Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File:                     uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier:          ExupwgX0Cyznz0RO0RubVStyTMzczDiU1xlmCPoPke8=
Subject key identifier:   35:6F:29:5E:52:10:BF:63:90:FD:B3:22:60:B9:6D:B6:9A:97:53:1A
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer:       /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial:       019848C0E690F01A4788489088FDD080D82C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number:          0D07
Signing time:             Sat 26 Jul 2025 22:00:58 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:58 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:58 +0000
Files and hashes:         1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
                          2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: m777fTpeKGp5gGAeGaCqKOF4ycnPf+2jDZgW8vJkobc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:e6:90:f0:1a:47:88:48:90:88:fd:d0:80:d8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
        Validity
            Not Before: Jul 26 22:00:58 2025 GMT
            Not After : Jul 27 22:00:58 2025 GMT
        Subject: CN=356f295e5210bf6390fdb32260b96db69a97531a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:7a:5e:4d:aa:1b:ee:4c:e4:d7:4d:1e:46:
                    82:e3:6c:83:c0:08:86:d2:f7:3a:41:59:24:05:5c:
                    cb:51:32:c3:ce:de:c7:46:44:66:9d:d4:75:39:4a:
                    04:6a:8a:e1:98:b7:e3:78:fb:4d:ce:41:77:67:f3:
                    a5:75:e9:61:c7:fb:b2:8a:09:9f:dd:71:2b:be:a9:
                    55:a1:94:57:e2:5f:41:24:a0:38:9f:13:ed:4a:39:
                    71:f8:3d:ef:88:1b:e4:39:19:9b:14:f3:55:dc:84:
                    65:e3:52:f7:ba:a0:34:36:10:f4:f1:e5:36:8c:a8:
                    9a:f1:26:69:61:e4:d7:5c:95:d9:20:78:5c:71:9e:
                    aa:c8:cc:b3:61:92:e0:c3:08:71:b6:25:48:9b:b2:
                    83:e1:c8:e9:90:aa:c3:08:bd:f8:ff:b0:bf:cd:ce:
                    5f:a1:58:d5:81:7f:49:58:83:a1:6b:34:02:cb:42:
                    83:73:e6:e6:78:63:25:c9:44:fb:ae:06:b5:0f:1a:
                    b3:fb:61:f1:84:c9:f0:e1:27:2b:7e:bd:b0:d5:7d:
                    a2:e9:56:39:56:d5:4b:79:b0:40:be:6e:05:5b:30:
                    ee:3a:ce:cf:ba:5f:de:60:6b:23:a4:c0:ad:c4:74:
                    37:f3:bc:5f:2a:34:85:06:9f:4f:97:06:51:80:af:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:29:5E:52:10:BF:63:90:FD:B3:22:60:B9:6D:B6:9A:97:53:1A
            X509v3 Authority Key Identifier:
                keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:39:39:ca:16:2d:30:a6:f9:13:02:a3:07:b2:c4:a3:81:
         d9:e6:16:de:35:96:0b:d6:c4:21:e1:6d:ff:23:cc:3a:1a:f9:
         56:62:b4:0b:36:4c:00:f1:79:92:94:bd:7d:eb:4e:34:3e:ca:
         f7:5e:4e:fc:95:bd:f1:2f:bd:74:3b:0a:3b:04:61:57:32:86:
         09:d4:92:17:d6:4d:a8:de:46:5b:ac:7f:c1:0f:71:10:54:a7:
         ff:60:06:88:bd:bc:f8:fd:11:58:f2:90:ad:7b:82:17:00:90:
         a1:69:7a:bf:ff:d6:0b:4c:4c:a8:f6:cf:ea:1b:a6:54:0f:de:
         d4:95:44:70:06:59:a1:91:7b:41:9a:a4:75:2d:42:43:da:74:
         e4:18:7d:27:bd:9f:be:73:8a:3c:d6:29:d5:93:a8:7b:90:27:
         02:48:26:6f:12:35:4b:2a:cc:e0:d6:7c:c6:8e:cb:7b:1e:18:
         11:80:bf:8b:6f:33:6f:58:72:f7:ba:76:43:9b:ea:d9:45:b9:
         4a:63:b7:26:f1:d7:44:93:89:c3:55:fa:cf:50:f8:9d:f5:49:
         93:0f:36:9d:ad:a4:0c:00:aa:57:d9:20:6e:f6:79:63:99:55:
         6b:79:4f:64:99:6a:a3:29:4a:44:7b:ed:87:ae:f5:2b:04:12:
         81:c8:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:58 2025 by rpki-client