Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File:                     uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier:          DUKUqs6iR198zaosuGfrzFJJqdL44vzX2CeEQCIy7pE=
Subject key identifier:   41:77:81:08:31:BA:21:49:0A:8E:9D:24:88:DA:B2:8F:CB:92:79:87
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer:       /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial:       0198D6608DAB15666F1C3D16ABD4A6328615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:48 +0000
Files and hashes:         1: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: o+FMkmzEmoM/8WvQ/Gr+LhtHZ4n7XKinTzX1uHVYAok=)
                          2: xDqVZVtr_9EDZVCNYlX0mCSaras.roa (hash: caUW0pjP9cTTEhVK0Pma740AnxF0QCHN6wxQ3vthDWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:8d:ab:15:66:6f:1c:3d:16:ab:d4:a6:32:86:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
        Validity
            Not Before: Aug 23 10:01:48 2025 GMT
            Not After : Aug 24 10:01:48 2025 GMT
        Subject: CN=4177810831ba21490a8e9d2488dab28fcb927987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:e3:21:78:d0:c9:aa:10:75:bb:41:a7:d5:
                    fc:ea:8d:3d:49:15:eb:13:42:3d:2c:de:5a:de:c4:
                    df:fc:5b:2d:ca:bd:48:21:48:a7:87:da:0e:ec:2f:
                    a6:30:26:44:3a:53:da:bc:51:f3:75:8d:fb:4a:97:
                    5e:47:8e:4d:6b:bc:c6:9d:65:b8:0a:30:eb:dc:b7:
                    4e:a8:fc:2f:ef:de:ee:38:29:36:1a:b9:c3:6e:ae:
                    95:49:4d:eb:d9:6e:5b:64:c1:5b:2c:35:c3:8d:1c:
                    a3:d6:84:fb:1b:74:e1:e3:9f:b3:f3:fe:1b:64:a4:
                    67:19:a8:5a:09:9d:b0:a1:6a:31:48:70:94:cc:2e:
                    51:96:16:c4:a0:e1:37:c3:42:97:be:64:3f:4f:4d:
                    0f:f4:16:da:06:1a:41:c2:8b:dc:f9:d4:76:f9:58:
                    5d:d2:78:41:eb:bd:ce:02:18:05:ed:71:9b:21:93:
                    24:c5:e4:39:97:93:0e:e4:65:ba:65:1b:95:62:fc:
                    57:cb:9b:bd:41:de:5f:b1:4f:b0:25:ce:91:42:1b:
                    29:38:e1:e5:d3:37:bc:7f:01:91:da:e7:2a:60:a4:
                    01:f8:9d:36:7e:d3:6a:69:06:43:87:8b:a4:f3:4f:
                    95:1a:40:fd:46:d2:44:c4:f6:1a:ca:58:6a:97:22:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:77:81:08:31:BA:21:49:0A:8E:9D:24:88:DA:B2:8F:CB:92:79:87
            X509v3 Authority Key Identifier:
                keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:33:fe:88:94:38:20:95:25:7f:51:67:20:0e:40:87:68:
         7a:aa:cc:16:41:b6:9c:79:54:b7:0c:5c:63:2f:59:38:5d:ee:
         a3:b0:2c:99:d4:65:3d:f6:50:13:c2:13:39:ac:a3:a6:a8:f5:
         b2:73:04:3a:6d:de:50:fd:72:cf:f4:89:d6:17:85:7d:c2:f0:
         14:0d:ea:8d:e9:16:f3:14:f4:38:ce:2b:15:27:c2:51:dc:f0:
         b5:59:0b:ba:7d:a2:c6:4d:ab:64:39:aa:7d:40:e4:be:4a:f0:
         7b:01:f7:e0:ec:2a:91:17:f8:fb:ea:00:4d:9a:66:05:ec:74:
         3b:45:2e:d6:5a:7d:3f:39:ea:a8:1e:15:9c:ca:e6:66:c0:34:
         5a:1c:c8:6b:bf:93:49:6c:a6:33:71:ca:e8:3f:c9:e0:5b:7b:
         51:93:7b:41:c5:22:46:e1:68:ce:b5:23:db:55:07:e3:76:c1:
         69:42:e4:26:74:81:37:f2:68:dc:f7:25:ba:97:70:0a:4e:b7:
         8a:2f:1a:64:7c:b4:08:07:4e:51:f9:69:ee:ee:c0:2a:81:8c:
         90:10:29:39:f5:94:e8:1e:34:29:7c:62:9a:c5:11:e5:6f:01:
         5c:c0:01:a1:aa:fe:0c:9b:82:fd:a3:31:7c:2f:eb:ce:91:a0:
         c0:88:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:17 2025 by rpki-client