Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File:                     UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier:          ql2pkpUrLm8/7/E4yNU2JxWEGUHJOkkqS4DgW9XgSyY=
Subject key identifier:   32:93:F9:09:12:4D:98:4B:C9:4E:40:F8:A3:50:11:99:AA:C0:6C:F1
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer:       /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial:       0198462D4DEB559FD6F5FDCA3BD6445EEC74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number:          0E69
Signing time:             Sat 26 Jul 2025 10:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:30 +0000
Files and hashes:         1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=)
                          2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: lrjELc0xjbpIljeW1dcZ+GSUDMADuKI0nafXdVjvVTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:4d:eb:55:9f:d6:f5:fd:ca:3b:d6:44:5e:ec:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
        Validity
            Not Before: Jul 26 10:00:30 2025 GMT
            Not After : Jul 27 10:00:30 2025 GMT
        Subject: CN=3293f909124d984bc94e40f8a3501199aac06cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:94:a7:72:a5:b1:06:51:3e:b1:68:fc:92:
                    04:9e:4d:92:9d:1f:50:b7:26:c5:36:e9:4d:83:8a:
                    53:30:25:f5:f8:81:39:e5:f6:da:84:b8:27:65:7d:
                    7f:33:9c:05:4b:e8:40:6e:95:ae:69:82:11:31:72:
                    2f:bc:08:57:42:e4:53:07:71:e5:1e:9f:82:09:31:
                    24:7a:54:ed:21:e2:76:f6:45:84:f5:bd:f9:bd:1b:
                    a9:b2:e3:69:45:fe:67:52:7a:29:57:f1:5b:26:b4:
                    3d:54:55:0d:92:b4:ba:0e:a8:4d:4f:cf:0f:01:9c:
                    df:f1:02:fb:7b:74:2b:3e:e0:50:28:85:ca:b5:17:
                    c7:be:57:8b:62:34:18:c2:b3:6d:82:66:e9:42:a5:
                    1a:c1:55:ac:4e:41:75:a7:61:f8:33:e0:08:2e:59:
                    86:5a:32:37:0a:f8:4a:58:d3:83:38:a5:f6:e5:0b:
                    d7:60:cf:28:2a:3b:1d:8a:3b:8f:77:0a:c5:5b:c8:
                    3b:42:7c:17:65:6c:5a:c6:14:f0:4a:3c:4a:84:40:
                    9a:14:0b:e5:ad:0a:73:24:43:7d:4d:48:73:cc:d9:
                    12:fa:0c:64:89:57:36:b1:62:22:39:a0:15:62:62:
                    4d:e9:8f:6c:59:f5:aa:f4:ba:7f:48:1a:47:3c:94:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:F9:09:12:4D:98:4B:C9:4E:40:F8:A3:50:11:99:AA:C0:6C:F1
            X509v3 Authority Key Identifier:
                keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:40:f6:a4:dd:7d:16:4b:51:69:aa:bd:68:73:52:b3:50:b1:
         ba:24:e2:04:ee:c2:c7:33:79:c5:62:eb:8b:3e:d8:fe:12:b7:
         b9:68:48:38:4f:e1:5a:9f:35:23:81:09:ee:5b:00:b7:0d:30:
         69:10:d3:14:75:a0:00:6d:50:6f:01:c7:29:ed:06:0d:4a:b0:
         58:2a:ad:01:78:59:7d:01:a0:28:d8:90:dd:b3:fa:47:83:a9:
         0c:29:4a:69:4d:a0:1d:42:5d:f0:af:3f:e8:26:72:c0:0a:d2:
         b3:96:fc:ff:8d:5d:8f:19:01:c1:10:f3:89:d0:b4:dd:a2:e4:
         e1:a0:f0:cb:a7:7c:9b:a6:f7:64:fb:0f:54:56:8f:7e:8d:97:
         82:f8:f4:9c:2f:14:8a:a5:f2:02:72:68:b3:ec:c0:89:d6:19:
         a3:2f:45:b4:6a:31:55:d5:d7:26:bb:b1:66:b4:53:e5:9a:b4:
         1d:9a:35:1f:4b:cc:a3:3a:0d:a2:6f:9e:43:12:08:a3:1d:5e:
         c8:31:cb:81:d4:7a:7c:55:ab:ba:af:f4:89:32:19:da:e6:99:
         e7:53:ca:56:52:c0:a4:96:66:f0:d9:ef:d0:14:a4:6b:e6:f8:
         05:ff:4b:f4:41:8b:73:1f:8b:d7:97:42:34:41:e8:5a:ad:c2:
         1c:e5:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:00:29 2025 by rpki-client