7e:bb:c3:0e:
                    76:f9:e9:5e:6d:e7:c8:ae:19:c1:43:24:0b:31:40:
                    0d:7c:55:8e:cf:c2:7f:8a:00:ba:f8:99:06:82:c2:
                    03:4e:f6:f2:eb:81:2a:56:ac:4b:68:92:57:be:94:
                    0a:2d:49:b2:a4:fb:d4:f8:45:93:61:d5:2e:1b:0b:
                    66:2b:94:f6:e3:a0:d8:71:94:0d:89:9b:21:89:d8:
                    04:63:31:1d:f4:cd:68:a0:59:96:b3:0e:e1:1b:a8:
                    c1:ad:9f:e9:ef:b7:3b:58:a3:5a:2d:f7:a4:ef:88:
                    a0:e3:9e:db:c9:ed:0f:6f:4c:a1:8f:28:5d:ae:55:
                    54:fd:fa:5b:9a:b7:37:8f:a9:7a:c7:e4:ea:a8:0b:
                    00:7e:b0:7c:b0:f3:b4:b4:88:a3:ed:40:e8:ec:9e:
                    f4:0a:e0:d7:19:55:92:ee:e1:a0:e9:fd:95:6d:8d:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8F:34:72:40:A8:13:F6:CE:87:FB:63:F5:F4:7C:B0:86:41:BC:3F
            X509v3 Authority Key Identifier:
                keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:dc:4b:20:93:34:ee:e4:f3:70:34:0e:75:ff:c7:b5:f7:ef:
         1c:df:de:82:9b:19:c1:fd:5b:8b:5f:80:ce:80:15:1d:c3:31:
         95:7b:ab:b4:81:e3:a1:0e:86:f1:39:f7:e6:5a:6b:f2:b4:94:
         3a:d9:e6:20:5d:42:ea:c7:96:1a:d4:ca:7e:9b:4e:0d:11:29:
         dd:8c:b4:c6:62:ab:dd:64:13:ef:9f:23:bb:82:47:ab:39:44:
         df:c1:36:92:f5:4c:e8:92:36:a3:f7:6f:d0:90:6f:8b:e7:2e:
         dd:22:68:32:18:be:0e:c4:30:da:e4:c7:83:29:fa:be:3b:19:
         8e:de:c2:ce:0e:89:f4:16:6c:87:3a:d1:7b:02:cc:a5:ce:21:
         f1:b8:3c:b4:12:db:18:10:0f:b1:f4:d2:d9:05:db:9f:82:1f:
         c7:4f:71:94:6c:b2:50:4d:35:64:78:b3:3c:4c:58:9f:20:f6:
         4f:95:f1:23:86:91:f4:1b:96:37:7d:62:e4:4e:c8:2f:1b:70:
         7e:9f:41:a3:72:d2:6b:7a:91:1c:06:36:6e:7a:d0:f5:dd:1e:
         51:ce:de:a4:ae:ba:67:33:f0:1b:8c:2f:36:75:c0:05:78:25:
         e8:e5:61:8f:ee:2b:d0:0e:c6:cb:92:81:01:8a:0b:39:87:62:
         c8:79:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:04 2025 by rpki-client