Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File:                     UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier:          vB2E24TScC/XJDGU6RLoO4uBtQ10QkF/8Pwr9fug9xw=
Subject key identifier:   6F:EE:3C:10:78:71:9F:1B:6D:9A:BB:1B:2E:3F:33:C8:93:D4:30:18
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer:       /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial:       0198451A9280DC4AA1B345F2305F724547A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number:          10C9
Signing time:             Sat 26 Jul 2025 05:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 05:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 05:00:26 +0000
Files and hashes:         1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
                          2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: ggM/bLvCbJgGpEOFycFGVTm7PsdU+sJisxZ2b9q0rn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:1a:92:80:dc:4a:a1:b3:45:f2:30:5f:72:45:47:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52386e520478e625be1d6282d216b05912f83874
        Validity
            Not Before: Jul 26 05:00:26 2025 GMT
            Not After : Jul 27 05:00:26 2025 GMT
        Subject: CN=6fee3c1078719f1b6d9abb1b2e3f33c893d43018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:64:8b:9a:7a:36:ca:7f:85:27:51:47:f3:
                    ff:44:ba:f9:f9:60:0d:07:c6:7f:ab:9e:aa:32:ba:
                    3c:35:4e:f3:fe:ff:77:c7:2a:9f:69:1e:bb:37:75:
                    eb:c0:25:55:e9:30:58:e2:9d:10:7e:61:ec:6a:a5:
                    83:54:c1:62:0e:62:bb:c9:7f:a7:7d:24:29:2e:db:
                    80:dc:35:ac:25:60:1b:e1:21:14:c6:76:d1:59:43:
                    2f:be:d5:02:db:15:9f:cc:04:7d:fb:e8:1a:97:1f:
                    a4:77:d4:1a:37:64:79:c4:1a:c1:46:0e:bc:9e:db:
                    71:c2:1d:48:ba:93:26:18:4b:93:54:61:c4:76:35:
                    eb:ca:a0:68:7a:6a:04:0e:e3:e0:d4:56:e4:91:70:
                    d8:ae:55:97:4b:8b:03:33:f8:f2:fe:06:cc:45:87:
                    a3:93:15:17:8c:c4:a2:11:c6:73:be:5b:33:df:16:
                    c7:eb:2c:60:3f:b3:06:d1:40:57:ab:32:48:7e:e5:
                    21:fb:6a:b1:ee:72:97:18:e7:6e:5c:72:be:52:1f:
                    dc:c2:7b:92:e1:b3:c7:49:ff:67:f5:be:90:73:82:
                    f2:a1:8a:61:68:4d:44:df:b6:10:31:46:6b:d9:9f:
                    eb:54:3a:9b:2c:25:c8:af:b0:74:d0:bb:fa:0a:ff:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EE:3C:10:78:71:9F:1B:6D:9A:BB:1B:2E:3F:33:C8:93:D4:30:18
            X509v3 Authority Key Identifier:
                keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:6b:51:89:c0:c8:32:cc:fa:81:8a:b5:31:7e:24:7a:09:
         aa:82:47:47:e4:24:27:03:ec:12:19:a5:d5:6d:d4:6d:4b:40:
         79:17:c9:5c:94:b5:21:b4:64:0e:6f:40:5d:ae:de:71:89:4c:
         91:88:8a:60:d0:74:cc:83:8a:46:04:33:35:28:d8:17:cf:e8:
         05:c9:9b:10:1c:17:c5:11:cf:10:72:ee:c8:5c:d1:b3:1a:91:
         85:14:06:85:73:7c:4e:2f:fa:a3:2d:18:57:5e:cc:95:9e:62:
         b4:01:54:eb:d4:22:91:c7:e3:0f:ba:29:88:4b:14:57:04:de:
         a0:b8:e8:49:67:46:44:1f:45:a2:00:1c:da:19:44:d2:40:b1:
         8f:c9:41:46:48:07:eb:cb:73:60:1c:a0:88:e9:83:09:17:ef:
         b0:c6:68:c8:17:eb:b4:b2:a7:86:9a:84:f8:6b:d7:7b:f3:a4:
         2d:fe:51:a9:86:9c:4b:13:72:ac:0f:df:b6:96:8c:fe:84:e4:
         62:f1:a5:a1:a9:8a:be:65:57:4d:57:bb:72:0c:a3:9a:47:78:
         56:91:59:bf:21:63:e3:42:96:be:c9:74:a3:80:4b:bb:ea:7d:
         19:da:ff:9d:77:06:0c:8e:a5:29:38:61:f8:af:ce:db:f2:f8:
         a2:29:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:45:21 2025 by rpki-client