Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File:                     uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier:          FUFB7C9ZcND7zd5H29WORKRGyL8+7zFDcIfZVR3vzIE=
Subject key identifier:   1B:35:86:90:67:80:05:52:AB:BD:D1:BC:C2:F0:D1:55:01:05:9E:81
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer:       /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial:       019848528FFB31A883B5D71FAD744E31ECA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 20:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:27 +0000
Files and hashes:         1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
                          2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: oVw/tPIFrddfG7E5EF8RRKD2C2MplSX0eyMSSILkHoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:8f:fb:31:a8:83:b5:d7:1f:ad:74:4e:31:ec:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
        Validity
            Not Before: Jul 26 20:00:27 2025 GMT
            Not After : Jul 27 20:00:27 2025 GMT
        Subject: CN=1b35869067800552abbdd1bcc2f0d15501059e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:8c:3a:8d:03:a4:dd:8d:67:a9:7a:83:2b:
                    5b:ea:ac:e8:16:90:e3:82:61:84:12:c5:d0:86:3a:
                    61:3d:3d:80:88:62:51:14:1e:f5:9c:9f:98:2a:fc:
                    e8:3f:d6:89:48:ea:a2:fe:ab:b2:48:2a:c2:5f:84:
                    d2:c7:d3:68:12:2c:c5:e6:0e:88:c9:1c:65:8f:ab:
                    30:0d:53:0a:9f:83:02:fc:d7:88:77:00:31:bc:14:
                    78:e9:d2:a3:2d:99:8e:65:db:a9:4a:01:0c:f3:2d:
                    ed:0c:e0:ff:a8:25:30:3b:e6:9a:62:5b:15:a8:a9:
                    e6:d6:c1:2e:58:04:83:00:09:d2:62:9d:90:7e:0c:
                    7b:a6:c9:25:50:5a:12:21:9a:68:2b:16:62:91:71:
                    bb:90:e8:d2:e9:59:4c:96:d4:33:73:ff:91:a9:93:
                    da:eb:e2:98:75:29:ca:6d:dd:86:3c:f8:59:3f:03:
                    f1:42:ce:b4:00:f5:ed:09:75:71:68:cf:84:08:a5:
                    c4:8f:ac:61:d9:d4:72:62:6e:b6:98:37:65:ab:61:
                    d4:c4:af:5b:4b:51:ec:20:e1:b7:6e:26:80:05:b0:
                    87:4a:38:6a:08:77:27:17:16:a5:b4:dd:ae:94:ac:
                    cc:7c:92:43:a3:f1:7e:dd:34:f0:6a:01:f1:4a:2e:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:86:90:67:80:05:52:AB:BD:D1:BC:C2:F0:D1:55:01:05:9E:81
            X509v3 Authority Key Identifier:
                keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:5b:c6:12:32:86:65:86:e2:c6:f5:1e:b4:c1:9d:68:9b:
         1e:ef:7f:1f:ba:50:88:24:a9:22:39:e5:bf:89:34:35:be:1c:
         14:6e:ce:67:c9:a4:d3:5c:9a:b4:d4:84:d2:b4:1d:14:7e:88:
         c0:1e:2c:a2:8c:9e:3f:7f:fe:0f:fc:2a:56:a7:5b:2c:f4:34:
         9a:e6:00:7c:dd:f2:c1:7b:3d:64:be:ea:cb:dc:b3:d5:1a:e1:
         b8:50:60:38:ff:d5:49:61:e0:df:3d:ff:38:d3:65:70:14:5a:
         2d:a5:0b:ba:b9:88:8b:f1:1d:79:c9:a4:e7:f2:2a:cc:e1:4e:
         f4:09:49:a4:b8:3b:3f:4c:c6:47:57:eb:c8:c5:df:31:bb:eb:
         ac:40:40:41:ca:3c:47:09:87:8d:b2:df:1e:1d:da:1f:63:9d:
         38:93:26:1e:73:c0:01:8b:8b:fd:35:6a:ba:f9:99:9e:e4:23:
         2f:9f:3f:d1:01:d2:af:29:d9:a6:52:0a:4a:49:d2:ab:f7:48:
         0e:c6:6b:62:8c:0c:3b:f4:2f:1a:03:98:fb:0e:7b:08:cd:98:
         da:2b:79:56:a6:06:0f:3e:61:f2:45:02:43:de:32:a0:f4:f6:
         b0:2f:04:78:fc:38:11:3f:e6:62:98:06:60:63:06:95:3b:82:
         f2:09:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:00:13 2025 by rpki-client