Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File:                     u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier:          /pAzOtBinwhOkr2/9GnbSwXlg8JD53CA4bXDMnnJXeU=
Subject key identifier:   C8:20:0B:40:56:04:41:99:D0:CD:5C:C2:1B:D7:BE:13:C6:82:81:D6
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer:       /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial:       0198499C63DE125A9669073DC737B9207CB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number:          1607
Signing time:             Sun 27 Jul 2025 02:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:42 +0000
Files and hashes:         1: 4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa (hash: T/rxg5SROv77xR3vA3yXKL1TTkjTzRNlaWirdpsIt6c=)
                          2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: iRhTjH1quziSKVe+SlT4ZkEjO2vqsIqumWdDm0BDC8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:63:de:12:5a:96:69:07:3d:c7:37:b9:20:7c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
        Validity
            Not Before: Jul 27 02:00:42 2025 GMT
            Not After : Jul 28 02:00:42 2025 GMT
        Subject: CN=c8200b4056044199d0cd5cc21bd7be13c68281d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:a3:d5:48:41:28:9d:43:e2:04:bd:2b:11:
                    72:29:c6:4e:55:0d:2e:33:e8:6c:e0:e2:25:1c:e1:
                    a1:47:f5:e7:cd:ca:4c:72:98:1e:f2:aa:50:21:85:
                    39:37:71:90:10:16:09:3a:91:a6:d5:90:1c:82:09:
                    fa:06:3d:89:fc:2f:a5:23:63:ef:c7:9b:8e:09:6e:
                    ea:30:2d:41:a7:2a:d0:49:40:5b:bc:c2:d1:6a:5b:
                    6c:ae:75:fa:c9:a5:0e:54:37:d0:c5:5e:59:45:9e:
                    89:3e:3a:7e:9b:ac:84:41:31:2e:e8:ae:70:2b:f2:
                    4c:9a:c2:4a:53:0a:35:7e:20:d6:af:83:99:51:09:
                    a0:75:10:5e:fa:99:ed:83:24:0b:1a:91:22:f1:e4:
                    8f:5b:00:82:1d:fa:01:de:73:81:8e:85:94:c2:1e:
                    12:6c:5c:96:9a:96:47:e0:26:d4:3f:ed:b2:e1:cb:
                    05:e9:2c:e5:6b:6f:65:bc:9c:36:0a:b4:72:4e:9c:
                    49:2d:d2:29:d5:f1:27:01:be:f6:37:bd:a6:de:31:
                    2a:79:6b:ed:90:ff:66:63:31:34:52:0b:8b:72:c7:
                    b1:cb:93:ff:07:b4:05:1d:61:de:77:f4:47:89:49:
                    11:d2:18:ef:62:c8:63:76:56:d9:c8:6d:0a:41:3f:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:0B:40:56:04:41:99:D0:CD:5C:C2:1B:D7:BE:13:C6:82:81:D6
            X509v3 Authority Key Identifier:
                keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:22:ab:0b:0a:98:58:2d:f6:b5:0a:85:d4:67:3a:e0:cf:
         0d:db:0c:31:78:71:82:3d:36:fd:57:71:bf:b3:24:6e:8a:4b:
         9e:fc:3b:13:c5:b7:c6:db:9c:6e:68:e4:dc:a1:2b:48:5f:ae:
         9d:3b:4f:e0:4d:73:99:0d:ed:bd:40:13:1d:5e:5b:b9:8b:e1:
         28:85:21:12:51:28:07:5c:a2:11:b2:b3:72:b5:9f:2d:ca:aa:
         56:9f:3c:51:12:32:0b:01:1c:60:91:c1:fa:e2:ee:d5:c8:0a:
         84:e6:a8:5a:b6:d1:95:61:74:6e:45:8b:4f:57:e4:cb:45:a6:
         2f:f5:e6:48:b7:5f:dc:cf:ea:f7:18:eb:b7:b1:6a:ef:3d:cb:
         ad:56:26:82:0b:4e:41:58:0b:c5:fe:11:05:5e:47:33:e1:2e:
         1d:f2:f9:58:a7:71:66:76:e1:a9:c0:04:0c:f9:95:21:0a:34:
         1c:77:e3:d9:55:08:ab:ec:d6:0d:11:32:53:74:c9:99:7a:85:
         42:6b:44:69:22:57:4f:6d:28:00:77:5f:5c:ac:a6:1e:67:41:
         fb:4f:4a:c9:b6:b7:bb:15:1b:40:75:60:e2:eb:f0:53:32:f1:
         bc:7d:27:7a:89:5e:78:72:7b:5a:9b:ab:d4:be:3a:63:2d:ec:
         f9:79:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:47 2025 by rpki-client