Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier:          ELWufC5t4ptGVRjRh6Ul0z7p2dfCNK0iVj9EEjETtNU=
Subject key identifier:   A4:1A:E1:77:EE:EA:DE:81:FF:6A:E7:9E:D6:D5:AF:68:CE:E2:07:9F
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer:       /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial:       01984776EC877C298673EA03D514C0D6DD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 16:00:32 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:32 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:32 +0000
Files and hashes:         1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=)
                          2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: IIeWdf8Xb8zDry+zGq3SlZ9HiLvJg9pFS6ozZvi6TK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:ec:87:7c:29:86:73:ea:03:d5:14:c0:d6:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Validity
            Not Before: Jul 26 16:00:32 2025 GMT
            Not After : Jul 27 16:00:32 2025 GMT
        Subject: CN=a41ae177eeeade81ff6ae79ed6d5af68cee2079f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:b2:ad:21:7b:5c:db:b5:c0:63:6f:9f:a2:
                    9a:b5:8f:e7:8d:c3:4c:3d:e4:15:4f:e8:b1:5a:70:
                    93:a2:d8:30:0d:9b:3d:fa:7a:e7:62:e9:dd:d8:19:
                    d3:bb:2a:bb:49:4a:5e:58:a7:7f:fd:b0:f7:7e:b4:
                    58:3d:c5:c4:7a:39:86:2a:52:72:bf:e9:57:24:1b:
                    3c:cc:a9:3f:72:46:a0:ce:a4:47:f0:99:6b:8b:c3:
                    c1:f0:aa:69:d0:ad:51:30:c4:4d:74:04:8b:a0:b0:
                    17:b9:e6:6c:c4:22:b2:ca:fc:c4:84:67:7d:a6:98:
                    6e:c0:b5:59:88:bf:88:6e:fe:77:bc:ce:26:20:84:
                    62:31:f4:e7:6a:2a:57:61:7a:49:ec:d9:4b:32:9e:
                    0c:ae:48:96:eb:fa:00:dc:fe:99:f9:16:71:2c:b3:
                    85:e9:6b:c1:c7:33:5e:00:80:ec:8b:61:74:f5:62:
                    e1:4e:04:18:93:e3:6f:7d:b6:ae:cf:f6:07:5e:63:
                    d9:71:45:34:e8:82:e9:1b:32:38:6f:05:3a:bd:85:
                    6a:ba:fb:91:ba:bf:bb:ed:da:f7:8e:77:ca:a5:a6:
                    bb:2f:d5:7c:13:ad:65:0e:71:49:4f:0a:0f:48:61:
                    c7:ca:d4:b5:98:5b:16:70:4e:64:0b:4d:2c:55:89:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1A:E1:77:EE:EA:DE:81:FF:6A:E7:9E:D6:D5:AF:68:CE:E2:07:9F
            X509v3 Authority Key Identifier:
                keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:86:c0:eb:5e:bc:a6:0c:5e:61:91:d6:07:5d:40:de:91:4f:
         98:8a:bd:65:1b:89:49:5b:cb:2c:5d:09:d0:24:43:67:22:68:
         9e:f8:17:b3:6d:ef:d2:d5:8b:57:9c:8d:02:c0:4a:ce:af:7e:
         47:8e:5b:0b:67:13:83:fd:7d:c4:67:9f:a7:00:85:72:9c:3b:
         4e:2e:c1:d3:5b:fc:15:50:9d:42:2b:7e:22:4f:33:0f:6b:ed:
         6f:89:33:61:34:9e:1d:29:fb:4c:c4:3b:1e:84:bf:06:0c:c5:
         10:99:fb:a3:09:65:fe:22:e5:e4:67:ba:29:3f:b9:a9:63:ce:
         92:5e:38:3b:1b:3f:67:7a:64:54:4e:3f:32:60:99:2f:33:6a:
         70:4c:4b:0f:64:74:45:9a:9a:d2:f6:27:06:d4:1c:09:07:18:
         d5:fd:7e:aa:68:82:06:7a:ba:26:68:da:fa:38:e9:5d:e9:6d:
         aa:51:af:3f:da:c5:1a:12:64:0c:fd:fc:af:34:37:53:3d:e6:
         7b:e5:e4:33:c1:c5:75:8f:41:74:ee:7c:b3:4f:ae:5b:f8:e1:
         23:59:21:12:24:1f:ef:aa:34:4e:77:70:5c:e6:57:e3:e7:99:
         16:70:31:06:37:a6:d0:d2:0e:46:89:b6:ae:9d:f6:0b:df:93:
         79:1b:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:16:03 2025 by rpki-client