Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          If8IRO8psFeQ8OU93lWBxj9ITorU8MlWsekuesaD6gg=
Subject key identifier:   42:9B:6C:18:4A:B4:42:6B:C9:74:34:4C:97:5F:E8:B2:5E:08:96:C7
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       0198353A108A97B99951CF7E2B1FED6FD36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          EC
Signing time:             Wed 23 Jul 2025 03:00:54 +0000
Manifest this update:     Wed 23 Jul 2025 03:00:54 +0000
Manifest next update:     Thu 24 Jul 2025 03:00:54 +0000
Files and hashes:         1: 3BdeI36IkUxOlCqSmaZfu8I0p4g.roa (hash: 5N4fYvWW73MoWuT7eG7LCKSc0LhblTQNkeac5h0QDT0=)
                          2: Mo1KLijCjdKejveVvrm5xxbqdQs.roa (hash: leNTRPm65+UvZO2KDz9fYjRkuCupD94Um3Fgr0yh624=)
                          3: Pv48cERpHgZrkEd-pA2cx5n0Dx4.roa (hash: ielywtJAKkxMoIx1w7LZ3LEuLxtsUUXOXr+8Yf+miBs=)
                          4: VS3w74XMPr5c5L7Or6OFUuiVfsA.roa (hash: xHkZaeOMdBRp2lGp1v7TvvgW8QebAnrvdJ9wA2RpMMI=)
                          5: WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa (hash: a3d83I3OM26Rcumlwo5C8tjA1sldnSwvJlMfN0DSpuw=)
                          6: _8xWW646uQQvbZ9SEyDVTcAaOaY.roa (hash: bN3+hP/aUgGI73tV5kSDjG+kB9Edlf94lhkN0wuQ7O0=)
                          7: _t__zY_9WpX63Gp4LTiVH5H9ryg.roa (hash: nj6giKFeqoubHj5qNRIQ+oa0ZCbVP6J0y1z/i8p44g8=)
                          8: bofREyP65VU1BCmDb-5H8Q5QI1I.roa (hash: TcBHBVESd8D5KK8DOiEDBM0FSRQptUm5x0m4xokkjJE=)
                          9: dNdlikygHYW9_VCSMxVInvo5wAE.roa (hash: oANbFDFE9Ng6o6gqO/EcOwZNCNKxlzdWPW9zD7faSZw=)
                          10: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: Sb7qrLO/55F03/omQ5HEuyqeMhqndl19rz2QITm7NUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:3a:10:8a:97:b9:99:51:cf:7e:2b:1f:ed:6f:d3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Jul 23 03:00:54 2025 GMT
            Not After : Jul 24 03:00:54 2025 GMT
        Subject: CN=429b6c184ab4426bc974344c975fe8b25e0896c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:11:b5:bf:f8:ed:b3:d2:e0:28:5a:f6:45:
                    1f:3e:bb:8a:52:21:9a:5a:86:3d:18:09:57:8e:f7:
                    14:6d:55:f0:0d:57:3d:fb:be:59:f7:db:9a:7f:83:
                    75:3f:e4:03:7d:86:9c:e0:da:68:fe:b5:6e:7d:99:
                    87:8b:35:ef:8a:c1:84:5a:be:c8:89:ec:2a:37:4d:
                    65:35:5f:fa:40:1e:09:c1:ef:df:33:77:b6:19:6f:
                    26:67:6a:e8:2a:86:b0:c3:da:af:ab:a9:21:fb:da:
                    2f:38:94:0f:b6:08:83:82:c1:f7:16:c1:e5:13:74:
                    45:9f:25:cb:5e:67:56:15:cf:7e:0a:d8:05:ba:5c:
                    55:f8:43:4d:30:2a:53:e2:11:ed:89:2c:d6:8f:b8:
                    1e:a5:a6:a0:2a:c7:1b:a2:40:a1:0f:7f:a0:36:5a:
                    07:d1:23:5c:b8:c3:ce:a6:e1:9d:80:b8:cc:ab:67:
                    e6:8c:88:57:60:b3:8a:b1:8c:b7:ee:21:e8:ad:51:
                    07:df:b8:b6:37:7a:57:54:c5:1d:28:28:53:60:5c:
                    f2:a6:3b:f2:0c:1a:2a:c1:40:0e:39:77:fc:be:b5:
                    1d:a3:31:86:66:2e:0b:dd:51:07:01:ed:d1:63:69:
                    dd:e3:67:c1:43:fe:18:fd:9f:d3:85:03:e5:38:6c:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9B:6C:18:4A:B4:42:6B:C9:74:34:4C:97:5F:E8:B2:5E:08:96:C7
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8d:a2:ef:85:7c:3d:5f:ac:13:8f:57:c7:14:a6:e9:75:48:
         d5:a9:44:81:19:41:5b:da:55:4b:25:7e:3b:f7:48:fb:8f:6b:
         4a:52:2a:bc:60:2b:fb:cf:ef:15:55:7b:34:4d:2b:91:fa:1a:
         36:6c:e6:4f:90:fe:2e:d1:7d:64:d0:74:f8:f0:77:cc:a2:8d:
         36:34:25:98:35:16:a5:7c:62:b3:fb:0d:7f:4e:d6:c8:c0:f8:
         2b:5d:51:51:79:2f:2a:21:e7:69:e6:d2:23:11:c5:73:fb:48:
         a2:a1:e0:5a:f0:25:c7:a4:f0:1f:58:d3:b8:c6:1b:9e:83:38:
         22:8a:d9:0a:6b:28:f8:38:ea:95:ab:aa:af:ce:34:a5:8c:6a:
         cd:2f:f9:32:df:f6:14:9b:6a:2c:c0:cb:2f:5b:7d:1b:3a:3c:
         d2:1b:78:d5:22:b8:58:b7:6a:ee:bc:04:13:bc:7d:fa:52:0d:
         05:fd:e2:aa:4b:e7:34:bb:1c:db:3f:02:b6:64:df:8e:74:75:
         33:e6:fb:57:6c:01:c4:06:97:57:bf:9c:f5:db:9f:fb:d3:96:
         db:26:af:f1:bb:ed:da:c0:ea:53:da:21:43:6d:5a:e6:a1:d8:
         23:2c:2d:5f:0b:1f:3b:2c:76:03:18:b7:5b:5d:c7:7e:33:ab:
         75:31:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:10:19 2025 by rpki-client