Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File:                     uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier:          zWhfa//Manw018XCF2p1boUyjv++0XkyUGyDw71kL40=
Subject key identifier:   9C:F7:FA:51:65:06:4B:2F:39:10:E0:5B:58:8E:40:A7:90:2E:53:11
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer:       /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial:       0198D8518140B0635C9D4221486C351CC883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number:          0100
Signing time:             Sat 23 Aug 2025 19:04:36 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:36 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:36 +0000
Files and hashes:         1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
                          2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: e5Akx/8GlywAgn2SdQ0rhzakPDwFIlpOrAfTBvfOclw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:81:40:b0:63:5c:9d:42:21:48:6c:35:1c:c8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
        Validity
            Not Before: Aug 23 19:04:36 2025 GMT
            Not After : Aug 24 19:04:36 2025 GMT
        Subject: CN=9cf7fa5165064b2f3910e05b588e40a7902e5311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:73:22:d5:bf:b8:70:88:4c:c3:41:0f:15:
                    f3:a5:54:23:63:d2:c0:6c:da:e2:48:95:01:4c:c7:
                    f2:db:3b:90:20:06:4a:a4:76:9b:96:60:75:10:88:
                    ab:7e:27:4b:de:65:07:a5:67:85:d4:d0:00:27:cb:
                    cc:57:db:26:8e:f4:08:82:39:bf:39:7c:a6:bd:b9:
                    eb:6b:31:9b:3d:45:fb:72:a2:0e:43:ee:e3:92:c2:
                    1d:b8:3e:29:80:21:91:ec:bb:85:93:95:34:06:57:
                    77:45:05:ef:32:25:61:a0:3c:41:b4:3f:90:7f:19:
                    3c:d4:a4:1c:11:2b:00:75:b3:5d:c4:54:b3:d8:c2:
                    08:af:c8:1d:12:87:87:ac:9f:31:56:61:f5:9e:12:
                    7e:da:55:c4:d4:83:5b:34:a7:91:e3:fd:6c:46:a6:
                    9e:4c:63:bf:b8:94:4a:18:44:6e:78:1b:ea:22:98:
                    a5:cd:cd:5b:42:6d:03:d7:98:5f:d5:92:19:ed:86:
                    c0:e4:28:09:2e:c0:46:29:c8:b4:63:dd:af:8b:88:
                    35:2b:68:c6:f7:ff:14:8e:28:84:da:b6:65:9d:31:
                    80:ac:16:9b:55:4f:ff:41:34:1c:95:9f:10:5e:f2:
                    a8:48:1e:a4:3e:63:71:93:a7:47:9a:ca:bd:e4:42:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:FA:51:65:06:4B:2F:39:10:E0:5B:58:8E:40:A7:90:2E:53:11
            X509v3 Authority Key Identifier:
                keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:3c:2e:1f:9b:c9:51:e7:53:e3:b1:42:b7:91:7d:10:15:
         a2:e8:f9:9b:a3:fb:21:26:66:34:3f:e1:e0:db:44:cc:79:91:
         6a:8a:56:5c:32:4d:dd:e2:af:b6:09:38:73:2e:65:32:cf:bd:
         7a:a9:9a:a2:b5:59:95:6c:a8:f6:5f:a0:3e:74:27:cd:5a:ad:
         aa:06:ed:ed:4f:65:53:7f:48:16:6b:c9:7b:93:9e:f5:55:55:
         35:75:31:89:7d:18:67:10:03:37:32:19:a0:f2:f3:d3:6b:57:
         31:c7:a8:9a:c4:89:4a:4b:b2:fa:4c:f6:5b:bf:bd:2a:4a:03:
         71:c9:1e:26:f1:14:74:75:3d:9e:9e:65:78:3d:10:1d:41:f8:
         78:5d:fc:40:ee:1d:ef:d6:ba:e1:85:1f:b1:98:2b:2c:4c:51:
         a8:27:31:9f:11:88:3f:f2:ae:ba:2a:9d:2c:de:99:bb:75:20:
         81:bd:a9:13:e1:d3:a6:43:48:51:49:ee:c8:8a:a5:af:72:a0:
         a3:59:23:bf:32:ee:e8:3f:81:b2:fc:c8:26:81:f8:89:b5:d8:
         de:ca:0d:60:b2:2e:41:fd:8f:9e:3f:94:63:c8:bb:67:c1:c3:
         4b:ef:10:d0:e6:db:3d:f3:53:4b:94:36:86:7b:c0:58:ad:88:
         62:5d:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:09 2025 by rpki-client