Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File:                     Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier:          3B/0jbc2v++5WlyVT6NPd8ELvt7OQjiVnbLuvm+oJGc=
Subject key identifier:   20:36:9C:34:AF:FA:53:6D:60:B6:D2:98:D2:AB:82:81:40:25:EF:0B
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer:       /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial:       019848C03A46E2B6FD0F52B541378E143E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number:          14D6
Signing time:             Sat 26 Jul 2025 22:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:13 +0000
Files and hashes:         1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: mijIrMyWfz7mMOd2HCiVOqB7LRKdDAu2mOH/tjJAKm0=)
                          2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:3a:46:e2:b6:fd:0f:52:b5:41:37:8e:14:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
        Validity
            Not Before: Jul 26 22:00:13 2025 GMT
            Not After : Jul 27 22:00:13 2025 GMT
        Subject: CN=20369c34affa536d60b6d298d2ab82814025ef0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:aa:b1:9a:1a:91:f7:ab:ee:49:ca:ff:26:
                    26:99:58:82:18:55:1b:a5:30:e7:80:66:76:bc:46:
                    6d:b0:17:cf:dd:0f:cb:03:91:20:3e:a6:45:c6:42:
                    bd:16:40:58:5a:63:14:26:f9:b2:2c:fc:95:41:59:
                    19:bc:94:f4:5b:c8:13:0b:85:eb:50:a9:8c:a3:78:
                    ac:cf:57:c4:0a:10:d6:06:58:d6:63:27:ea:9e:fb:
                    5e:07:7d:9f:72:7c:9b:fb:a2:1b:69:da:5f:84:e2:
                    21:f5:fe:d8:d7:cb:7b:2d:c7:3c:28:a4:e1:fd:4d:
                    cd:98:cc:39:41:1e:9a:ed:c1:2a:f9:88:a1:a2:61:
                    17:3e:be:6e:c2:74:ab:3c:75:3f:af:de:0f:8a:1d:
                    c1:6c:92:07:48:25:71:04:ac:2e:82:65:50:0a:56:
                    95:d1:46:de:fd:a1:17:c0:e0:fb:fb:57:bf:6f:23:
                    17:1f:e4:9b:b0:a8:d3:bd:c9:16:b4:55:40:ac:77:
                    d5:3b:e4:ce:75:9f:6b:19:83:be:be:8c:2b:a1:49:
                    02:3a:85:52:38:a2:9a:9b:89:06:dd:d4:1c:66:19:
                    a0:09:95:09:2b:b6:ea:eb:56:69:8a:fc:df:ee:92:
                    bf:f8:b5:a8:4a:fc:66:e2:49:55:c2:a1:54:13:f6:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:36:9C:34:AF:FA:53:6D:60:B6:D2:98:D2:AB:82:81:40:25:EF:0B
            X509v3 Authority Key Identifier:
                keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:2b:1c:98:9a:07:e2:83:0e:2f:9d:bb:f1:b8:d2:14:4c:
         32:90:e8:9b:db:98:4f:f2:91:b5:85:e3:35:6e:c4:60:aa:f0:
         4c:9b:7c:b4:48:34:f4:ad:05:0c:36:1e:4d:d4:24:dd:26:95:
         6d:2d:eb:e3:4c:aa:7c:56:21:6f:a0:91:c4:1f:8e:07:ad:44:
         24:29:e0:f2:7e:6b:58:fb:c1:40:f3:23:d1:94:93:9e:93:46:
         0f:50:7f:e2:27:7f:d4:56:73:fe:59:0d:0f:db:62:5c:f5:5c:
         82:75:8b:52:52:a8:b0:79:13:9d:5e:1b:73:22:af:9e:28:f3:
         68:80:73:5f:2a:96:5a:13:b1:c2:06:9b:9a:e4:64:b8:6c:4f:
         7f:52:d1:7e:a9:ae:b3:da:e1:1e:f3:ad:23:2b:73:9d:4a:40:
         87:57:a9:d1:95:6a:98:ef:61:7e:80:42:f3:a6:eb:92:96:41:
         30:96:08:85:15:fd:04:73:cc:2a:51:68:13:ed:90:d2:ed:9b:
         1f:f0:95:a9:cf:e9:48:f8:89:cb:e0:5f:67:9f:68:1f:52:3d:
         35:68:03:b5:62:2c:48:37:33:87:2e:59:45:50:2a:02:76:33:
         ae:ed:cf:e5:7a:73:03:50:e0:fa:12:13:d6:22:07:1a:70:f1:
         32:2a:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:28 2025 by rpki-client