Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File:                     UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier:          QKVk0bNZJX8QkD2EwYH9wpRGm7Zjru6OfqmnZ+FJxcE=
Subject key identifier:   06:C1:4B:2C:80:BB:A0:9C:9A:F6:B5:9A:6B:EB:E8:BF:77:C5:8D:F9
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer:       /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial:       019922FA6B287086F5992638427432AECB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 07:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:00 +0000
Files and hashes:         1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: otMW0MGCPCby0UwwWsCmcTC9UPFD30NpP0Orn6O6Sd8=)
                          2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:6b:28:70:86:f5:99:26:38:42:74:32:ae:cb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
        Validity
            Not Before: Sep  7 07:01:00 2025 GMT
            Not After : Sep  8 07:01:00 2025 GMT
        Subject: CN=06c14b2c80bba09c9af6b59a6bebe8bf77c58df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cc:db:41:fa:6e:e9:fe:f8:91:2f:f4:f5:46:
                    0d:6c:69:cb:af:09:31:be:9f:ac:fd:82:e9:99:c5:
                    fa:85:51:e2:0a:ae:47:e2:90:a6:5a:fc:30:d6:c9:
                    50:7c:a0:85:a9:04:bc:c1:b1:7e:a0:ea:47:fa:a7:
                    5f:8e:df:32:cb:1c:23:5a:15:2d:93:0c:4f:e4:a4:
                    f6:70:85:63:e3:20:66:3f:f6:60:8b:d6:f1:d1:8b:
                    93:37:eb:22:17:c7:fa:08:8a:b7:fb:02:5e:fd:65:
                    fc:8c:95:9b:fb:9e:f8:f3:3a:41:8c:81:80:71:a0:
                    39:a8:aa:ef:fe:f1:08:f5:2f:89:93:4d:2e:20:ca:
                    d3:af:90:d9:5a:1d:11:ad:76:1f:90:e1:e3:df:33:
                    f0:bb:27:24:43:65:64:27:53:0a:95:70:54:6b:8a:
                    a4:5a:a9:d6:64:6a:a4:f3:da:a5:ff:ad:df:3d:4e:
                    4e:64:72:3e:39:e7:86:ef:4c:a9:9b:fa:cc:96:fa:
                    a6:59:69:5a:c9:99:d6:84:f2:a4:68:18:dd:d5:cd:
                    ef:34:83:fb:25:27:53:08:c7:8a:43:ca:9f:4b:25:
                    df:05:41:92:b5:6b:0c:72:d6:74:2b:27:f1:ed:37:
                    3f:40:10:e7:13:b0:9d:f0:3e:52:8c:b1:3c:c6:8a:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:4B:2C:80:BB:A0:9C:9A:F6:B5:9A:6B:EB:E8:BF:77:C5:8D:F9
            X509v3 Authority Key Identifier:
                keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:69:96:52:af:73:b9:92:2f:3e:06:db:ce:bb:6a:80:8a:
         f5:52:5f:7d:ac:a7:ed:6e:85:34:fd:c2:d7:31:96:7c:50:76:
         32:4c:1a:db:39:73:3d:05:af:f8:cb:1b:01:59:fe:66:c4:5a:
         b4:d0:d5:5b:16:c6:c3:4e:b0:69:fc:67:d2:42:9c:1c:65:14:
         68:e8:ff:7b:0d:8d:db:30:86:df:80:23:ef:23:8a:7e:56:d0:
         03:f9:30:a0:d1:72:88:b7:0c:bd:1b:a8:57:9b:0f:f0:7b:5c:
         fe:fa:5e:4d:fb:71:bb:49:c6:2a:85:3e:27:ce:fe:7c:68:e8:
         03:b2:08:4e:7d:fa:9a:53:a8:7f:4e:a4:6e:6d:34:9c:f7:d9:
         80:68:12:1f:49:e0:8c:5b:07:f9:25:44:38:10:2e:2c:38:13:
         16:23:68:8c:4c:fe:24:72:7a:c9:26:76:9f:1f:bb:5b:d4:93:
         bf:c1:aa:bc:8f:50:66:f2:f6:bc:e0:cb:e8:9d:5a:30:66:7e:
         49:3f:86:95:a3:b8:95:46:93:49:24:04:4b:29:6b:ff:5e:db:
         7e:64:77:e7:e4:76:33:5e:50:09:23:08:2c:0d:0c:d9:99:08:
         0d:88:90:2c:c4:a7:a7:2c:4c:08:cf:d5:ba:ce:e6:a2:f1:33:
         d6:f1:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:20 2025 by rpki-client