Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          9egRwSRhVPQLFj+Dli93ZJ/FN5kBzYK0+IjI7W82cAk=
Subject key identifier:   A6:06:F0:BC:13:9D:3B:12:EE:58:E9:6B:41:B6:F2:D3:FC:A9:5F:F1
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       01984A412072564E620670B3C65F3871660F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 05:00:38 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:38 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:38 +0000
Files and hashes:         1: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (hash: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=)
                          2: 5NknPZb2YFjtunQlHWI_QMzdlKY.roa (hash: MgsBbLyiXdRHwov9hAncLGKeKv45suA9La+rVSC/C8U=)
                          3: EcXVeLZGF2isDVGR_npcyvVHtis.roa (hash: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=)
                          4: MLMSeUg0Tn5acuTuB6POUwHtMC4.roa (hash: xJIvGvJF+baBBCFPe1lEWA46OVhv1WXXfc/yQpkBx7I=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: CUtU3VLmzPPnbQfeSl8bbuC9CvoX2PZ9eiPhiTJyrNE=)
                          6: vRCQ2oYv0pMSuRkskFBqpNokNQc.roa (hash: nfgafPbA1oV5746o00z5NyxG0STOqD8qAdDbAN/fIQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:20:72:56:4e:62:06:70:b3:c6:5f:38:71:66:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Jul 27 05:00:38 2025 GMT
            Not After : Jul 28 05:00:38 2025 GMT
        Subject: CN=a606f0bc139d3b12ee58e96b41b6f2d3fca95ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:77:cc:47:6c:97:98:7f:dc:3e:b3:46:4b:
                    00:09:28:50:8c:9b:49:fc:fe:d6:a5:f1:54:32:7d:
                    e4:90:30:c8:bd:ce:3a:5f:40:63:29:e1:ea:86:63:
                    ed:d7:a7:a4:7f:7e:07:a8:eb:83:3f:05:2d:a2:61:
                    1f:e6:26:6b:c1:eb:d0:0a:2b:99:e2:66:24:7b:20:
                    74:5b:f1:1f:c2:9a:4c:36:16:f4:c1:d1:99:4d:8c:
                    2b:2b:96:82:fe:33:10:85:0a:a4:42:6f:7f:ef:8a:
                    8a:cd:3d:a9:90:fa:ea:91:2a:36:e1:1a:dd:bf:81:
                    76:66:08:b8:b4:a0:7f:46:91:75:28:01:17:cf:79:
                    77:ff:39:27:3c:c2:73:54:f2:7a:7a:fe:f0:2b:68:
                    a9:d8:2d:00:80:17:8b:20:03:55:33:b1:da:84:78:
                    73:d6:8b:3f:b1:f4:76:55:19:62:0d:85:e4:d0:54:
                    81:f8:1d:bb:16:03:89:f7:6a:f9:31:e1:a7:0d:62:
                    ee:d3:32:0a:b9:56:ef:f7:04:be:c9:e1:06:b9:ba:
                    4d:06:fa:ba:f0:3d:61:81:1b:9b:75:d1:f4:5a:7b:
                    14:63:00:75:9d:a2:74:fb:03:54:ec:b7:b4:21:22:
                    b2:87:42:8c:7b:5c:f9:76:80:64:3a:fb:65:8c:77:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:06:F0:BC:13:9D:3B:12:EE:58:E9:6B:41:B6:F2:D3:FC:A9:5F:F1
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:c0:17:4d:22:65:c7:7e:65:2c:0f:af:90:8f:91:fc:c8:
         40:0a:22:28:2b:7a:0c:63:c9:d0:31:84:31:1d:31:36:87:55:
         57:fa:2b:67:22:2d:3f:c8:8f:c7:d4:53:1c:48:f0:78:1d:54:
         fe:5c:6a:ec:d2:2b:38:54:e4:4a:fd:da:dc:51:81:12:38:8f:
         cf:77:9b:24:e3:40:a8:25:ff:51:ee:f0:f4:20:fa:22:4f:b4:
         98:ff:8f:ef:4f:3e:51:c4:b1:99:3a:b3:97:a7:84:ce:94:f4:
         11:db:32:08:9d:1a:ab:7c:af:47:59:30:89:6a:5e:fb:2a:44:
         9b:93:59:89:de:59:b3:eb:39:23:6c:f5:f5:4d:17:3c:47:29:
         d3:fb:f8:8c:fb:cc:58:e6:1d:8c:48:a4:fb:c7:a1:11:eb:c4:
         91:af:fd:b1:0b:15:1f:b9:76:8c:c9:0e:a5:c4:77:cb:c8:18:
         15:70:7a:b2:39:d6:3d:c7:e4:00:3b:15:38:54:1d:d0:cd:3a:
         a4:90:5e:6f:b3:b3:ab:80:66:51:37:e8:72:7b:d8:20:10:8d:
         c4:0e:cc:e3:b8:df:dd:cb:7f:86:8f:be:94:2a:06:12:12:1b:
         93:86:43:34:95:e8:c7:d9:f2:77:90:fe:a8:28:e2:1a:38:c8:
         97:8f:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:53 2025 by rpki-client