Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File:                     U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier:          P0nWdI1c+RJo7YKSCucgiBfptqwo7rSB/iYayvXnDOc=
Subject key identifier:   30:10:57:94:BF:87:C5:3E:1B:F7:75:B2:75:AB:7D:CC:DB:6C:8E:EE
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer:       /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial:       01982891F8F7633328CD0371BDEE28B288D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number:          0148
Signing time:             Sun 20 Jul 2025 16:01:51 +0000
Manifest this update:     Sun 20 Jul 2025 16:01:51 +0000
Manifest next update:     Mon 21 Jul 2025 16:01:51 +0000
Files and hashes:         1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: OoN6tW0slOA17i8zSDXVv/Jlu+e49ypqsqaqIQr/LjI=)
                          2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:91:f8:f7:63:33:28:cd:03:71:bd:ee:28:b2:88:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
        Validity
            Not Before: Jul 20 16:01:51 2025 GMT
            Not After : Jul 21 16:01:51 2025 GMT
        Subject: CN=30105794bf87c53e1bf775b275ab7dccdb6c8eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:a6:0f:93:34:05:01:be:78:e8:b9:03:96:
                    3a:14:5c:08:b9:a6:7f:6b:89:e8:fe:47:f7:d9:50:
                    15:04:9f:0a:89:25:3c:e2:cd:c5:d3:40:b6:e4:e1:
                    8e:69:5c:5b:a9:65:6a:af:35:f2:75:0a:3f:63:5b:
                    a0:b8:1a:f2:32:9e:3d:c7:1b:63:8a:e1:e9:b9:bd:
                    3e:84:1d:40:9e:cb:af:e2:fc:cf:ae:fb:81:87:47:
                    a0:e8:12:ac:fc:00:42:78:91:56:57:e0:f4:e3:16:
                    6b:de:23:e9:22:eb:8d:99:d1:29:62:49:06:b0:24:
                    f0:80:fa:7b:a6:0d:9c:3a:55:bb:1a:e3:12:b9:f4:
                    0b:c2:85:8f:9b:8f:a1:60:e1:85:76:b8:b6:d9:18:
                    a6:f3:8d:8b:4f:95:6a:71:82:bc:5e:36:13:01:8f:
                    d7:18:5f:49:24:50:aa:4d:f2:43:2f:1a:50:a6:89:
                    13:7b:e9:9e:ba:bf:2a:d8:da:3d:6a:38:a9:5b:19:
                    4a:b7:79:b0:6e:5c:b8:98:ea:14:c9:48:b5:25:fa:
                    2f:6b:c0:1b:68:b5:d0:b2:52:9b:3c:0f:a4:d2:e6:
                    57:ab:e3:0e:ed:5d:8e:fd:ea:2b:74:c0:ec:30:83:
                    65:fb:c6:0a:22:41:1f:2e:c3:91:63:ad:50:fc:5d:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:10:57:94:BF:87:C5:3E:1B:F7:75:B2:75:AB:7D:CC:DB:6C:8E:EE
            X509v3 Authority Key Identifier:
                keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:dc:8b:31:8b:fc:7d:1a:f8:5d:a3:75:33:ca:b0:fd:e7:
         df:46:10:30:6b:bd:b8:fa:1d:0c:0f:41:bd:e7:74:7a:02:6d:
         99:98:60:03:99:43:0d:29:4a:bb:f0:30:f5:00:df:c0:08:38:
         5f:13:14:bc:7f:cf:dc:e1:3a:1d:57:3c:96:7b:e9:cc:74:fb:
         39:c4:b9:79:d1:fb:d9:02:47:57:23:b0:23:21:ed:28:5d:78:
         52:fc:b1:04:61:4d:39:46:89:cf:8c:80:01:06:05:17:f5:e5:
         b1:fc:1c:b0:ad:23:9c:90:d5:32:0d:8e:d3:5e:a1:36:f2:29:
         18:3e:1f:bb:2d:b3:02:d6:3e:84:aa:d7:cc:f2:3a:ce:e3:2c:
         41:2f:ce:df:86:f5:2e:4e:35:d4:21:8e:8c:27:7d:82:cd:c9:
         9b:f0:85:fd:0c:84:ba:57:b1:cc:83:78:88:7c:27:cc:aa:0d:
         d0:c1:cd:b7:dd:f7:e1:7c:65:29:91:19:1b:aa:78:1a:dc:9d:
         23:1a:0c:19:81:20:2a:ad:97:c6:3d:6a:f2:80:70:51:54:a5:
         c3:13:62:29:10:97:0a:99:d7:5f:0b:0f:24:4d:06:ca:1a:b1:
         3d:9a:bd:ef:59:c0:9e:a4:c0:4e:07:09:25:50:09:dc:6b:81:
         59:34:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:16:34 2025 by rpki-client