Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
File:                     UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json)
Hash identifier:          +KBMUPDzwF/nOr61fsgeoyuyCY5/juJnhJYaurPQPoU=
Subject key identifier:   71:59:D2:4F:8E:C8:CC:38:0A:A0:DB:FF:DF:91:FC:47:BA:90:AF:A2
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Certificate issuer:       /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial:       019849D30C7EFAEE61D101A1B08A1C7092AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
Manifest number:          1592
Signing time:             Sun 27 Jul 2025 03:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:24 +0000
Files and hashes:         1: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: Plf5nSKuWQzqlcqWwlehvw6Z/j0F2GZBd/YXw0Zilaw=)
                          2: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (hash: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:0c:7e:fa:ee:61:d1:01:a1:b0:8a:1c:70:92:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
        Validity
            Not Before: Jul 27 03:00:24 2025 GMT
            Not After : Jul 28 03:00:24 2025 GMT
        Subject: CN=7159d24f8ec8cc380aa0dbffdf91fc47ba90afa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:28:e8:62:a7:f6:31:e5:f4:4d:55:f2:9d:
                    c8:c7:c0:06:eb:56:71:86:5c:b5:6b:50:a0:82:19:
                    64:b6:b3:fb:ed:51:db:31:61:26:d0:2d:44:d3:dd:
                    12:7f:11:c9:37:9e:68:a5:12:5d:c6:99:4f:07:18:
                    fb:d9:2a:6a:48:e0:ab:79:82:3e:bd:11:cb:2f:ce:
                    20:06:52:d4:92:27:13:7b:92:97:d8:31:f1:69:d0:
                    05:97:31:cf:4d:79:81:4c:83:04:d4:bd:0a:33:0b:
                    33:cd:87:9e:b5:f4:05:d9:92:5c:36:59:a4:a8:9e:
                    bb:28:c5:61:65:4c:a6:58:79:72:24:12:de:cf:d6:
                    8a:8c:66:c2:3a:dc:b9:bd:c0:69:6c:a6:be:91:27:
                    a4:26:17:87:ac:87:d2:df:66:d0:77:16:9d:81:00:
                    f0:d7:45:3c:39:5f:1e:52:ed:0d:d8:e8:4b:b9:b5:
                    77:7a:32:a7:14:60:0b:5c:80:c0:4c:bd:2a:dc:49:
                    e0:01:cc:2d:4b:67:cd:df:bb:79:38:bc:33:19:61:
                    00:76:d9:4d:1b:2f:82:51:4c:9c:18:db:48:46:c7:
                    e5:11:6a:8f:e8:61:ed:2b:e2:59:64:0c:9e:30:43:
                    0d:56:aa:60:f0:e5:3d:17:7c:ca:55:6d:89:1a:01:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:D2:4F:8E:C8:CC:38:0A:A0:DB:FF:DF:91:FC:47:BA:90:AF:A2
            X509v3 Authority Key Identifier:
                keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a4:b2:10:34:3a:61:03:dd:57:0c:fb:a8:80:22:7e:c5:76:
         dc:53:38:48:12:84:62:f6:b0:09:c0:b0:6a:28:e4:77:9d:aa:
         f1:a4:b6:41:da:5c:94:b6:a4:f0:b8:75:e0:02:49:31:a9:6d:
         e1:55:8f:60:06:a0:71:f7:3e:01:1a:ca:71:86:8a:8f:e1:92:
         a8:87:94:da:c7:43:62:f4:78:f4:72:4c:25:ff:25:78:71:87:
         57:8f:7c:72:05:10:55:01:21:a5:de:d4:56:3e:cf:2c:89:9c:
         07:5d:88:73:02:ce:12:10:83:e9:ef:2d:0c:55:3a:25:fa:63:
         d1:98:2c:a5:47:f9:e7:9e:a1:18:aa:f5:4f:14:b8:b8:dd:ed:
         c0:83:6d:5d:06:4d:d0:d2:14:b4:e4:3b:db:59:26:20:41:1e:
         f2:f1:f7:57:1b:33:02:f4:5e:09:44:16:40:c9:e9:82:f6:6d:
         bd:71:83:cf:64:40:ef:27:0f:d4:b0:bf:bb:38:a5:8f:21:9f:
         2f:8b:f8:c5:a7:d3:2b:fe:26:12:e8:a3:84:80:66:34:3f:f6:
         08:2c:65:14:ce:79:63:fd:cc:08:2a:6e:b9:3e:3a:d1:3c:12:
         c9:21:c9:b2:93:54:33:1a:71:60:d4:7f:fc:c4:65:19:06:53:
         58:78:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:50 2025 by rpki-client