Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File:                     uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier:          4VtzeHliHxFkGdJ+Jba6nAHZJ3QTrHnTe2J15reAVxI=
Subject key identifier:   2F:19:8B:EE:BB:89:16:72:C8:22:CF:8B:C9:C4:41:74:6E:63:9C:31
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer:       /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial:       019849660A5991AEC745D9778D83E9F89208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number:          0D20
Signing time:             Sun 27 Jul 2025 01:01:20 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:20 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:20 +0000
Files and hashes:         1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
                          2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: rFVaHtpNc+37rk55ozawAketeWM7KTWquQ+fyNsy0OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:0a:59:91:ae:c7:45:d9:77:8d:83:e9:f8:92:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
        Validity
            Not Before: Jul 27 01:01:20 2025 GMT
            Not After : Jul 28 01:01:20 2025 GMT
        Subject: CN=2f198beebb891672c822cf8bc9c441746e639c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:e2:fd:e6:e9:4e:60:12:b4:54:04:d3:86:
                    27:3f:1a:4c:fb:74:58:ee:e4:2e:69:51:fd:ae:24:
                    3c:31:a3:ed:49:58:92:e7:f0:7a:eb:ed:7b:77:74:
                    aa:8f:cd:d7:d6:1f:a1:83:30:f3:10:fb:6d:d0:6f:
                    84:28:13:45:7b:31:a0:9f:b3:0e:3b:5a:35:3b:a4:
                    e6:70:75:f9:6d:3d:0c:fa:f0:12:e1:a0:ec:03:af:
                    90:af:eb:77:c1:10:9d:c1:ae:3b:73:2b:6c:dd:b1:
                    df:23:fe:c4:16:8e:00:9f:23:b4:7c:b7:67:bc:c9:
                    ac:4c:40:03:2d:ab:cd:4f:4d:d7:e4:26:0e:fe:c2:
                    e9:e9:a6:ba:74:ab:c6:c6:cb:ba:b1:c2:a4:ed:03:
                    3b:43:0d:07:5e:9c:26:fc:a9:1b:cf:ef:d0:4a:3d:
                    11:9f:42:08:71:5f:43:cd:5a:7b:74:14:2f:4b:f4:
                    e2:00:8c:3b:b3:8a:46:f8:b8:ed:7f:e7:2d:0c:14:
                    66:7a:98:43:3c:2c:c8:ba:02:b0:0f:50:8a:88:fb:
                    14:48:b1:56:2b:32:4c:ce:be:9e:1f:ba:d0:39:03:
                    e6:76:6f:f1:f2:3c:f3:29:80:7f:05:28:17:81:b5:
                    3d:dd:66:d7:76:7c:d3:ff:af:30:a7:e7:f9:60:6a:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:8B:EE:BB:89:16:72:C8:22:CF:8B:C9:C4:41:74:6E:63:9C:31
            X509v3 Authority Key Identifier:
                keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:c9:71:a5:58:9d:ef:45:29:00:f3:a6:2d:82:dc:50:46:
         66:03:e7:40:2a:56:db:2f:db:34:3c:fe:b6:61:e5:f7:bf:c9:
         26:d3:b5:b0:7f:b3:a4:c0:b8:35:cf:15:4f:d3:37:9e:f6:32:
         50:75:09:e0:17:d2:2e:cb:c0:4d:d6:af:c4:a0:32:87:77:fa:
         1d:73:b7:77:c1:74:07:ba:1e:ca:5f:b8:e0:bf:cf:b2:8b:58:
         78:4a:0e:73:b3:c3:74:2c:4b:aa:6f:88:73:e9:10:9c:0c:db:
         69:21:10:6d:32:04:45:90:50:69:ad:46:2f:7a:81:16:b2:6d:
         61:f0:0f:57:6c:ef:b1:ea:42:a5:c3:d4:2c:8b:f1:8e:f7:ba:
         39:58:65:6b:ff:aa:48:a6:27:bb:55:d3:24:07:b7:30:fa:9e:
         a1:0a:30:c2:f0:2a:2e:2a:fb:1d:61:68:0a:d5:30:2e:26:26:
         b3:0a:9f:57:df:3b:8b:21:da:bb:15:9d:c0:52:e8:94:b9:31:
         98:1b:b0:0f:f2:f8:16:2b:46:64:f4:d2:c7:34:a8:c3:ab:e8:
         5e:ee:96:4c:1e:d0:f2:87:59:ef:68:c9:f2:01:92:80:70:8b:
         e2:fd:60:62:07:1a:77:4f:8e:44:22:59:39:fc:53:08:50:15:
         6a:86:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:36 2025 by rpki-client