Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
File:                     uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft (raw, json)
Hash identifier:          OS/1xefsgO4KslsCEpsIpH1WTIOGO0cC2OwakLrxRAs=
Subject key identifier:   BF:83:00:78:A6:61:B9:D5:0B:2A:4B:58:16:6C:A4:32:F8:CF:B0:B3
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Certificate issuer:       /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial:       0198D4A803DE4A1E0F3303032696D88D517A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
Manifest number:          0C1B
Signing time:             Sat 23 Aug 2025 02:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:37 +0000
Files and hashes:         1: c47adC4Bxlaw5597wV2V7KU0TIk.roa (hash: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=)
                          2: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl (hash: 4aPtRb9zTv5C3bj+qHNlZDFR8H4kvYA9J0N9ufn7OW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:03:de:4a:1e:0f:33:03:03:26:96:d8:8d:51:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
        Validity
            Not Before: Aug 23 02:00:37 2025 GMT
            Not After : Aug 24 02:00:37 2025 GMT
        Subject: CN=bf830078a661b9d50b2a4b58166ca432f8cfb0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:ea:8e:09:6d:f4:cb:46:63:74:c2:70:23:
                    fa:ba:cf:1c:65:87:42:0d:9e:d0:1a:e7:a8:5a:69:
                    17:b4:43:e8:39:08:a2:67:9f:55:8d:93:ef:59:21:
                    63:f7:f7:13:aa:c5:96:e5:84:b4:67:c0:2c:d6:31:
                    5c:df:3c:c2:32:f7:3c:27:9b:f2:3a:28:27:95:7f:
                    a2:d9:69:0f:97:8f:02:2d:10:ff:dd:33:8a:34:0a:
                    12:1c:98:a6:9e:f0:88:45:5d:c3:1a:a5:57:b7:95:
                    fd:21:36:57:6f:5b:73:9f:dd:ef:a4:56:22:ca:1d:
                    fb:d2:d6:a0:48:48:f1:63:c8:bd:77:85:50:a4:43:
                    b9:7b:c1:e0:1f:da:0d:b8:5f:62:2d:ce:e8:5a:6b:
                    20:fb:d5:30:bb:54:47:75:81:8b:82:0a:1e:b5:26:
                    77:94:f0:b0:66:5e:21:41:1d:29:e7:b2:26:5f:b8:
                    27:6d:d0:98:7e:de:5d:98:43:11:58:95:47:06:7a:
                    8b:07:56:f7:ff:f0:0c:7b:49:d3:d1:cd:a3:6f:8f:
                    2d:c3:a3:ab:46:77:22:a9:27:23:39:00:46:44:b6:
                    56:97:4a:cc:b2:01:5d:4c:a1:c9:bb:a6:7b:71:6f:
                    7e:1e:84:c0:b1:d9:9c:45:e5:e1:dc:af:70:ba:16:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:00:78:A6:61:B9:D5:0B:2A:4B:58:16:6C:A4:32:F8:CF:B0:B3
            X509v3 Authority Key Identifier:
                keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:81:57:05:05:77:a8:72:c3:ad:4d:f4:32:b3:09:65:09:f0:
         2d:80:0b:82:4d:03:03:c7:3f:9f:91:81:2c:1c:70:22:c6:16:
         52:0a:44:e8:a8:a9:30:f2:e9:45:d9:6f:df:4b:13:07:66:51:
         52:54:80:40:ca:cf:fc:a1:d0:f7:bb:2a:bf:6d:61:b1:1a:e2:
         7b:ae:29:9b:4b:b8:64:7f:e8:ca:bc:19:cc:7d:00:5c:5a:0b:
         99:22:f6:91:99:82:3d:7a:6c:5f:3e:6a:15:44:c2:db:9e:69:
         72:01:15:e3:93:f3:62:64:9f:b4:bc:2e:12:ed:d6:78:1a:ba:
         b5:87:e2:1b:d9:c6:00:dc:38:57:b5:73:80:0f:9e:eb:0b:27:
         cf:a9:65:10:ed:48:ee:c0:ef:28:e0:21:43:06:ac:47:58:bc:
         2d:ba:78:23:c0:26:7d:81:aa:ab:8b:d4:2e:84:10:49:7e:7a:
         ea:bf:26:68:d1:8e:28:d4:d3:d9:50:1c:fa:03:5e:57:a3:ab:
         9a:5c:41:34:ed:99:5a:25:34:c8:57:5f:21:27:95:c0:29:c7:
         84:37:8a:ea:2f:d3:7b:b3:41:dd:5b:22:89:4a:e7:a1:8c:6a:
         f7:5b:b7:4c:d5:2a:53:fc:9a:b4:35:20:ea:e7:71:5c:1d:49:
         d6:bc:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:39 2025 by rpki-client