Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File:                     uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier:          dPJg+ia40LsuCIOZYjIZ3I63KviDBqoPtHglzrTV7oA=
Subject key identifier:   8D:F1:C4:48:B5:52:5C:94:B8:E2:77:4E:BE:8B:EE:AA:98:E4:A9:FA
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer:       /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial:       0198488929778B8AD0B6558E12ECE83F42AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number:          0538
Signing time:             Sat 26 Jul 2025 21:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:05 +0000
Files and hashes:         1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: f6ACVU4Bxls0DJD9+lFgEQV6pvoA/r0JKd05KJnbjvY=)
                          2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:29:77:8b:8a:d0:b6:55:8e:12:ec:e8:3f:42:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
        Validity
            Not Before: Jul 26 21:00:05 2025 GMT
            Not After : Jul 27 21:00:05 2025 GMT
        Subject: CN=8df1c448b5525c94b8e2774ebe8beeaa98e4a9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:ac:f3:1a:63:8b:c0:89:d6:50:9c:97:5a:
                    0f:c3:d2:87:8a:e8:38:d8:29:f6:7a:78:ea:5b:aa:
                    b0:39:2e:5b:56:80:29:0a:52:e9:57:5a:75:1a:b7:
                    67:5f:5c:48:9d:a2:df:f1:9b:a4:ae:e2:fa:56:3e:
                    df:43:b6:e9:08:dd:b5:f1:ce:f8:b9:0c:ba:1f:b9:
                    48:89:11:ff:7c:ca:dd:c9:f8:29:7d:1c:6d:c5:27:
                    30:a6:7c:81:be:96:bd:7c:e8:8b:ce:b7:e2:f6:ce:
                    aa:d0:fe:f5:6b:67:84:84:3b:38:ee:5a:33:38:28:
                    0e:30:0a:de:ac:ca:be:19:ad:48:b4:32:1a:ae:4a:
                    75:6b:e5:07:33:84:d5:9e:a0:4c:39:b0:50:c7:0c:
                    8d:51:02:d3:63:76:c5:8b:f6:16:f8:46:5f:b8:24:
                    94:b4:3a:0e:50:cc:d2:4f:e5:68:17:cf:37:20:e3:
                    7c:ec:3d:47:f5:b2:45:a2:f2:f4:cc:13:b1:d4:ef:
                    e2:a5:42:9b:c8:ad:b0:94:7f:da:74:fb:62:b2:7f:
                    d3:f1:12:ea:a3:06:7b:08:4d:c5:0d:fc:cd:a1:c5:
                    92:64:e7:ae:cf:bf:7a:9b:5b:2a:93:3f:c7:84:06:
                    14:cd:92:13:ed:53:6d:63:d0:36:21:79:a7:0b:c0:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F1:C4:48:B5:52:5C:94:B8:E2:77:4E:BE:8B:EE:AA:98:E4:A9:FA
            X509v3 Authority Key Identifier:
                keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:70:0a:31:91:06:34:c9:08:20:38:d4:d7:3e:87:12:dc:52:
         34:ad:68:4e:5d:7d:33:2d:80:78:34:f3:6b:5c:b2:78:96:94:
         87:31:83:23:2b:05:66:32:69:f8:7c:da:db:43:ec:5c:41:c0:
         8c:90:d8:bf:6d:c4:87:b4:e2:b1:31:1e:61:b7:35:66:23:3d:
         62:bc:78:3c:a7:5c:89:c2:8f:58:5a:86:84:63:19:14:cd:50:
         ea:a8:19:88:72:b7:91:de:a1:38:e1:1e:54:be:6d:fc:1b:bf:
         07:fb:fa:bc:a2:84:38:44:1d:86:35:fe:34:f9:b1:06:41:2f:
         ba:98:68:5c:8e:3f:a7:5a:ad:b3:d2:9b:0f:a5:86:33:0f:6d:
         4e:3e:2c:1b:56:61:49:36:b3:91:c3:94:4b:6b:e4:5c:b9:46:
         16:98:09:69:27:17:80:54:99:0c:05:c7:a3:f0:64:0f:7b:65:
         42:46:e9:25:b1:c1:17:27:56:c0:cd:f5:f8:08:a0:33:0b:75:
         0d:3e:11:c1:4f:1a:c0:7c:9a:8e:b1:1d:c5:08:c8:a7:74:3e:
         ab:64:69:4e:a4:26:44:34:7a:b5:83:87:ca:69:2c:ac:d2:0e:
         45:c8:1b:46:95:3d:9b:7b:d3:0b:c0:fa:0e:71:8e:7d:16:79:
         04:e9:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:30:48 2025 by rpki-client