Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File:                     UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier:          g8K3t96lXxDo9TTahrDkEAbdPBRHStGDesTebwLqOn4=
Subject key identifier:   7E:98:89:9B:C7:49:83:1E:68:F3:4E:62:5C:5A:92:60:70:4E:BB:9C
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       019849D35EB9A523780A9499C372FC7CBECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number:          1447
Signing time:             Sun 27 Jul 2025 03:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:45 +0000
Files and hashes:         1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: 8jk29FVdPFhq1dcOrB9okpzty6Dkwj4NQPyFOD4PPoE=)
                          2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:5e:b9:a5:23:78:0a:94:99:c3:72:fc:7c:be:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: Jul 27 03:00:45 2025 GMT
            Not After : Jul 28 03:00:45 2025 GMT
        Subject: CN=7e98899bc749831e68f34e625c5a9260704ebb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:cc:0c:8c:d4:e5:3f:4a:5e:b3:3f:a1:ca:
                    24:5d:04:a3:20:8d:d5:c7:8b:00:ef:77:78:15:50:
                    88:d6:13:70:c2:30:ea:b0:c2:9d:aa:83:dd:0f:09:
                    c6:e4:3c:bd:e3:ac:37:2a:15:17:bd:8d:25:9d:67:
                    62:09:ff:90:d6:32:a3:14:f7:7e:07:d5:96:0b:d9:
                    1b:b9:f2:f1:17:52:0f:ea:60:9b:20:90:29:98:c8:
                    e6:68:55:f1:ae:df:7f:24:aa:a7:b6:3d:0b:00:4d:
                    d6:8c:16:aa:d4:a9:90:f4:21:e2:0c:88:b0:0f:cb:
                    57:e4:6a:ec:db:3a:56:b2:fe:ec:5f:fc:d0:82:fc:
                    ea:42:97:05:1d:3b:e6:89:e1:f0:f6:dd:fb:ae:52:
                    72:64:da:cc:b2:ec:71:12:43:b0:c0:1e:e4:54:44:
                    f3:cd:1c:a1:f0:99:a3:55:28:c1:88:cf:4b:a3:4a:
                    c0:e4:57:f1:cb:ca:ef:66:80:46:d2:44:58:f3:47:
                    87:4d:10:92:db:25:82:26:8d:02:5e:a9:6c:e4:f3:
                    b2:cb:b7:c8:35:b8:ba:17:8e:f4:13:cc:69:eb:2c:
                    eb:51:eb:30:3f:49:6d:af:39:18:3a:e9:8f:35:02:
                    01:02:b8:51:0e:22:8b:bc:87:79:c9:bd:bc:ef:d3:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:89:9B:C7:49:83:1E:68:F3:4E:62:5C:5A:92:60:70:4E:BB:9C
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:c8:b3:26:39:f8:89:62:b9:63:7f:b7:20:aa:98:07:0b:
         ad:41:46:cd:d1:41:5d:20:1b:c1:f7:38:20:90:e8:aa:a2:1c:
         1d:82:f8:3c:9a:8d:91:7f:32:c7:53:a2:62:5f:29:a9:f2:86:
         b7:c8:08:12:d2:5a:fe:9c:31:8a:73:a4:66:41:e6:fe:ef:13:
         2d:8c:ba:75:e1:31:a8:02:95:26:94:65:de:91:7a:12:69:16:
         cb:fb:54:54:d2:48:fd:08:84:4a:5d:08:23:89:36:5a:6e:f9:
         c1:17:ba:9d:5d:53:a7:89:0c:cf:ad:68:c6:75:8b:37:2e:1e:
         6b:1d:e2:c8:92:2e:c0:14:84:68:61:e7:da:62:ae:06:c5:9c:
         48:bc:11:20:04:37:4a:aa:73:e8:e1:49:96:bd:da:48:63:18:
         ee:c2:1a:7f:b2:75:26:d4:b2:86:1e:bb:61:8e:d8:99:b7:e0:
         3b:a7:ff:4e:35:a9:d8:43:7c:21:2b:e0:a8:6d:5c:4d:45:11:
         e6:8e:d3:c2:c3:f0:89:00:6b:7d:43:aa:0c:f6:78:95:1d:81:
         1a:87:95:7e:17:35:e5:45:c3:9d:64:30:76:87:d0:1d:76:f7:
         f9:f7:25:a5:98:eb:66:f4:f3:c9:0e:d7:6f:d1:7d:aa:72:2c:
         36:68:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:41 2025 by rpki-client