Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
File:                     ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json)
Hash identifier:          XP+WVBkpQKDH1EMgZ3q1ej6fBuNN/ezGbJAQ5hjQRn8=
Subject key identifier:   4A:EC:B0:F6:FA:A5:4C:53:4F:8A:72:2B:12:A5:7E:95:CE:33:81:E6
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Certificate issuer:       /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial:       019828FEFA0DDBB8B57DF5BB7FCFCD8E1BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
Manifest number:          119F
Signing time:             Sun 20 Jul 2025 18:00:55 +0000
Manifest this update:     Sun 20 Jul 2025 18:00:55 +0000
Manifest next update:     Mon 21 Jul 2025 18:00:55 +0000
Files and hashes:         1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=)
                          2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=)
                          3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=)
                          4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=)
                          5: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (hash: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=)
                          6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=)
                          7: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=)
                          8: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=)
                          9: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=)
                          10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: rcf/f7dT6m/2SmIZw8TQF3wXNl3oHV0WVI7nD0BKths=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:fe:fa:0d:db:b8:b5:7d:f5:bb:7f:cf:cd:8e:1b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
        Validity
            Not Before: Jul 20 18:00:55 2025 GMT
            Not After : Jul 21 18:00:55 2025 GMT
        Subject: CN=4aecb0f6faa54c534f8a722b12a57e95ce3381e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:ea:e2:65:98:2c:6f:34:39:d4:46:51:e4:
                    e7:92:3d:d4:0a:80:b0:f4:f9:3a:3d:6b:c3:70:8e:
                    ab:ed:1e:fd:e0:83:d4:fa:7d:20:0c:a3:ae:2d:b1:
                    8b:5a:b7:ca:06:32:a2:39:3f:c8:47:36:20:bb:25:
                    f8:0e:6e:b5:42:b6:df:04:4d:f4:c3:fd:a1:3c:bb:
                    02:65:ac:8a:ec:03:63:7b:2a:e5:b9:e7:46:df:1c:
                    3d:ac:40:70:1f:71:e0:c6:15:0b:97:77:89:a9:20:
                    a5:20:da:fd:7e:f4:9b:b8:4c:9c:11:0a:26:7d:7d:
                    a5:0c:d2:06:bb:2f:45:7d:ed:a4:d3:98:ba:d9:5f:
                    b6:5d:05:a6:43:27:37:f5:bb:20:dd:52:19:fa:b0:
                    7a:5e:62:a2:54:e1:1a:7e:55:fe:b6:93:2f:80:f4:
                    e9:74:42:86:ac:8a:ba:56:c3:47:85:09:cc:43:a1:
                    cd:ad:fc:2a:1f:f5:df:71:73:9e:9a:27:2a:60:6b:
                    1a:d1:4e:0e:ae:c4:5f:22:41:f9:50:92:b3:13:c3:
                    04:df:c8:d0:68:34:2f:5c:8d:7c:ea:d3:b6:12:52:
                    46:bb:84:91:71:77:01:72:7e:95:48:5a:e8:6a:ae:
                    cf:5f:38:56:3b:f1:67:d0:5c:47:1c:05:9e:f7:f6:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EC:B0:F6:FA:A5:4C:53:4F:8A:72:2B:12:A5:7E:95:CE:33:81:E6
            X509v3 Authority Key Identifier:
                keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d5:f3:a1:2e:52:10:b2:90:c0:5f:2c:ae:59:9d:2a:85:0c:
         48:59:6b:ef:e9:2f:b8:ce:3f:5e:31:e4:6c:a3:37:47:39:9b:
         6a:00:11:35:2a:e0:22:7a:32:41:25:51:69:b5:a2:91:f5:94:
         a9:40:7a:85:be:20:e5:26:c0:19:ee:04:2b:28:cf:64:87:01:
         98:cc:b9:af:1e:6d:01:5c:4a:cb:15:37:f7:20:fd:79:31:df:
         76:13:a3:f8:12:46:44:c1:1e:38:c5:7a:30:03:e1:9a:6d:59:
         bf:7e:d2:11:d1:83:a9:bd:a9:9c:6e:eb:ca:c4:c9:2a:cb:81:
         21:fc:92:8a:a6:e5:53:1a:d6:73:bc:36:00:31:7b:e0:85:05:
         0c:ff:62:0e:8c:ee:73:4e:79:be:69:1e:f9:19:40:22:f3:77:
         15:2a:13:21:91:ed:81:ef:3d:d6:44:3b:38:20:19:38:1f:25:
         e4:5b:16:27:f1:2c:09:b7:29:4d:8d:da:aa:b6:46:5a:d9:21:
         a7:c5:d9:38:fa:13:0c:79:0a:d8:12:85:31:dc:bd:d8:58:a4:
         6d:c7:5a:21:49:ae:6b:d2:3f:92:a8:98:3a:ab:1f:73:f9:89:
         02:21:54:ab:00:90:87:63:88:3b:68:7e:b4:c5:0f:58:38:50:
         c7:cf:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:18:12 2025 by rpki-client