Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File:                     UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier:          OfAwXS9dfR8P1XvcwmcHlPZtryg4yIO64xQ7OFl7LqE=
Subject key identifier:   87:38:13:68:DA:01:23:F3:BC:A7:33:E0:ED:2D:D3:10:87:6C:E6:B5
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer:       /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial:       0198D4737C3BE24C3B7CE4E77AD32C010DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number:          01EB
Signing time:             Sat 23 Aug 2025 01:03:14 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:14 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:14 +0000
Files and hashes:         1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
                          2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
                          3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
                          4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: kXw7VZIsCK+3L93rB+tLy9nEah60H9Q1k95Z8gLTS1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:7c:3b:e2:4c:3b:7c:e4:e7:7a:d3:2c:01:0d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
        Validity
            Not Before: Aug 23 01:03:14 2025 GMT
            Not After : Aug 24 01:03:14 2025 GMT
        Subject: CN=87381368da0123f3bca733e0ed2dd310876ce6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:f8:01:5c:54:1b:c6:43:47:a6:f1:c8:bd:
                    85:21:12:48:a7:ff:a8:97:06:94:68:2f:70:60:77:
                    d0:73:c2:67:a6:12:eb:79:d1:37:ee:f1:b0:1f:a4:
                    2e:7a:de:29:19:b3:bc:12:9a:05:97:de:dc:43:1c:
                    b6:be:22:7f:8b:20:23:70:5f:04:c9:e8:3f:13:c5:
                    e2:b7:fe:92:ea:bf:93:c9:dd:c2:0a:0b:fe:c9:b8:
                    b8:69:88:b6:61:33:79:93:96:e1:86:dd:f3:c1:41:
                    16:2d:55:fd:9a:66:0c:aa:81:04:76:80:91:1d:b0:
                    10:ea:8b:df:b9:82:71:1b:d5:1e:7b:fd:33:e2:84:
                    99:38:19:bf:cf:d5:00:ce:dc:79:fc:b5:06:f1:66:
                    ab:2a:f9:14:9d:df:fa:f2:b4:bf:ec:ca:4d:9e:56:
                    72:38:43:d9:16:8d:41:97:d8:31:2b:38:70:2a:82:
                    74:5b:87:ea:13:39:4d:1e:30:d1:44:48:55:a6:6f:
                    d0:a0:84:0a:c3:71:ca:19:9b:de:b9:b8:42:78:60:
                    6f:aa:0a:eb:8f:9e:70:9a:a7:5a:fd:64:56:be:52:
                    df:89:ce:8a:5a:5a:56:b7:85:e3:be:b3:ff:56:fa:
                    94:e9:37:6b:6e:eb:b8:84:ad:75:d8:a3:f8:05:5a:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:13:68:DA:01:23:F3:BC:A7:33:E0:ED:2D:D3:10:87:6C:E6:B5
            X509v3 Authority Key Identifier:
                keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:64:d0:8a:35:cd:c3:35:42:4a:92:f3:95:9e:fd:12:63:
         3d:b6:44:9f:03:e5:62:02:92:06:93:dd:50:56:bc:93:8b:2c:
         08:85:fe:c0:2f:62:aa:7a:d0:52:79:c3:80:ff:97:46:89:8a:
         14:07:68:b2:85:c8:c6:08:d2:9b:79:61:66:8c:36:e0:bf:97:
         fc:0f:89:69:fc:ef:c1:d5:4f:6c:ca:a0:fd:36:52:0a:40:d9:
         4d:da:1b:be:6f:ea:a0:03:4d:3f:1c:8e:6f:b3:3a:91:09:de:
         aa:a4:5b:0f:3b:52:66:33:9b:ac:0f:19:5c:94:3c:b9:25:bc:
         f5:42:61:a4:2b:4a:ad:da:d5:79:cf:93:96:4e:1b:98:26:58:
         c2:f6:a8:2f:62:74:b2:6d:3b:12:bc:d5:91:f1:bc:ab:54:35:
         e3:62:0e:77:0e:75:fe:6b:2b:d1:b3:84:c2:d8:65:2f:0b:5d:
         7d:b9:4b:ab:6d:65:e9:01:e1:b0:fb:1a:4b:c4:f6:c5:3d:a7:
         81:e2:cf:e6:40:69:4c:4e:d6:d0:a7:d1:ad:48:4b:68:98:f2:
         ea:ad:3f:1a:6f:ae:fc:65:08:1b:5b:ff:55:28:1b:f3:a6:07:
         69:68:73:f3:3f:c7:a5:7b:ea:7a:35:b5:11:08:81:d8:6e:2f:
         a3:9d:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:11 2025 by rpki-client