Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          Zk0ueRD/nOKCmvaHi6N/dcKblssf96jZQfbsIvGcnGI=
Subject key identifier:   DA:8B:6C:22:ED:2F:D1:64:33:3E:59:F5:AC:2F:85:31:67:52:5A:AE
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       01985758EF403D269DD1C3090494513D8506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1615
Signing time:             Tue 29 Jul 2025 18:01:42 +0000
Manifest this update:     Tue 29 Jul 2025 18:01:42 +0000
Manifest next update:     Wed 30 Jul 2025 18:01:42 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: KrifZt7nf6w1GPuSoSwQNdbQP//lNXpErJ735dbAmuM=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 18:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:58:ef:40:3d:26:9d:d1:c3:09:04:94:51:3d:85:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Jul 29 18:01:42 2025 GMT
            Not After : Jul 30 18:01:42 2025 GMT
        Subject: CN=da8b6c22ed2fd164333e59f5ac2f853167525aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:fe:1d:b9:98:c5:18:2e:3f:6e:66:01:82:
                    cb:0b:e3:f9:c3:c0:09:1a:5e:44:b6:da:4f:9e:6f:
                    c5:a4:b9:ed:11:00:b4:50:79:59:ab:81:de:a0:28:
                    cd:49:cd:0b:0f:56:67:b7:46:b0:71:b6:f1:03:ee:
                    11:ce:10:2d:0a:14:3b:3b:3c:9f:0d:e0:e1:bf:8f:
                    d0:5b:8a:41:f6:89:78:c5:a3:16:ec:e4:62:7a:f6:
                    43:fd:90:b0:fb:ec:0d:c3:6e:f7:78:f1:a8:8c:67:
                    9e:03:06:2d:27:7d:a3:ac:4a:4d:bf:71:b3:67:67:
                    9b:ac:99:f1:2f:9d:88:96:79:7e:c2:b9:c6:cd:d3:
                    c7:96:da:24:5c:d5:7f:c8:dc:da:f7:3a:13:64:2b:
                    17:8e:c5:a8:dd:4a:6f:22:58:a5:57:4c:5a:7e:cd:
                    31:ff:5e:5f:9d:b6:aa:46:ce:ef:91:6a:cc:74:04:
                    2f:a1:41:95:66:69:18:de:3d:ee:11:ad:29:b5:42:
                    4e:71:c1:68:ef:85:c3:da:f4:60:91:8a:6e:c0:a8:
                    cb:99:09:6e:b5:74:0d:e1:73:d3:52:85:52:70:c8:
                    a3:b6:56:2b:4b:07:71:1f:06:3d:36:85:1e:c6:bf:
                    56:33:20:fa:39:6e:ff:b1:2e:e2:c6:1e:b2:f2:fe:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:6C:22:ED:2F:D1:64:33:3E:59:F5:AC:2F:85:31:67:52:5A:AE
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0a:b2:49:1d:69:dd:a4:24:fe:2c:07:c0:8f:44:58:f1:01:
         d5:94:2b:84:73:79:9f:cb:3e:9d:22:45:e0:e4:ac:33:cc:7b:
         cd:1b:bf:95:d4:79:ca:6f:3f:d1:dd:ed:f2:d7:d8:ce:f7:a9:
         db:ae:f8:19:e8:86:f4:4c:fb:05:53:6f:28:5d:f4:65:a6:bf:
         a9:90:c0:6f:98:9a:89:11:64:f1:a4:0a:5c:62:07:b6:0e:6f:
         11:7b:6a:fb:9a:41:04:00:df:67:a0:94:28:7e:2c:b5:c4:e0:
         35:81:36:e3:40:63:d7:04:3b:6b:9a:78:69:2d:ca:42:d1:bf:
         5e:e4:08:c0:69:97:31:49:e2:be:cf:0c:11:f2:d4:6d:7f:c2:
         7e:8b:db:96:87:c7:86:fc:03:31:17:ac:f5:c5:34:d5:78:6b:
         2b:82:38:f1:bc:53:1d:60:8f:2d:8a:04:b8:28:24:c3:06:c6:
         cf:1d:24:ad:13:9b:92:e9:d8:ce:7f:f8:48:98:bf:e5:b4:38:
         bb:2d:22:de:75:a8:e9:3f:36:52:da:d4:fa:9b:21:9d:5b:0c:
         7a:3e:5a:a6:df:35:2d:dd:c7:1a:ae:d3:27:bf:70:6d:65:64:
         a2:26:43:41:bb:4f:da:35:32:80:84:93:48:89:a9:d5:50:fd:
         ce:25:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:35:31 2025 by rpki-client