Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          oKYDoewQYajrHxfhTyL/kzUteKDtny7kAvrq+zZ1kvc=
Subject key identifier:   78:3A:07:BC:6A:B8:A8:44:59:23:C2:F0:67:C5:B5:EE:61:8E:F3:52
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       01984965D68486076EE0990F05439D804187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          064D
Signing time:             Sun 27 Jul 2025 01:01:07 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:07 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:07 +0000
Files and hashes:         1: PdctoMgTw2-Nt4ZPBmRXGu0XZPo.roa (hash: n9lnP0LlXaq1mXYcdy8fdP94AepAw+KQCy1tAj0j/P8=)
                          2: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: kxLU6w6ByopJi4Oo6Yu7JNcgaPRbPtX6dIOQOonQuYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:d6:84:86:07:6e:e0:99:0f:05:43:9d:80:41:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Jul 27 01:01:07 2025 GMT
            Not After : Jul 28 01:01:07 2025 GMT
        Subject: CN=783a07bc6ab8a8445923c2f067c5b5ee618ef352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ae:3d:ae:6c:f2:ff:68:4b:06:07:66:60:00:
                    94:f5:b5:23:b9:5f:a0:04:ec:1b:9a:64:2f:a8:f9:
                    6a:12:86:98:f9:97:13:6f:fc:0c:6f:04:b6:fa:4c:
                    3b:f8:d8:f0:75:70:c3:e4:e8:bd:85:a2:5d:4a:68:
                    37:e2:7e:d8:f2:a8:95:c7:74:22:c3:1e:7a:19:88:
                    3c:2a:aa:43:1c:b1:ad:7d:96:0d:6f:4a:01:dc:6d:
                    eb:62:18:a0:dd:cf:15:73:70:82:f9:b3:4d:e1:b0:
                    96:d9:9f:df:0e:5c:f3:f4:7d:c7:8d:54:b8:34:ac:
                    a7:d3:ff:c3:23:6a:1d:6e:a6:aa:7f:d4:ee:29:76:
                    78:1d:5d:20:e0:e4:79:32:4a:2e:0c:04:67:d6:ef:
                    d7:5e:64:62:dc:21:c7:d9:11:2d:dc:64:a7:df:71:
                    06:14:cc:ad:7d:31:6c:2a:98:35:9e:e4:4d:3f:cd:
                    f5:ec:c1:73:7a:28:df:76:7e:55:2e:30:9a:dd:6e:
                    96:68:68:67:58:95:ca:7d:5f:d9:85:b2:2a:c1:9b:
                    a0:ef:21:ce:9d:93:1f:36:c7:13:e7:b9:13:c1:a6:
                    45:5c:b1:d6:b7:3a:6e:9b:ed:cc:83:f3:02:f2:06:
                    75:61:3c:88:b3:e5:9f:4b:ca:77:ee:43:d6:f0:95:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3A:07:BC:6A:B8:A8:44:59:23:C2:F0:67:C5:B5:EE:61:8E:F3:52
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:7c:f6:c4:91:59:69:5c:20:16:69:3d:13:1f:6a:22:81:
         2f:b5:c9:fc:04:00:8c:df:01:4c:d0:ca:5e:47:a9:8e:04:05:
         6f:90:96:7f:3c:dd:9e:f2:93:78:dd:54:84:1a:61:f3:91:e9:
         04:e5:cf:2b:42:87:f6:7f:a3:33:65:a4:b6:82:f1:6d:55:0b:
         e4:16:f2:ee:03:8a:f2:dc:2d:dd:b8:63:89:f2:6b:83:1c:24:
         2c:4f:85:22:53:c0:81:92:94:b7:ba:d7:6b:18:a2:d9:5f:3d:
         e3:0e:3c:b1:96:85:fc:41:06:89:4c:23:ef:64:62:e6:44:b3:
         4c:89:db:8e:24:53:f2:7a:71:18:c6:f8:6e:0b:db:50:af:ac:
         eb:30:c8:2b:25:c1:16:d0:1c:b7:46:c8:a2:45:e9:f3:19:8b:
         79:70:9f:cd:ea:73:2a:c4:a0:b0:8e:9f:e2:0a:71:1e:1b:28:
         5f:07:ea:56:89:47:73:23:1a:ff:88:e7:19:da:47:d4:99:4d:
         c1:60:75:7e:31:da:72:72:82:76:52:97:bc:b8:65:e1:65:a3:
         21:09:6a:e1:bf:18:a4:4d:2f:fc:1e:1d:46:86:e6:c9:a7:e2:
         74:df:75:48:1d:52:28:91:c6:57:b2:bb:41:00:7d:aa:4d:7c:
         6a:3c:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:56 2025 by rpki-client