Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          hv6f4m/3h2LvTAq0w5BTXvmMOkqX0UprEjBal2WuMw4=
Subject key identifier:   FC:78:06:40:03:1B:11:BA:9A:4F:D3:97:51:2C:12:5C:64:11:B4:14
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       0198D583A37D0381DF980A3631D780081928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          0758
Signing time:             Sat 23 Aug 2025 06:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:30 +0000
Files and hashes:         1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: k2U5W03lXGqRHLjeGUcm1kcGHq19VCUIIsfatv88BCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:a3:7d:03:81:df:98:0a:36:31:d7:80:08:19:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: Aug 23 06:00:30 2025 GMT
            Not After : Aug 24 06:00:30 2025 GMT
        Subject: CN=fc780640031b11ba9a4fd397512c125c6411b414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:4c:89:65:71:11:3a:7d:3f:74:1d:9e:3b:
                    93:32:f8:36:d5:50:4e:1d:7a:90:7b:0c:f1:b1:67:
                    8f:55:20:cc:04:bf:df:2f:3b:44:bc:c8:2a:62:77:
                    28:3e:14:d8:e2:2c:d8:c6:ff:ef:bf:04:9c:36:dd:
                    ea:c1:02:18:26:f9:9f:b4:77:20:95:6f:fe:ff:49:
                    f1:1c:9c:bc:08:4e:c1:5a:5a:0d:b0:3c:ed:92:fb:
                    5e:66:0a:96:b6:27:10:b7:c6:e7:a4:50:b7:35:17:
                    60:62:42:25:dc:99:98:a0:63:f7:39:47:b6:bf:59:
                    1c:d4:54:b9:8a:d4:f1:51:dc:a2:72:f8:e8:3f:63:
                    49:6c:a1:42:d2:c1:a3:e5:5b:ee:da:9e:d0:b3:68:
                    c5:46:39:dc:64:7a:81:44:0a:84:d3:4f:ac:b6:10:
                    75:4c:d1:8f:94:2f:b6:12:95:b1:be:db:21:29:c5:
                    69:dd:a8:13:1d:0f:32:1d:73:88:3f:94:77:4f:b3:
                    6d:bc:5a:e1:99:4e:d3:34:ec:c9:e4:a1:fa:90:83:
                    3c:70:5e:eb:f6:08:36:45:63:df:f0:eb:da:52:9d:
                    8d:9d:b8:6e:38:b2:6f:be:f4:7f:40:ea:fb:f6:a5:
                    77:61:42:e5:ff:80:a1:39:b0:fe:32:a6:9d:38:74:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:06:40:03:1B:11:BA:9A:4F:D3:97:51:2C:12:5C:64:11:B4:14
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:cc:57:0d:1a:3d:97:20:e6:9b:f1:38:f5:ab:83:be:a6:
         db:51:e6:e1:65:3b:30:9d:f7:b0:06:cf:c1:7e:58:5c:4f:b6:
         13:4d:d5:2b:cd:c6:02:19:21:e7:f0:fe:3b:ad:f3:e0:6c:2d:
         b0:65:bc:16:83:38:c7:dd:21:f7:5d:3d:d9:ef:7d:2e:6b:f7:
         5d:bd:35:a8:d7:44:71:48:6e:17:b4:78:1f:90:ee:98:80:3a:
         32:52:5d:b8:7c:71:02:ed:7d:ee:93:81:47:cb:c0:71:27:fa:
         8a:ac:94:79:c9:d0:62:54:51:8b:86:e4:88:18:70:f0:a3:1c:
         af:92:67:b7:14:eb:b5:06:79:44:b8:38:4a:53:47:fa:fa:3b:
         cd:d1:00:07:ba:a5:4d:64:c0:73:4b:84:2b:aa:0e:60:9a:94:
         85:e7:43:f9:48:8d:dd:f5:00:9f:d1:f6:40:24:84:b3:72:75:
         d5:60:19:b2:d5:c1:d0:05:eb:2a:f9:66:f1:46:09:97:fb:5c:
         c1:69:09:c0:a2:3c:3c:f6:8c:82:79:0d:32:c2:f3:ea:18:14:
         63:71:60:f2:c5:9a:fd:13:2d:2d:35:cd:2c:00:8d:85:1f:df:
         af:bc:f6:ff:d5:a5:71:2d:07:9e:b1:5a:ca:ca:c2:0a:e4:fe:
         75:ef:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:20:00 2025 by rpki-client