Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File:                     Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier:          vdGjdUIwqAd5GRktFAj8/5PxCr87SGg+GvOWU6VPDJs=
Subject key identifier:   7B:DD:2A:91:FE:17:82:62:D6:0B:F9:78:F1:CD:CE:6E:5C:9C:73:0D
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer:       /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial:       01984A0A27DD458ED4861CECA7315D384079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number:          08BE
Signing time:             Sun 27 Jul 2025 04:00:36 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:36 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:36 +0000
Files and hashes:         1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: Mlegs14xXgS5n89+DVyjOTRolovEJixUladZsBBCpgA=)
                          2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:27:dd:45:8e:d4:86:1c:ec:a7:31:5d:38:40:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
        Validity
            Not Before: Jul 27 04:00:36 2025 GMT
            Not After : Jul 28 04:00:36 2025 GMT
        Subject: CN=7bdd2a91fe178262d60bf978f1cdce6e5c9c730d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:6b:d5:d4:0c:3f:91:59:30:a2:c5:d3:33:
                    97:46:40:14:da:60:6d:49:73:ef:fc:0c:1a:d0:ad:
                    7b:39:c3:48:d3:d4:d5:2c:65:f3:95:33:f3:3d:61:
                    42:59:5a:5e:26:0f:95:17:15:82:53:eb:09:e6:6b:
                    d8:ac:ae:8a:22:58:9a:95:03:68:40:e3:9f:cf:25:
                    32:ee:c7:6b:27:1f:cd:99:3d:17:51:aa:b3:43:fb:
                    9b:5b:ba:4d:85:13:e6:af:3d:1f:07:a4:19:a2:aa:
                    1a:30:7b:fa:f9:07:d9:2c:b5:8e:99:74:a9:b9:f4:
                    90:63:25:55:b3:3e:1f:51:df:30:1a:a5:bd:bd:e8:
                    d5:bf:71:0b:4e:6c:f5:a2:b3:a1:9f:3f:b2:9f:14:
                    bd:3c:55:43:e4:b3:8f:01:2f:26:3d:bb:20:2b:21:
                    43:c3:33:e5:e3:a6:8b:ca:a6:a5:48:fd:98:e7:38:
                    9b:46:21:26:2d:08:9e:48:f3:09:69:9d:3e:6e:45:
                    2f:7a:97:e0:ca:10:83:f8:ef:3b:5c:2b:13:3a:fc:
                    2c:e9:be:d8:e0:73:a1:b1:87:f6:82:9d:92:00:dc:
                    be:b9:a9:45:40:32:bc:8d:84:a1:22:e4:2e:43:8e:
                    d1:de:2c:fb:19:c5:a9:87:8e:6e:da:f8:5f:43:ea:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:2A:91:FE:17:82:62:D6:0B:F9:78:F1:CD:CE:6E:5C:9C:73:0D
            X509v3 Authority Key Identifier:
                keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:0c:bd:12:43:41:16:43:73:5a:7f:f5:77:be:4b:3d:dd:72:
         c4:36:b6:e6:d3:e0:00:1f:e3:1c:d9:93:0c:e4:2a:63:38:58:
         57:d0:da:d6:10:06:d6:9c:57:84:2a:3b:76:e0:19:87:43:8f:
         1b:83:ed:cd:5e:25:0a:83:4e:ae:93:8c:ed:f7:8a:d7:68:bc:
         2f:28:19:75:f2:c6:46:e0:3d:69:2e:17:71:ba:a7:8d:f1:22:
         90:cd:d5:5f:85:ca:8b:d9:ec:7e:79:e3:a2:fc:9c:47:d7:ab:
         59:be:b1:54:e1:85:10:de:bf:ad:55:60:0d:f7:af:5a:47:9a:
         17:d7:57:bb:61:05:69:33:cb:43:e0:91:8d:19:ea:2b:c3:08:
         0f:7c:bd:1e:66:37:2f:7d:34:28:00:20:c5:69:9b:58:71:e8:
         50:69:8b:2d:ee:f3:9f:93:25:b3:3f:35:2f:21:29:3c:2f:e9:
         43:d8:5e:5b:08:a5:37:1f:68:20:e4:9d:cb:5b:b7:da:11:70:
         8e:d2:ae:f0:94:74:56:46:30:98:eb:e5:d8:11:15:40:56:20:
         59:00:97:c1:2d:33:83:1e:ea:74:6a:f5:74:82:85:03:d9:61:
         33:f0:b9:f1:ca:3a:09:27:18:de:38:2b:38:45:92:f8:c8:5d:
         34:8d:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:52 2025 by rpki-client