Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File:                     UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier:          Pmml3ldMSyVO2A+hyz2LLNTB4vkJ+NovSIcs1uo777c=
Subject key identifier:   3D:4A:19:69:2C:75:3B:50:A1:02:C9:7B:4D:B9:C7:6A:81:DF:67:7D
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer:       /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial:       019852315D262F382BB80AC650BBDD704961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number:          161B
Signing time:             Mon 28 Jul 2025 18:00:23 +0000
Manifest this update:     Mon 28 Jul 2025 18:00:23 +0000
Manifest next update:     Tue 29 Jul 2025 18:00:23 +0000
Files and hashes:         1: 0zLOEB5vy5c-8Tq5A0mIyET-fGs.roa (hash: Mehc6ene1llyetFafCLYX+ACHG4HbBNKN0BRvACi9As=)
                          2: OzXNHG4LtvlFbVU7s9pRDirIBds.roa (hash: QE+ieJz3D6uISsfva3kiDLqlfp584KGhR+dFtVz/Wf4=)
                          3: S1ui4XpVCTm1Vm2OpLHGmY_ZuN0.roa (hash: 3qwiok+pffK8+ko0f890CJV54WEIRSPAcVGZFhekYsc=)
                          4: TQyjECyEBDxHd5gx-OyJlZ_34yY.roa (hash: M5RNaPyCpCIK/N3qNnK5z9iSP22MQyKR8Rdy90hwwOM=)
                          5: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: EBsGOgq394HGdFFZSj+LhYYCkYeq/jnAAwUsqkHWupI=)
                          6: k9a98NqHjelrZVUWhKMb68LgxUE.roa (hash: 6VyAIEvjXORry2KtmNbj+FoMHc5b899/tsCBJkg8fEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:31:5d:26:2f:38:2b:b8:0a:c6:50:bb:dd:70:49:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
        Validity
            Not Before: Jul 28 18:00:23 2025 GMT
            Not After : Jul 29 18:00:23 2025 GMT
        Subject: CN=3d4a19692c753b50a102c97b4db9c76a81df677d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6d:b6:c4:d2:3e:f7:73:09:66:71:87:86:24:
                    ab:fc:6b:a0:ee:09:e6:e6:95:79:18:f3:14:a3:60:
                    ce:44:12:02:85:1c:96:4a:6a:4c:5d:91:ca:c5:0d:
                    1a:16:80:5e:6b:af:eb:2e:f0:7c:4d:04:55:d1:37:
                    88:90:0e:e6:1a:3a:f9:86:ed:f1:35:de:e6:52:d2:
                    a7:69:14:dd:10:13:8c:60:24:90:d3:f0:3e:aa:8c:
                    4d:87:63:4f:a5:c0:92:e6:99:be:08:76:10:2a:8d:
                    63:12:90:09:49:d2:ce:2e:9b:ae:54:af:f1:4a:78:
                    d7:b6:f1:11:67:1b:97:cf:ad:1e:8a:aa:79:c5:db:
                    c0:9d:ea:e5:72:4f:8f:76:81:62:c7:d1:6b:3f:61:
                    0d:72:a6:9c:0b:56:33:44:f3:8a:e9:48:c6:61:3a:
                    db:93:64:8b:9c:f9:c6:e4:72:28:bd:21:c2:49:0b:
                    6f:bb:bb:2c:42:99:74:4b:30:8a:58:f1:9b:b1:38:
                    4d:86:2d:2b:dc:a8:3b:8f:86:fb:8e:41:2c:3c:46:
                    3d:f8:56:26:ef:7f:cc:fc:2f:45:b0:ab:6a:8f:ae:
                    80:03:4e:8a:6a:a2:f3:7e:a5:61:79:f8:5a:35:94:
                    35:36:3b:01:61:20:4d:ba:34:fd:1c:68:78:4b:23:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:19:69:2C:75:3B:50:A1:02:C9:7B:4D:B9:C7:6A:81:DF:67:7D
            X509v3 Authority Key Identifier:
                keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:8f:1b:2c:52:8f:6d:b0:dc:0d:f1:eb:1e:fc:5f:d1:cc:
         1e:aa:c2:cf:15:b2:cf:4b:ff:2c:aa:ff:9c:5c:ce:a9:22:67:
         db:c5:42:8b:38:0d:b3:52:00:4d:ec:9a:30:d7:dd:10:e9:89:
         59:4a:30:79:b8:cf:64:74:0a:f8:b7:2d:35:42:55:ff:eb:cd:
         4c:79:38:15:db:2a:2c:4c:e5:6e:54:1d:a7:8c:a7:a1:ed:d4:
         03:66:b1:e8:ae:3d:ca:e9:1e:93:1c:a7:b3:79:32:31:46:bf:
         31:cc:16:cd:f9:d6:df:92:52:08:42:a3:c1:6f:8b:de:d8:81:
         94:fd:4e:58:31:0d:af:b5:14:a5:5a:71:ed:94:e8:22:b1:3b:
         09:f5:7b:ae:67:84:88:c1:0b:61:6c:61:30:1f:56:35:02:ef:
         64:83:6d:19:3a:66:be:25:43:a7:66:78:88:0a:92:be:a1:dc:
         2f:ea:5b:99:86:43:c9:05:13:27:d4:de:59:78:8b:11:a1:95:
         76:b8:dc:ae:2a:6a:92:e3:21:ed:6a:60:ee:e7:21:21:b0:1b:
         3b:3c:ed:c7:1c:21:b3:47:c5:30:e7:19:9a:f0:1d:87:58:8d:
         10:83:19:82:46:f5:d0:06:18:70:76:90:2e:b8:cb:d2:30:46:
         fb:d8:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:44:20 2025 by rpki-client