Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File:                     ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier:          ZdumlsOKEFRFQmxHih3qqCo5emuSEiv8xGtpwItdfw4=
Subject key identifier:   54:E4:A4:FF:A1:55:19:DC:10:01:F7:47:B4:AE:7C:1F:7C:5F:D3:D8
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       0198481BCEF14E5A2B962F8836ED70FAB2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number:          1609
Signing time:             Sat 26 Jul 2025 19:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:38 +0000
Files and hashes:         1: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (hash: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=)
                          2: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (hash: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=)
                          3: ZeRzlTDzmLL9ruSMWEiors7V-CY.roa (hash: 5h/FBtMrMZdufOCQE7QgMCpb+UDEPswHfLnEQXnKhOE=)
                          4: _H04-tv1ooHj1KmhXwO0mYV3IF8.roa (hash: apIZOTa7xK/4gGTnIysPO6fJUe7VmPIEc4W1/L0W+Ps=)
                          5: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: 7R8hVE6MsusV26uu35zhwax4JT2USrJrbZ6V/7QXZp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:ce:f1:4e:5a:2b:96:2f:88:36:ed:70:fa:b2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Jul 26 19:00:38 2025 GMT
            Not After : Jul 27 19:00:38 2025 GMT
        Subject: CN=54e4a4ffa15519dc1001f747b4ae7c1f7c5fd3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:3b:13:89:71:9b:48:a9:08:d9:e1:2b:af:
                    ce:4e:e7:2f:3c:23:3f:2c:04:23:a7:61:95:12:56:
                    6c:bf:f1:1c:44:df:b9:f6:5c:05:7b:28:8f:de:79:
                    b4:d0:ee:30:c2:88:49:b0:28:a4:ce:40:9d:e6:7d:
                    01:bc:1a:f4:10:95:16:13:32:a2:e8:6a:06:6d:2f:
                    16:8b:3e:d9:c2:2e:a0:79:ae:f2:f5:ef:6d:90:e0:
                    f1:38:d8:ca:15:4c:6c:53:57:8c:a9:5b:be:c6:09:
                    06:65:5a:0b:70:e5:10:94:e4:16:8f:31:bf:67:de:
                    84:21:c6:ac:3a:56:02:49:90:e4:9a:fe:39:db:82:
                    11:37:60:67:3e:19:04:fc:24:ee:df:73:af:52:be:
                    09:7f:2d:e8:6b:0a:c8:d7:8f:90:19:7c:81:08:45:
                    c6:13:a8:75:c2:11:ab:3d:16:9b:07:2d:76:de:7a:
                    46:da:9d:23:e1:40:4f:c6:0f:30:02:a6:85:06:45:
                    c2:40:70:d8:32:0b:f1:bb:db:ed:85:68:e7:74:a2:
                    f8:32:e7:14:c8:c7:6c:d1:79:9f:ab:97:12:ef:ad:
                    f3:fd:b7:e2:cd:78:4d:3b:f7:54:3a:c8:32:a4:1a:
                    2f:98:90:77:c8:97:1f:0d:f9:d3:57:9a:2d:24:3e:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E4:A4:FF:A1:55:19:DC:10:01:F7:47:B4:AE:7C:1F:7C:5F:D3:D8
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:fa:34:c9:f0:bf:ac:76:4f:82:e4:f8:db:e7:7d:91:4a:
         ab:23:42:f5:86:55:10:e5:bd:87:fe:46:dd:5d:31:8a:e9:b4:
         65:9a:80:b2:ba:12:5b:30:e6:1e:0d:c1:eb:c7:d5:35:04:ec:
         cb:4b:48:cb:1d:0f:40:04:10:1f:cd:22:01:36:97:de:37:07:
         12:b6:aa:2a:fb:2b:86:b4:e5:17:88:44:df:8d:2f:fe:7b:54:
         37:e5:3b:66:14:93:e1:a3:ee:5e:a8:ef:43:75:78:7c:62:37:
         b5:bc:bd:f0:41:c4:c5:90:cd:ba:e0:3f:c6:32:c9:f5:5b:c0:
         5a:eb:a3:d4:b7:c3:b8:41:68:18:cb:f3:e2:39:94:42:43:03:
         b3:a8:a0:be:14:a3:1d:aa:3a:a9:8b:41:f3:98:dc:34:95:90:
         68:c0:db:48:3c:99:8b:cd:1b:e4:ef:da:79:bf:95:18:b9:6a:
         73:c8:aa:2a:50:fc:6c:66:28:73:89:4d:e7:77:5e:96:ab:6d:
         2f:b2:70:79:74:5b:68:29:79:b7:ef:db:77:0a:87:8d:a8:c9:
         31:97:a8:d5:cb:36:8b:85:e8:4d:5c:5d:45:8e:c9:a4:8d:ac:
         0d:7f:d5:7c:e2:72:7a:aa:69:b3:4a:95:54:56:ba:c7:d2:54:
         8f:33:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:09:31 2025 by rpki-client