Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File:                     U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier:          eE52yM8Eym8VNj1XnO/dNC3KIFxI1VRU8sFkED+V2/k=
Subject key identifier:   B0:5A:46:BA:B6:8F:CA:3E:18:95:96:E9:5C:71:68:EE:7D:7A:03:A8
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer:       /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial:       01984966A089BB4A5468FDED4C8223EF290C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number:          04E7
Signing time:             Sun 27 Jul 2025 01:01:59 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:59 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:59 +0000
Files and hashes:         1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
                          2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: 69lTpqhe27AzGR4x7JMLO+eBfzhrtC8O+28pMfZfARY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:a0:89:bb:4a:54:68:fd:ed:4c:82:23:ef:29:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
        Validity
            Not Before: Jul 27 01:01:59 2025 GMT
            Not After : Jul 28 01:01:59 2025 GMT
        Subject: CN=b05a46bab68fca3e189596e95c7168ee7d7a03a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:3b:85:81:30:f7:23:44:59:cc:27:dd:05:
                    c7:26:68:ba:c7:a4:c2:c0:a0:6b:77:84:a5:0d:66:
                    ba:00:38:12:74:90:21:e6:71:67:3a:08:b5:18:3d:
                    86:74:16:13:fa:89:71:b5:bf:06:fa:7d:c6:0a:f5:
                    24:8a:2f:71:d0:aa:b6:85:e3:e0:a1:99:92:21:72:
                    cd:b7:14:dd:4f:df:20:fe:d3:ea:ec:66:dd:bd:dd:
                    d4:14:cb:f5:7c:7a:19:70:a9:27:40:87:41:8b:07:
                    26:2f:38:0f:33:7d:bd:92:b1:e8:ca:af:31:e7:dc:
                    1d:8b:b3:22:43:ef:db:ab:2a:4d:6c:a4:c5:e5:6e:
                    ed:3a:80:b2:f6:23:e6:4e:c9:e7:60:51:0b:14:6c:
                    b5:ec:94:d6:df:ed:d4:a9:57:88:37:fe:90:47:b9:
                    b0:1d:7c:66:5d:9a:cf:65:29:9f:53:23:66:3b:ad:
                    0a:14:22:84:72:d6:6d:28:cf:96:05:10:76:66:2a:
                    09:fa:4d:43:8b:68:13:b6:45:30:28:84:f8:74:5b:
                    d7:13:e4:7a:f3:8f:6d:55:f1:4f:75:ec:36:65:21:
                    91:c6:d5:5f:6f:0a:ab:2e:b9:23:d3:11:6d:a9:5a:
                    fd:19:46:b4:f7:c3:d2:8b:65:25:c8:58:f4:f0:cc:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5A:46:BA:B6:8F:CA:3E:18:95:96:E9:5C:71:68:EE:7D:7A:03:A8
            X509v3 Authority Key Identifier:
                keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:c6:57:58:f2:e5:04:ca:27:81:9d:88:0d:88:dc:20:c5:
         60:98:bb:40:04:c2:67:70:4d:7d:ae:d8:e6:15:ef:cf:78:4b:
         d3:37:54:66:99:be:99:3b:49:d3:82:1d:b1:12:39:3b:f9:b3:
         e4:28:3b:07:d5:5b:7c:59:cc:13:4c:8f:86:f1:9e:35:ad:f3:
         70:11:e5:b9:a6:45:53:4c:4e:c2:9d:4a:e5:72:cc:8a:15:6e:
         98:a4:7e:9f:a7:3a:2d:cd:54:af:65:cd:9a:a5:2b:b5:9f:4c:
         4e:df:75:01:72:b8:99:62:37:40:a8:04:c5:fd:c8:79:13:f9:
         c7:8f:c0:25:0e:73:37:74:d3:ce:b4:58:29:15:6f:07:b5:6b:
         db:11:77:ec:8f:c9:0a:2c:10:04:64:d7:6f:9f:2a:24:d2:9d:
         4c:63:e8:9b:39:65:e8:ab:fa:d1:93:9f:b3:b7:25:54:e2:95:
         4b:fa:af:53:43:9d:90:1b:40:ce:58:86:e8:38:f6:b1:05:ee:
         43:fb:90:05:9c:ec:21:27:ba:78:4b:89:54:de:02:18:4c:80:
         e0:40:ea:f9:fc:71:3b:e9:9f:db:77:2d:dd:de:e3:f8:95:43:
         00:0a:6c:5c:67:c1:27:87:30:d6:9f:d4:a1:f9:d7:01:0a:a0:
         ff:02:0d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:56 2025 by rpki-client