Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File:                     uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier:          oss8OKlsW4YjLddVyQKzjkcxaRFa6PPWDqfcFFhkfps=
Subject key identifier:   75:40:5D:A8:04:C3:37:74:A8:28:29:07:12:3F:A4:00:96:AF:73:9D
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       0198D54EABFEFFAB8EE7A8D557257D7D176C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number:          15F4
Signing time:             Sat 23 Aug 2025 05:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:39 +0000
Files and hashes:         1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
                          2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: jlrftjHd0Lj0y7nwt03B2wF7CEUopl5puViHA71a3xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:ab:fe:ff:ab:8e:e7:a8:d5:57:25:7d:7d:17:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Aug 23 05:02:39 2025 GMT
            Not After : Aug 24 05:02:39 2025 GMT
        Subject: CN=75405da804c33774a8282907123fa40096af739d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:db:3e:59:15:e0:ec:31:b0:99:80:d6:88:
                    0f:eb:2a:09:0c:d9:42:a1:5a:a2:c4:9e:77:90:c6:
                    62:0b:cf:4a:ea:a5:57:6b:1b:0a:e5:4d:b1:71:ce:
                    6c:bb:c4:ea:81:9e:a5:53:d1:ed:47:5c:06:e0:64:
                    67:59:41:ef:ef:9e:5b:69:58:50:d6:e6:4f:d3:e1:
                    d8:f9:f5:fa:93:c4:82:eb:19:0e:63:d0:c0:79:36:
                    f2:b6:9d:33:25:d9:e0:de:17:0e:b2:fa:35:d3:14:
                    4c:ae:50:24:89:9c:02:4c:ec:32:1c:ba:5a:e7:63:
                    d7:93:cc:77:0b:af:c2:6f:e2:84:a8:ce:6c:ef:f6:
                    e0:44:6b:6d:b6:2a:93:38:f8:25:4d:db:8b:62:60:
                    69:81:cb:d6:b3:b2:e2:10:86:f8:fd:76:c0:c9:24:
                    b6:51:a7:8c:83:b5:3d:3e:05:f3:f5:46:47:f9:fd:
                    a1:93:b0:a0:16:77:af:1b:17:a1:31:58:7a:9e:24:
                    b6:ef:94:42:10:60:c5:47:15:8c:f5:fe:4d:4b:22:
                    f3:72:16:ac:60:fe:19:4c:46:57:bb:3e:58:c1:bf:
                    a4:00:31:9e:18:28:56:76:87:88:74:5b:d0:d1:4a:
                    8f:9a:eb:99:dd:60:1b:ac:ff:97:1d:ee:b8:db:33:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:5D:A8:04:C3:37:74:A8:28:29:07:12:3F:A4:00:96:AF:73:9D
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:29:2e:5c:e2:17:2d:23:b3:99:c5:ba:d6:1c:1f:dd:2d:
         06:34:ec:02:d3:00:ee:e0:8b:fa:4e:d7:b4:f5:45:29:8c:b2:
         62:d2:93:c8:7a:df:52:8e:a2:bb:52:72:7e:77:ac:7f:57:96:
         ff:05:28:18:68:e9:9a:a3:5f:67:ea:63:8d:3d:c1:87:25:83:
         e7:43:14:7f:7d:bb:23:10:e3:91:2b:6f:b1:20:29:22:c8:58:
         ea:69:85:b0:e8:6b:df:66:ef:be:88:17:84:4b:e9:68:c3:e1:
         25:c0:e4:1e:11:a4:53:50:d3:ea:48:cd:65:fa:f0:ac:3d:25:
         03:51:fa:7e:9e:53:5d:b7:58:6e:ca:52:5c:1e:7b:f7:a4:df:
         ee:75:a6:c9:ef:2e:46:78:db:a2:25:22:44:e4:43:36:ef:34:
         25:d5:2a:37:82:9f:57:6c:7b:7f:2d:02:1f:00:df:42:b1:31:
         44:a5:ba:13:b8:f3:84:48:af:ab:16:38:f2:15:79:29:87:23:
         77:b1:9d:f0:4e:43:3d:e0:bb:a1:fa:64:d8:52:d1:71:fc:3f:
         30:44:67:6f:1b:c3:5c:4d:d1:1c:63:d9:d3:19:51:a2:57:51:
         75:bb:8e:3d:45:33:f5:d1:38:a5:8b:8d:fc:b3:cf:27:b6:fc:
         ee:7f:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:28 2025 by rpki-client