Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          fkcUYhYziv6dd3uvTe83PZZxDY0wSFwiy2sa1VQ0UWE=
Subject key identifier:   52:0D:25:E3:22:F4:7B:27:57:E8:7D:EF:F3:F8:FE:4A:7D:E1:10:10
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       01984C66552B9CA2C4EBF3FEB0557D45B698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          1237
Signing time:             Sun 27 Jul 2025 15:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 15:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 15:00:31 +0000
Files and hashes:         1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: 3atfTkHujeFQOVsojZvoiZTYmwamB2/YOzKM0Dc+iOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:66:55:2b:9c:a2:c4:eb:f3:fe:b0:55:7d:45:b6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: Jul 27 15:00:31 2025 GMT
            Not After : Jul 28 15:00:31 2025 GMT
        Subject: CN=520d25e322f47b2757e87deff3f8fe4a7de11010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:03:38:48:13:39:6f:70:58:3b:37:cb:7f:
                    37:2a:43:b2:ca:df:4c:17:2b:e0:60:e4:36:5b:b8:
                    c0:33:26:64:c1:de:bf:7b:a9:16:aa:de:21:1e:43:
                    9f:13:9e:14:03:1a:4b:8a:45:42:b7:59:36:bf:5e:
                    53:4e:b4:4b:fc:44:84:f5:47:4c:d7:ed:f8:34:54:
                    fc:a4:44:59:6f:f1:93:43:66:7b:88:17:74:df:03:
                    af:a8:b5:ca:37:2a:0c:e9:a7:a9:bc:bc:94:ec:a3:
                    27:8e:22:e5:a2:eb:37:09:92:cb:d8:b9:68:fc:bf:
                    c3:fd:d4:f8:64:d1:27:95:70:99:92:75:c2:bd:a5:
                    b6:e6:af:b1:6c:92:d7:e6:00:83:76:b8:14:97:ff:
                    78:82:96:75:42:1b:18:7a:4d:ce:4e:3e:0d:b1:e5:
                    0a:23:77:c1:72:a5:1a:d8:a4:04:92:8a:13:61:ab:
                    f7:06:6f:55:d8:e1:ef:11:02:ca:8f:e6:f0:2a:c7:
                    f4:9a:d5:70:0b:14:4e:c6:de:e8:8d:d3:07:8c:b6:
                    38:4f:c9:7f:13:55:13:f5:ba:51:f4:ef:0b:a6:9b:
                    c4:e8:0d:5e:4e:06:03:12:3b:b3:fb:f7:f8:0e:f2:
                    5b:67:12:08:1e:0f:f9:0e:01:55:4f:43:80:27:c2:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:25:E3:22:F4:7B:27:57:E8:7D:EF:F3:F8:FE:4A:7D:E1:10:10
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:85:9e:7c:cd:3b:a0:a6:0b:23:d6:39:e1:88:3c:9b:e0:
         49:5b:1e:e8:44:b8:e3:e2:5a:c3:9d:8d:eb:7c:53:b5:e7:11:
         db:d4:0c:45:e8:84:82:4e:29:1d:d0:22:8e:ec:be:d3:78:9c:
         cc:cd:c7:5d:c4:81:aa:7f:a4:c9:e5:dd:08:57:fb:45:c0:3a:
         89:f9:b0:e2:cc:e5:a1:14:b6:bf:53:ee:9f:2a:f3:43:eb:40:
         64:10:80:5a:1c:55:59:4f:26:96:97:b1:4a:93:bf:a3:f0:13:
         86:98:a0:ca:1d:5f:57:b1:62:97:52:d0:c0:47:9d:6f:b8:c7:
         16:a5:7b:72:20:bb:74:d9:f4:14:90:01:ce:b7:13:b2:17:5a:
         56:c0:70:5c:47:19:eb:81:45:35:df:f7:3e:18:25:b1:ee:35:
         8e:07:5f:cd:46:b6:31:cc:3c:b5:44:a5:8d:63:b4:03:7b:bd:
         a2:66:70:1a:e2:87:df:50:ff:ab:6d:8a:45:aa:85:e4:32:13:
         98:61:07:f5:73:8b:a3:a5:ab:a6:f2:d3:0f:c6:c3:05:2a:c2:
         b3:64:db:bf:7d:f5:a2:f9:9a:f0:e4:26:15:dc:b7:e5:e3:31:
         54:e5:d2:ad:35:21:9c:28:22:ee:78:31:3e:e0:65:11:43:83:
         93:db:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:17:51 2025 by rpki-client