Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File:                     UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier:          y/dW2wqftkjOG/sd86wbhk2forh2HFKXQDr3W+NurdM=
Subject key identifier:   62:6F:AA:C6:43:28:8B:3D:47:D4:63:02:A8:FF:8F:9D:A5:09:59:22
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer:       /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial:       01984A419E0FF98E3CD5C61578EFB2240396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 05:01:10 +0000
Manifest this update:     Sun 27 Jul 2025 05:01:10 +0000
Manifest next update:     Mon 28 Jul 2025 05:01:10 +0000
Files and hashes:         1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: Qa03tZcv0Vc6ZUKILClifX08/Nm99nAeza2vX0LgxFQ=)
                          2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:9e:0f:f9:8e:3c:d5:c6:15:78:ef:b2:24:03:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
        Validity
            Not Before: Jul 27 05:01:10 2025 GMT
            Not After : Jul 28 05:01:10 2025 GMT
        Subject: CN=626faac643288b3d47d46302a8ff8f9da5095922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a7:6b:cc:7f:87:df:4b:9a:a0:9b:29:ba:52:
                    57:a8:0c:10:6e:6a:88:94:e4:d7:a7:69:29:d4:8f:
                    79:11:54:b4:9f:89:a0:51:dd:07:64:4a:97:59:a8:
                    15:dc:90:a2:50:51:3c:37:5e:a7:48:4b:21:67:e8:
                    df:5b:7f:59:91:6b:e7:37:e0:e5:74:1c:47:da:12:
                    e5:7a:dd:56:d5:a9:08:32:55:c4:de:ca:fb:33:5d:
                    04:a1:4f:b1:22:c8:2c:be:da:02:73:56:c4:25:86:
                    ab:4b:d2:63:74:1b:1d:da:7c:8d:e2:0b:90:29:38:
                    35:51:06:2a:10:e7:0b:08:ce:be:16:02:4b:57:5b:
                    ba:e3:9e:eb:5d:ee:a9:a3:af:7e:54:88:ae:ff:b7:
                    f3:bb:10:e7:76:49:a8:ae:83:40:6b:2b:c2:be:73:
                    08:aa:2d:5c:b7:11:e5:3f:71:07:a7:69:59:7b:90:
                    60:c2:79:50:58:57:ad:5f:a4:07:ec:cc:f4:9f:2d:
                    e5:dc:8b:f6:6c:14:1b:45:91:68:48:8f:85:36:0b:
                    06:c2:f3:3f:ce:bb:9d:84:1d:e1:c3:16:53:ea:32:
                    cb:74:99:67:91:0c:3f:52:d4:7c:f6:f2:57:97:18:
                    02:bd:5f:fb:17:9a:5a:f3:7c:cf:e6:95:42:4b:36:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:AA:C6:43:28:8B:3D:47:D4:63:02:A8:FF:8F:9D:A5:09:59:22
            X509v3 Authority Key Identifier:
                keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:44:88:d9:c3:a0:e1:9d:3e:38:2a:64:e6:a5:b7:76:06:
         5b:22:a8:1b:88:36:9d:e4:ce:91:04:e7:d5:05:11:45:e4:b7:
         25:d0:12:87:3f:49:38:87:1e:d6:80:85:1f:bb:7a:5b:3c:7f:
         07:32:b5:a2:f3:47:57:72:1f:c4:d6:e2:6a:14:f4:e7:e7:4f:
         47:04:f5:5f:17:4f:05:25:11:70:c6:36:48:c2:0d:00:8e:fe:
         93:0d:e0:a4:87:96:48:51:f1:ea:ad:a0:41:2b:21:c1:54:06:
         85:40:b8:1f:c5:b5:96:19:9f:b2:c3:0e:26:5f:8b:26:c0:51:
         32:87:4a:ab:81:0d:c2:31:40:5b:dc:e9:04:e3:f1:60:e8:f0:
         ee:5b:01:ce:03:3c:9d:eb:87:9f:45:b2:16:90:5c:e6:04:ab:
         cc:61:94:f4:44:3d:23:e0:70:68:36:ce:1c:c4:53:47:fb:38:
         69:2a:eb:68:1a:24:14:a8:85:c1:df:ae:f9:bb:4e:23:0b:6d:
         2b:62:8d:26:af:1a:8b:99:e1:1f:e7:26:c5:8b:58:88:10:a8:
         f7:7a:76:2e:a2:d6:83:18:d3:20:98:88:cb:0a:c5:1b:0a:3a:
         da:c9:53:a2:de:63:e4:a1:3d:c1:e7:dc:f7:72:28:c2:dc:5b:
         3f:bd:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:14 2025 by rpki-client