Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File:                     UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier:          II41CkoSpYe5kWPCT8Yf6quxtNSmu09h0rzHLhQZJWg=
Subject key identifier:   D6:1E:E3:CA:3B:8A:E8:85:98:C4:91:39:23:43:9C:71:66:47:82:5D
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       01984964F068BEC739263FC5DD55D3A56400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number:          0F08
Signing time:             Sun 27 Jul 2025 01:00:08 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:08 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:08 +0000
Files and hashes:         1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=)
                          2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=)
                          3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=)
                          4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: iHPuECON9+zrYd6R/mErAwr1ZddqQ1u4hQwfj5zl/cQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:64:f0:68:be:c7:39:26:3f:c5:dd:55:d3:a5:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Jul 27 01:00:08 2025 GMT
            Not After : Jul 28 01:00:08 2025 GMT
        Subject: CN=d61ee3ca3b8ae88598c4913923439c716647825d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f4:16:1f:a8:e9:ab:e0:b3:8d:52:a4:24:12:
                    c0:05:c3:00:9b:26:b4:19:74:4e:a9:63:aa:06:b7:
                    c2:6c:28:10:a1:9f:67:70:1e:79:bf:99:dd:6b:2b:
                    f2:3c:e9:10:71:4f:48:1f:8f:a8:4d:31:41:e1:62:
                    ec:71:84:e6:c0:5d:b4:0c:ae:c4:ad:42:d0:14:74:
                    11:ef:45:f5:f5:51:4f:f3:0a:bc:f5:bf:94:3e:b9:
                    ee:55:df:21:df:90:11:7f:0c:68:94:83:ea:35:2d:
                    fa:ae:35:94:e4:b1:8f:d0:2a:20:42:21:2b:28:3d:
                    03:b3:68:65:81:77:9a:4f:17:2b:d5:79:4c:1f:50:
                    57:21:e1:ce:0d:99:2d:06:e8:ae:6a:0d:fc:98:54:
                    ec:f4:d8:5f:96:34:ee:6d:56:d3:d7:a4:9d:f0:6d:
                    7a:d0:79:4a:50:50:e9:a2:cd:1a:9f:84:50:8b:42:
                    bd:89:2d:87:71:ca:87:59:50:86:1e:6f:47:94:cf:
                    85:e8:92:e5:28:6b:29:ed:b4:24:e8:9d:1b:14:42:
                    d5:36:d8:fd:b6:18:22:a7:35:98:5b:91:23:da:3b:
                    de:14:68:65:c3:45:6f:a4:b6:de:f6:86:f9:d1:68:
                    ea:ad:d1:2d:44:f3:83:73:fe:63:86:61:5e:db:9e:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1E:E3:CA:3B:8A:E8:85:98:C4:91:39:23:43:9C:71:66:47:82:5D
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:27:6c:ab:a7:73:b2:c1:f2:e4:f6:7c:f8:c0:aa:4a:ce:
         d7:71:1a:9d:67:07:79:24:e3:c5:9c:81:48:69:96:86:d8:a5:
         f7:83:0d:5d:66:49:c2:ca:ab:7e:c3:c0:45:ae:2b:e1:62:10:
         18:2c:b3:0c:9c:0f:b8:98:0d:bf:ee:8b:4a:dd:02:1d:b9:95:
         ab:08:4b:46:ff:5e:83:c6:4a:90:7d:19:4e:d3:57:7f:e3:30:
         0d:dc:35:37:c3:d1:4c:65:3b:38:89:8b:8b:50:36:07:8b:a7:
         9c:c6:5f:24:87:f4:36:d3:04:3f:db:b4:cb:cd:f1:6e:3e:f2:
         17:87:3b:99:9a:46:c7:10:42:24:a1:2b:00:6d:50:d4:11:11:
         c2:27:38:3f:df:bf:ed:22:29:89:ed:45:69:a7:ca:40:7e:f1:
         5d:f6:85:f1:4a:2e:41:13:a4:f5:ee:07:d5:06:96:ef:53:07:
         a2:51:80:48:5f:87:8c:a5:eb:13:b8:8c:d5:4b:cd:ca:d3:67:
         9f:f0:c2:e0:9a:c7:95:fa:0a:41:85:33:8d:b4:49:cd:5e:0f:
         31:f8:9c:2c:3d:be:cb:92:5a:15:d0:39:29:d9:b0:45:9c:63:
         60:9c:6d:1a:86:b8:20:43:6a:e0:6d:f7:4e:1e:83:63:78:0e:
         b8:9f:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:24 2025 by rpki-client