Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File:                     uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier:          vkciRQSJwa+0dxsJOLTT0/SGuO3AsUswHZgIhgMjWH0=
Subject key identifier:   B8:8C:70:28:9B:80:BA:37:CC:1E:DA:35:AB:58:74:60:C2:81:F4:3B
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer:       /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial:       0198D5BC358408153D2E1D8CDB06396CAA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number:          0D50
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
                          2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: MTaTcLQs/j/cZgvdNTK2xTuwW6WCHp0UXLtl+BZCwwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:35:84:08:15:3d:2e:1d:8c:db:06:39:6c:aa:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=b88c70289b80ba37cc1eda35ab587460c281f43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:91:e0:1d:6d:d4:07:43:f6:31:97:c3:8e:
                    3e:8a:6d:28:dd:cb:0d:a7:46:57:3f:b3:b3:a9:26:
                    ca:5d:9d:b6:0a:4b:a5:03:1e:1e:59:17:fc:5c:7c:
                    f1:32:9d:2f:95:23:fc:33:79:5d:cb:c0:e9:6e:f1:
                    d6:21:df:d5:85:86:b2:fd:0d:f5:b4:1f:83:91:bc:
                    29:27:b8:e9:f9:a9:bf:b3:6d:41:4d:d1:30:f5:91:
                    d7:e2:57:17:d6:d6:44:44:ff:fe:3d:55:66:25:b0:
                    29:ba:46:26:f8:8a:fb:45:ea:23:29:08:de:74:5e:
                    9c:fa:01:27:d6:4f:4f:7a:db:a3:e7:d4:1c:f4:99:
                    e3:29:7d:89:e8:cf:d3:a4:dc:96:7d:73:de:f5:04:
                    47:2c:eb:f6:2d:8f:dc:94:b8:1a:d3:00:c7:da:23:
                    e5:44:a6:08:b0:f2:1a:9b:12:62:1f:09:58:40:31:
                    9f:31:98:fb:c0:03:4a:da:8f:1f:df:ee:91:0e:9d:
                    fd:4d:50:ae:30:58:c3:c0:6d:a2:9f:6e:85:a8:10:
                    e7:c9:ef:92:ae:a3:96:31:47:16:c9:3a:23:40:e2:
                    ef:44:4c:96:73:af:3c:41:3a:cf:55:97:fc:ba:86:
                    fa:f6:02:d6:14:63:66:d4:62:50:66:4f:22:e0:b1:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8C:70:28:9B:80:BA:37:CC:1E:DA:35:AB:58:74:60:C2:81:F4:3B
            X509v3 Authority Key Identifier:
                keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:37:e2:c1:0d:dc:88:6d:da:9e:78:b4:43:cb:79:58:40:
         7a:b6:1c:a7:b3:04:14:86:23:9c:fe:e1:4a:c1:9b:72:e6:3a:
         65:c4:55:46:11:34:5a:e8:f5:be:23:76:e7:26:af:e3:81:0e:
         57:a2:92:e5:8f:87:65:e2:ce:5d:c2:c5:ff:10:26:f5:4c:3c:
         23:84:a9:dd:f7:d3:05:f7:d6:f3:5c:77:a8:7b:20:34:48:23:
         a6:49:c2:05:40:66:9a:d8:0d:dc:c2:f3:a6:ad:f2:d6:33:fa:
         35:3c:a1:61:c4:7d:b2:8b:ab:7e:3e:22:bd:8a:c8:24:42:24:
         d5:a3:53:f2:4e:c1:24:11:cc:fb:6d:1e:ea:4d:a4:1a:88:57:
         e9:78:d3:f2:dc:67:01:8a:4d:95:39:f0:ce:50:b7:67:14:3d:
         a1:c7:18:ab:25:6b:79:a3:7c:f5:bc:81:23:c9:97:ef:8d:26:
         0d:39:20:4f:9f:41:18:2f:3f:39:a1:fb:c8:f8:c3:cd:4f:13:
         8f:10:5b:90:6d:0b:8c:8c:62:5c:1f:bf:7e:df:ea:40:75:54:
         7a:2c:55:b3:8e:28:a2:50:4d:35:74:77:cf:4c:f4:d7:26:9d:
         a7:5f:8a:bb:ee:e1:8e:d2:9a:55:32:b3:b0:74:ef:0a:07:b5:
         32:a2:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:32 2025 by rpki-client