Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
File:                     1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft (raw, json)
Hash identifier:          dhvt7YOHjClnFvbW7PVe9ZP4wGrGvZAydxnf18OLiwQ=
Subject key identifier:   94:E1:6C:E7:77:DB:D5:41:7D:0D:07:7B:C0:BD:09:00:B2:A4:B2:77
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Certificate issuer:       /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial:       01984965FD015F48EFF22B7109BDFC25FA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
Manifest number:          1592
Signing time:             Sun 27 Jul 2025 01:01:17 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:17 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:17 +0000
Files and hashes:         1: 1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl (hash: 8Xw1UKYDNUW6qK3MJORbhTtcv6pAi5vc4LDdDs2IGoc=)
                          2: z7Y6upJ_TkHMEGYoplQxNU1SqZQ.roa (hash: g8ersIEKF+DbLZ7cbrjxi/sIsUM2GOmUMJe3QIftaDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:fd:01:5f:48:ef:f2:2b:71:09:bd:fc:25:fa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
        Validity
            Not Before: Jul 27 01:01:17 2025 GMT
            Not After : Jul 28 01:01:17 2025 GMT
        Subject: CN=94e16ce777dbd5417d0d077bc0bd0900b2a4b277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:e0:a1:67:3e:a0:bc:7e:17:fa:d2:5c:bf:
                    89:ec:4d:3c:fd:9a:99:8d:94:b1:cf:d7:ca:c6:30:
                    da:87:b0:94:0c:76:3b:25:ac:81:1d:44:e2:fc:d4:
                    27:a7:03:ca:b6:66:79:9a:d3:2d:2e:44:3c:cb:df:
                    e8:29:aa:87:3a:47:fb:24:f2:57:a4:e6:f6:7d:5b:
                    81:9f:32:72:7a:f6:98:d5:9a:b6:e4:f6:98:81:0e:
                    e1:aa:9d:d0:a6:d8:bf:0d:f1:c9:40:8e:85:75:e0:
                    6d:78:28:9d:24:a3:1b:45:a3:11:c8:f8:5b:19:27:
                    67:9c:a0:e6:f2:9c:7a:37:8e:ef:d7:64:6a:a1:67:
                    04:38:e9:fd:a3:e2:2c:cc:64:c1:79:c0:8a:31:b4:
                    dc:c1:4e:32:b9:78:8c:4e:9f:1a:8c:41:9a:1c:f8:
                    0a:c2:c7:69:3d:54:84:6f:38:9d:20:a3:00:49:67:
                    79:31:42:70:6c:e6:bf:20:bc:47:0c:11:f0:ee:75:
                    43:82:70:3e:db:61:56:cd:82:8c:8d:d9:05:91:2c:
                    6b:69:85:c4:83:7c:cf:91:6a:90:c0:3c:89:60:1b:
                    e8:68:34:a0:ad:a0:d8:95:ec:e5:aa:ea:93:0b:c6:
                    02:71:0a:ac:49:ef:21:0d:fe:96:7d:9a:fb:40:82:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E1:6C:E7:77:DB:D5:41:7D:0D:07:7B:C0:BD:09:00:B2:A4:B2:77
            X509v3 Authority Key Identifier:
                keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:79:1c:2d:66:5d:7f:31:8c:e2:95:7e:a9:82:2a:32:b5:3a:
         46:63:6d:06:91:88:5b:cc:ec:ed:9f:b0:48:78:5b:10:74:fe:
         88:71:87:fe:da:7e:0e:83:57:9c:39:59:9c:42:ed:b0:41:76:
         9f:33:9e:ab:01:e4:72:e0:34:8c:6c:5c:58:7c:30:54:32:23:
         76:59:bd:f7:e0:cb:90:d3:85:ac:65:78:e7:32:82:27:59:c4:
         0e:d9:9e:98:f2:07:90:98:2c:c7:81:84:a0:12:0a:d2:40:e7:
         ec:66:6d:87:2b:c0:93:31:5a:59:f2:35:4a:76:b3:c1:34:fd:
         1a:bd:72:29:5e:dc:fd:37:62:78:a2:aa:56:9c:da:5b:11:d4:
         19:14:c3:af:bd:07:87:4c:56:46:ae:ae:14:ff:1a:83:85:bc:
         2b:d0:14:5e:a3:dc:08:8d:26:f3:97:dd:e3:8c:03:c8:9d:90:
         98:7b:a8:d2:f0:a1:d3:58:a7:87:e2:5a:08:5d:12:a8:9f:02:
         5c:60:9a:e1:d5:87:bf:95:dc:f3:8a:bd:bc:b6:26:2c:e2:e5:
         8a:e8:d7:94:c0:c8:ae:e2:1a:40:9d:0b:40:31:4b:df:7e:29:
         01:59:b6:54:e2:9f:e6:57:50:10:c6:f2:f4:4c:30:15:c8:a7:
         1a:93:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:55:00 2025 by rpki-client