Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          sDegl+D3KbXH4HLAvCPYUQxK07uni1HnV6tP08eQvvk=
Subject key identifier:   D9:DF:F6:AA:D7:AC:C6:B0:66:59:77:CE:52:50:82:13:48:BD:43:37
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01983CF3377EFA5239676364DC6326E29E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          128C
Signing time:             Thu 24 Jul 2025 15:00:28 +0000
Manifest this update:     Thu 24 Jul 2025 15:00:28 +0000
Manifest next update:     Fri 25 Jul 2025 15:00:28 +0000
Files and hashes:         1: 6qEQVs9RJhELhTSt-yx6PdqTH4k.roa (hash: MJPHmKEomDKDrIf3X9T4A591PCDIN9biU5Xak896EvA=)
                          2: SWCjjUaxCAvLsIqlq6JIIAKsNyg.roa (hash: IheYNJ5DBR2ARWU4KPU8QmLGQuMxzruzWVG2AoLba3s=)
                          3: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          4: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
                          5: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
                          6: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          7: jOJMuOf3wW9QD0EWILNZcKmfsMY.roa (hash: IwHFADa8djjRXX5pH/rvBdr8XX2U2mjyDg3i8wc0tqI=)
                          8: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: EdVnv2a4Eq5ajRVu2NBiFWRfLyZagIcDObaBBgz22po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:f3:37:7e:fa:52:39:67:63:64:dc:63:26:e2:9e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Jul 24 15:00:28 2025 GMT
            Not After : Jul 25 15:00:28 2025 GMT
        Subject: CN=d9dff6aad7acc6b0665977ce5250821348bd4337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:ea:b0:1b:bd:c1:a6:e5:cb:82:06:7e:a6:
                    7f:e5:59:50:7e:c9:90:11:91:04:4d:62:e8:96:8e:
                    e4:d9:28:c0:3d:4b:dd:39:36:ce:36:6f:c3:11:92:
                    57:ee:8c:3a:58:52:18:6a:67:15:f3:79:1e:88:0f:
                    d7:b6:b8:bc:fb:b9:f0:75:68:52:e9:4e:30:0b:4b:
                    bc:bc:d7:12:53:cd:fe:21:d5:3e:df:9b:d2:bd:18:
                    65:42:bf:69:c4:3f:c5:5d:66:d3:72:3c:e8:18:06:
                    c6:16:a3:26:27:7a:6c:66:ff:9c:bb:bc:5b:63:20:
                    31:6d:4f:96:c2:8a:ea:53:a6:09:07:3b:a3:cd:47:
                    dd:f0:c0:22:df:cf:6b:a7:26:f8:3c:8c:fa:47:b1:
                    5b:1d:07:8d:11:59:48:d2:b6:44:11:18:0d:ef:61:
                    b6:ff:25:af:b0:5d:32:17:1d:fc:e7:32:53:96:1e:
                    0a:52:aa:0a:cb:99:2a:05:19:31:c7:e6:02:c6:16:
                    f6:26:35:39:00:d0:e8:09:47:12:74:ac:61:e3:70:
                    75:c0:90:1f:41:d6:79:06:8f:4a:13:b9:4e:e4:02:
                    16:df:08:cf:10:ba:99:68:af:7f:fe:db:78:cd:6e:
                    bc:80:06:62:35:12:08:45:08:35:13:a7:1b:e4:49:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:F6:AA:D7:AC:C6:B0:66:59:77:CE:52:50:82:13:48:BD:43:37
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:ca:4d:08:75:e1:8a:3d:e2:ae:6d:0e:ae:39:7b:df:7c:
         47:08:4a:4f:53:83:ed:f7:b9:7a:72:65:18:8d:be:53:4f:47:
         1e:11:ad:e5:a4:c5:68:99:b2:ca:19:07:8f:41:0d:99:64:52:
         b1:e4:16:b0:b9:aa:b0:50:f4:c5:24:75:5f:7e:2e:7c:4f:59:
         a7:26:77:f9:b8:45:ad:3a:6f:1b:a2:ad:7f:44:fd:66:d5:ee:
         f4:7d:b4:a6:2f:f8:28:fd:bd:e4:dd:78:40:a0:ed:96:e4:0a:
         ac:1e:c5:ae:7f:3e:9b:7e:6f:f5:61:c8:fd:80:46:49:86:be:
         b8:30:f6:b8:4f:e3:3d:1e:01:3d:31:4c:1f:8c:18:bc:f2:a5:
         6a:ba:31:c4:bc:8c:29:a5:9d:de:49:af:ac:70:a6:cd:a9:ee:
         09:b1:4d:91:80:c0:8b:05:fc:46:ef:9e:01:9f:f3:4b:f5:f3:
         26:ab:49:85:1f:35:4f:d9:7b:ef:70:bf:85:90:5f:2b:37:1b:
         e0:de:46:7b:e8:e3:08:05:f8:2a:be:88:76:fa:91:bd:6a:e2:
         05:62:26:70:c7:b3:2c:c8:74:60:58:71:c8:01:e5:c0:9f:76:
         85:d0:d5:c4:17:3d:1c:19:4e:4d:93:de:1e:9c:54:63:d5:9a:
         5e:a2:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:24:58 2025 by rpki-client