Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File:                     Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier:          1+3+Gr8J/53jzv5SB0GkE7wQWle0kDz/EwaMn0lN1ug=
Subject key identifier:   67:23:58:9F:1B:89:03:99:39:C5:A7:D1:EF:85:6A:4F:28:D3:5C:C4
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer:       /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial:       019838A87D1EA99E42B1BEB3F1F96BC3555F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number:          15F9
Signing time:             Wed 23 Jul 2025 19:00:22 +0000
Manifest this update:     Wed 23 Jul 2025 19:00:22 +0000
Manifest next update:     Thu 24 Jul 2025 19:00:22 +0000
Files and hashes:         1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: DWJDYLER4H/05UJbvNFPd/2bjiOTTWFXrxGmjALkyRc=)
                          2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:a8:7d:1e:a9:9e:42:b1:be:b3:f1:f9:6b:c3:55:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
        Validity
            Not Before: Jul 23 19:00:22 2025 GMT
            Not After : Jul 24 19:00:22 2025 GMT
        Subject: CN=6723589f1b89039939c5a7d1ef856a4f28d35cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:d2:0a:05:ec:b0:51:ee:65:41:0b:2e:a4:
                    39:a8:8e:9b:b5:25:1b:c2:a3:4f:be:1e:9b:13:86:
                    f4:81:6f:7d:e5:29:63:2e:4a:63:19:10:38:92:95:
                    38:33:fd:f7:82:a3:5b:3b:3e:7d:f0:60:45:0e:91:
                    22:ff:28:8e:e5:a7:c8:90:7b:93:43:f7:dc:42:8a:
                    e1:d0:37:af:bb:2d:fd:86:ee:a3:62:39:c4:74:8a:
                    fd:28:89:08:a0:1a:e2:86:c9:a7:83:53:24:74:98:
                    de:9c:b5:73:18:83:b2:b8:2d:c1:6b:20:ca:cd:c6:
                    d5:f0:b4:4a:a7:0c:0d:bd:80:f1:12:41:79:c8:9f:
                    f7:d9:a7:a2:52:61:7c:59:d1:b4:1c:3d:ad:82:28:
                    77:10:b7:71:69:75:5c:41:f4:3e:01:91:45:bc:11:
                    71:67:ea:bf:38:a6:a8:2b:4d:35:53:32:31:67:90:
                    f0:93:cc:38:1a:1b:63:72:ae:af:0c:7e:2b:48:a2:
                    b9:3f:a6:43:0a:9b:10:46:f1:19:40:39:73:d5:64:
                    47:43:ca:6c:c0:15:66:ac:93:19:07:99:2c:19:4e:
                    26:a4:ed:0b:20:0f:d5:65:ea:b6:70:9c:90:41:d5:
                    d4:37:d2:e2:96:b0:7e:4d:91:f9:85:3e:4b:6a:16:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:58:9F:1B:89:03:99:39:C5:A7:D1:EF:85:6A:4F:28:D3:5C:C4
            X509v3 Authority Key Identifier:
                keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:91:61:2e:93:5f:94:f0:8b:fa:e3:a0:f0:3d:57:7f:45:5f:
         7e:e9:92:86:06:47:69:03:15:38:79:b0:d6:bc:ee:2a:50:e4:
         54:54:70:15:a6:65:be:5f:03:ee:1e:54:af:d1:70:65:3a:4e:
         43:08:b0:c5:db:f9:0d:27:b5:d5:a8:c8:df:20:78:8d:4b:e0:
         4c:1b:1e:ba:2c:d6:02:af:31:81:a1:8f:9e:8e:5c:31:ec:61:
         a5:44:17:1a:ec:6b:0a:31:d4:1d:ed:5f:4f:50:46:25:9e:ad:
         d5:e4:b3:16:1d:c1:03:62:e4:a8:a7:83:e6:33:73:4b:53:9f:
         e7:cb:03:9e:87:bf:fe:2f:26:d2:e3:ab:27:a6:15:ca:ca:2e:
         17:b5:b7:66:a8:0f:73:8b:b1:aa:d9:d6:20:1c:45:2d:1b:f3:
         ea:ac:51:16:b2:4f:b6:c2:7a:f8:2a:b1:14:dc:52:e4:cc:09:
         77:8c:67:7e:2c:0a:87:62:94:6d:fe:ca:90:30:ad:58:e4:1e:
         9b:04:34:d0:23:36:92:ee:48:e7:6a:51:64:13:bf:ab:c3:8e:
         6d:51:2a:af:07:3c:ad:88:66:4b:cb:77:17:cf:78:45:22:d6:
         cc:dc:33:67:30:db:52:d3:a4:34:f8:22:3c:98:1a:c9:f7:3c:
         8d:2b:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:26:21 2025 by rpki-client