Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File:                     uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier:          AZrJ8E1j3EMIidAsXXdj1pmnl+N0vEnVyQ7m+8stMOU=
Subject key identifier:   4B:ED:3C:FA:C1:27:E3:CD:A7:C2:DE:06:BA:F8:8C:DE:6C:9A:1C:8C
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer:       /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial:       0198D5BC09B79D46AF69A82817AAD8FDFC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number:          11D1
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=)
                          2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: m8Eyao8Z5/a2nNgLCpkbDVSKHUjdh2U2CDsMDgZzMZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:09:b7:9d:46:af:69:a8:28:17:aa:d8:fd:fc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=4bed3cfac127e3cda7c2de06baf88cde6c9a1c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:25:a6:6d:1b:85:65:bf:50:20:0e:04:b4:
                    f7:a2:82:25:2f:b9:08:5a:0c:50:c8:6e:d8:40:ca:
                    ee:2a:c5:be:44:f5:5b:43:88:e2:a7:05:8b:1d:eb:
                    4f:ce:93:0a:f1:ad:41:81:1c:a7:80:c2:ac:d7:a0:
                    68:f4:df:d8:d0:2e:66:8c:95:00:3e:08:33:ce:9f:
                    02:01:01:54:21:2f:c6:bf:84:a6:ca:e8:ec:66:eb:
                    a2:f5:45:df:ca:66:dc:22:5f:8e:18:0b:35:b1:dc:
                    87:c2:d8:d3:37:5a:f1:a3:03:bc:97:ed:87:3e:e7:
                    d5:bd:a4:8b:98:f9:17:45:dc:41:30:ab:53:a5:90:
                    f2:3e:94:bc:78:93:fe:ab:c9:18:39:af:e6:1d:73:
                    bf:26:7c:bd:78:29:d9:4f:25:11:de:07:85:28:02:
                    f2:7d:97:28:d0:7a:ed:c5:d3:70:de:96:f2:82:00:
                    85:f7:1d:51:d3:77:aa:20:ae:f4:7e:52:e1:ec:43:
                    0d:2c:f4:ba:51:d4:de:0e:cf:e1:2f:58:11:71:6c:
                    ef:b1:35:c6:c8:9c:5a:94:43:d7:4a:1d:67:e1:1a:
                    f3:71:a8:8c:27:a9:6c:fd:7c:ac:e2:d6:52:3e:ca:
                    31:19:49:ec:96:41:f8:76:8c:b9:d2:a6:56:1c:bc:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:3C:FA:C1:27:E3:CD:A7:C2:DE:06:BA:F8:8C:DE:6C:9A:1C:8C
            X509v3 Authority Key Identifier:
                keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:ec:3f:49:dc:02:13:e8:28:f5:a6:44:68:16:ee:b2:26:
         5c:a2:8b:d4:cf:91:eb:c4:c6:1e:65:80:b3:9a:2c:1e:47:13:
         17:2f:de:ab:19:e4:45:c0:aa:39:ae:e4:5d:52:b7:40:14:a1:
         43:c5:e0:79:95:40:53:4f:43:ff:cb:e2:2b:29:a1:f9:5b:a9:
         b5:87:6f:89:ce:4e:67:6f:6e:2d:8d:3a:09:77:28:bc:9a:df:
         4a:fe:93:69:16:9d:b0:8e:ea:29:ac:7d:36:70:d0:51:4c:4d:
         6f:72:b9:ea:f6:cc:a2:72:d3:e2:fe:1d:c6:bb:a2:3c:2e:64:
         f6:aa:e8:6f:8b:73:07:f4:97:8e:ad:69:91:ef:78:c0:8f:17:
         e4:77:b0:b0:55:b1:4d:c3:de:6b:36:99:7e:a7:bb:d4:49:f1:
         08:87:d2:55:e8:6a:72:26:e1:d2:b7:fe:38:78:7d:b8:07:dc:
         88:5b:9c:a9:03:47:3c:ae:bb:95:ce:8c:a6:06:34:be:97:a2:
         ab:ff:ba:81:ae:a2:a1:7d:1a:38:ec:ba:76:4c:26:83:34:ee:
         07:6a:e4:2b:08:3b:c8:36:d3:f5:9c:35:50:cb:22:94:92:fe:
         7c:92:dc:68:18:6e:52:d9:2f:f5:21:6d:62:77:c5:e4:79:a1:
         e5:91:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:40 2025 by rpki-client