Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          lzcmWF/Urqv8tQ3e0Obk1fhyvCoiblYodYu7pXS3zlM=
Subject key identifier:   8E:E6:8E:2B:D7:1A:8F:9F:F6:93:5D:41:A8:5D:EC:34:07:8B:76:25
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       0199375D6B831050F6852F38CB62FAE3B63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          167C
Signing time:             Thu 11 Sep 2025 06:01:33 +0000
Manifest this update:     Thu 11 Sep 2025 06:01:33 +0000
Manifest next update:     Fri 12 Sep 2025 06:01:33 +0000
Files and hashes:         1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: S+E+M0BCwY1ixu98vB+CBmKrPcwIErGrom+n9fBdbls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:5d:6b:83:10:50:f6:85:2f:38:cb:62:fa:e3:b6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Sep 11 06:01:33 2025 GMT
            Not After : Sep 12 06:01:33 2025 GMT
        Subject: CN=8ee68e2bd71a8f9ff6935d41a85dec34078b7625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:70:62:43:d5:e9:06:1d:8d:bd:f5:bc:37:
                    83:b9:68:47:f0:16:41:65:ad:f3:22:8a:63:e6:0c:
                    35:4c:62:47:58:6f:eb:c2:3b:c2:a7:92:a0:9c:29:
                    60:13:f8:95:27:0f:91:70:67:ca:06:8f:f9:45:75:
                    d6:63:cf:6a:4a:df:6c:96:7f:47:e0:92:03:c2:5f:
                    8d:aa:1b:81:30:6a:b7:aa:2e:d0:ee:8e:45:c3:88:
                    b3:ce:ad:ce:a1:f7:65:a6:d2:b9:3a:3a:8f:5f:a5:
                    aa:dc:40:47:d2:57:04:8d:5d:c5:cd:fc:09:48:4b:
                    19:84:0c:05:2e:6d:96:d8:11:bc:93:b8:56:64:44:
                    65:a9:86:cf:a3:1e:48:28:fb:63:3e:0d:c6:dc:32:
                    42:a1:33:70:fa:96:aa:5e:d2:8b:76:53:bc:e8:26:
                    a4:18:b3:38:d4:4b:11:e0:86:5d:7a:74:1e:25:2b:
                    a8:f7:98:b4:72:91:a5:de:bf:6e:43:ff:57:ca:d6:
                    4d:74:68:be:4b:5c:f2:5c:c2:92:21:d5:de:4c:58:
                    c9:e0:2d:e5:94:aa:4b:5a:94:0e:d0:91:09:9a:fa:
                    75:a5:a3:0b:2b:65:62:4d:32:a7:89:bd:79:d2:e3:
                    48:f3:37:45:8b:3f:35:a5:8d:e5:fc:57:f3:65:e2:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E6:8E:2B:D7:1A:8F:9F:F6:93:5D:41:A8:5D:EC:34:07:8B:76:25
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:76:c3:f7:7f:02:7f:53:82:59:12:5e:6a:b2:47:a5:0e:20:
         0f:c0:4e:e4:8c:df:1a:97:a1:68:03:94:ec:d8:d3:50:af:0d:
         e4:be:87:07:1d:7f:22:a6:ec:fe:49:98:b7:fd:2b:34:74:53:
         0b:7f:28:4a:38:88:a7:d3:08:ce:ce:bc:c9:0c:48:c0:92:a7:
         bc:41:2d:5b:c6:e5:9d:97:e8:ff:86:98:eb:f7:b2:82:cd:f1:
         4a:b7:a9:d2:ff:5e:83:16:4e:0a:8b:7a:a1:90:8d:28:91:e9:
         ef:87:b2:47:2d:95:a4:4f:aa:7f:66:06:f1:b2:ad:81:11:0a:
         03:0c:70:57:08:a5:dd:aa:03:90:3e:86:b6:b8:a9:f8:e8:fe:
         be:76:5b:5b:4b:66:59:b8:94:08:b7:96:26:e7:65:43:70:02:
         08:31:4a:76:ca:81:95:0c:53:15:98:37:56:74:08:31:0c:bd:
         aa:0f:0d:32:8c:54:76:c6:4c:c3:1a:61:34:0e:21:b8:cd:21:
         e3:65:65:d8:2c:f4:fc:bb:a1:dc:15:9c:77:8a:ed:9f:9d:b2:
         3d:d1:51:99:8f:76:7d:5d:82:2a:33:37:18:81:48:5e:7c:4d:
         d7:a4:64:a8:32:88:14:0d:e8:2b:81:95:5b:3b:62:88:2f:38:
         fc:32:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:57:49 2025 by rpki-client