Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          hdZN9KJ1EDkx9cePKFkyiypdBMRuXpSios2CXswJB4Q=
Subject key identifier:   FC:FD:25:18:1B:A2:BA:FE:AF:2E:C2:B1:BC:AB:55:D4:61:B9:A3:5D
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       0198496655E7C6010DB7A6166923A42B3DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          0391
Signing time:             Sun 27 Jul 2025 01:01:40 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:40 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:40 +0000
Files and hashes:         1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
                          2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
                          3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
                          4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: 1srvzS754taabAOxgPQsfV7y73staUuRGs+L9tdTvxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:55:e7:c6:01:0d:b7:a6:16:69:23:a4:2b:3d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Jul 27 01:01:40 2025 GMT
            Not After : Jul 28 01:01:40 2025 GMT
        Subject: CN=fcfd25181ba2bafeaf2ec2b1bcab55d461b9a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:b1:19:21:52:ea:38:14:14:f9:c8:88:55:
                    ab:08:ff:3e:f4:81:e7:b3:3f:11:d4:67:2d:de:01:
                    b2:2d:be:2d:b2:ee:6b:de:2b:d4:89:51:a3:92:cc:
                    d1:49:53:da:79:a9:0a:98:f0:d7:a5:41:1e:d0:a0:
                    78:e7:c9:af:9b:a8:69:73:58:86:9a:85:2b:a2:41:
                    d3:ea:9c:ec:c3:f2:d2:d6:77:c1:d0:28:97:3b:e5:
                    45:03:8d:f3:20:f5:dc:e2:7d:51:df:87:29:c5:48:
                    29:ca:da:91:80:33:50:dc:a7:29:9d:44:86:d4:97:
                    ff:26:76:a8:30:ec:f9:d7:9a:6e:f4:0c:6e:fe:5d:
                    c3:f4:d5:e5:91:34:95:1b:e0:20:2f:21:f4:6f:65:
                    8a:f4:47:0b:31:b3:23:c2:ae:2f:44:5b:58:ba:6c:
                    8b:18:db:d1:d4:03:bf:07:76:18:48:06:ff:a6:d2:
                    bb:b5:87:80:97:38:6e:51:80:66:be:2a:a1:6d:bb:
                    c9:e7:3b:26:f9:90:83:84:2a:26:9b:ec:2e:42:e5:
                    4a:e6:64:be:cf:be:c3:b9:41:5c:87:01:f7:fd:70:
                    0a:a2:23:93:78:52:98:f0:55:81:6d:f9:bd:e7:72:
                    c4:f6:66:c1:9a:18:b4:e0:08:0b:7d:2f:3b:1b:4a:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:25:18:1B:A2:BA:FE:AF:2E:C2:B1:BC:AB:55:D4:61:B9:A3:5D
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:72:be:ec:17:35:4f:05:23:07:95:bd:ea:13:c8:05:f6:cc:
         db:dd:c3:8c:44:f2:a5:36:61:2b:3f:ef:41:4e:2e:78:54:a3:
         c8:bc:e4:35:12:be:f1:bd:7c:94:28:da:9c:d8:7b:ba:dd:fc:
         cd:84:e9:eb:52:ef:a4:f2:93:82:c4:fc:e7:04:65:93:db:84:
         54:60:6b:f4:4b:14:85:68:b6:ad:10:c4:a9:46:15:1d:12:27:
         bb:89:3a:e3:9d:30:64:d2:ba:a0:31:7c:ec:4b:49:8d:0b:7d:
         05:11:7f:36:85:90:8b:7b:c9:08:db:87:f5:ba:bc:41:08:80:
         a6:e5:6e:ad:54:60:af:73:86:72:23:2a:3a:8b:42:3c:48:32:
         1b:12:b4:df:a6:03:da:6d:72:2a:1e:56:bc:52:f6:ff:fb:e4:
         67:f0:3a:08:4b:82:f9:d2:16:f9:08:de:92:f8:b6:af:9e:0a:
         2e:21:e2:57:d1:e6:53:84:b8:53:09:d2:8e:3d:db:33:1c:87:
         fa:74:12:36:0f:ac:a0:02:85:36:13:23:80:10:2d:b0:79:9f:
         7f:5d:54:cb:19:23:3e:53:72:82:a1:c0:ff:66:7d:d5:df:0d:
         28:b1:0b:43:39:f3:42:c9:4b:34:7c:ca:a9:0f:fa:90:e6:0e:
         8a:d8:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:11:30 2025 by rpki-client