Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File:                     TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier:          l7PutZov6uGbrSHlQGjBerUVNQEwUrwBlf7+3RBhNSg=
Subject key identifier:   B7:F7:03:8E:79:1D:BC:E6:FA:1C:4E:18:0B:33:2B:C0:E0:19:77:C5
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer:       /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial:       0198541FCBAEF7FB2CE36D6EAB8CC68528B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number:          0F92
Signing time:             Tue 29 Jul 2025 03:00:26 +0000
Manifest this update:     Tue 29 Jul 2025 03:00:26 +0000
Manifest next update:     Wed 30 Jul 2025 03:00:26 +0000
Files and hashes:         1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=)
                          2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: 8jmTGP8SRNmdqwf9xdKht6dVDbWwT77MpgigLlhD53s=)
                          3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:1f:cb:ae:f7:fb:2c:e3:6d:6e:ab:8c:c6:85:28:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
        Validity
            Not Before: Jul 29 03:00:26 2025 GMT
            Not After : Jul 30 03:00:26 2025 GMT
        Subject: CN=b7f7038e791dbce6fa1c4e180b332bc0e01977c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:1a:97:bf:eb:7a:58:17:a4:18:9b:37:93:
                    9c:c0:cb:59:9a:3e:a9:67:a5:0b:61:7d:ce:c5:1e:
                    c5:3f:38:3e:b9:7e:e3:d4:19:50:84:c1:d2:da:25:
                    50:72:95:e3:cd:dc:41:51:59:db:85:28:0f:a5:a7:
                    28:da:f4:3a:a1:bc:79:11:70:34:c2:7b:74:5d:9b:
                    2f:9e:81:cd:bd:e3:32:4b:47:60:32:97:fd:a6:2b:
                    b1:bd:e5:46:2d:8a:6f:7d:df:08:d8:37:0d:b8:1a:
                    aa:3d:f4:21:8c:26:89:7a:a0:fa:71:42:32:ed:74:
                    13:18:24:7c:ae:10:8e:1b:29:1c:c6:0b:33:9d:06:
                    70:fe:14:cd:2b:71:3c:3a:1d:9c:e4:8e:74:3c:de:
                    a1:e4:c2:c9:da:b1:44:b7:c7:45:ca:97:4e:a0:95:
                    e0:4c:f8:cd:5e:96:97:14:4e:f2:36:4f:45:91:0b:
                    5c:6b:3a:a7:a1:35:0c:b1:50:20:0f:61:f2:ff:9a:
                    bf:b1:94:78:c9:e5:dd:2c:f8:5e:f1:ce:b3:ea:dd:
                    34:32:ab:da:5f:71:f0:45:b2:85:a0:7b:97:51:0d:
                    1e:87:95:a4:6f:6b:9e:da:06:70:cc:74:c6:8d:55:
                    a6:a2:25:41:bf:48:82:51:a3:56:25:d8:b0:51:eb:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F7:03:8E:79:1D:BC:E6:FA:1C:4E:18:0B:33:2B:C0:E0:19:77:C5
            X509v3 Authority Key Identifier:
                keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:69:23:e0:dd:ec:02:9c:2a:62:52:40:8b:66:72:f1:47:
         32:65:9d:60:61:1d:b7:ac:84:55:c4:b9:3d:ba:ba:76:b2:38:
         f8:3b:34:62:ca:a9:bd:7d:31:02:31:ca:ca:66:21:8c:05:02:
         a7:b8:92:00:85:06:6a:d8:f3:e8:72:e6:0c:75:c6:92:fe:13:
         92:ad:ad:8f:b0:59:77:5a:b7:68:db:e8:bb:f8:26:c9:17:ee:
         e1:8d:dd:1d:13:95:5f:04:f6:12:33:c9:a9:ae:96:fe:de:f7:
         76:5f:c3:55:de:57:17:86:94:cb:d6:84:8c:40:04:8a:1b:9a:
         7a:6b:c8:8a:2d:97:92:6f:05:52:c9:19:ac:38:55:65:b8:2f:
         5e:c8:b9:f4:3a:52:27:65:e6:c1:69:40:dc:5e:0c:81:c1:be:
         d5:c0:cb:59:43:60:3b:a5:19:1e:c6:47:f7:55:b0:49:b6:9d:
         e6:93:a0:a8:55:ce:09:94:5d:d1:e9:76:c8:45:b2:60:d6:14:
         28:58:2b:8e:51:6e:b7:46:67:f9:17:e0:20:0c:44:73:82:83:
         e5:b4:91:66:a1:9a:ec:8d:de:56:ac:b8:12:09:e0:39:f6:c8:
         da:d8:e4:35:7c:d0:10:61:e0:94:a2:08:55:ec:33:37:6f:bf:
         88:29:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:51 2025 by rpki-client