Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          8GTCK2HsLr3/t1Xa0MELPe/2TgDZOS3N0j2uVHMXcxk=
Subject key identifier:   56:34:46:D0:48:33:2B:F1:25:38:56:C0:C3:B9:D8:8D:7B:E4:4E:AD
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       019922C398C8C86C4181DC91BFD7FCC01B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 06:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:07 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: j+YUkDf4uww+xB4ciPU/fsj3LBUtvgL4P+ePVcnXdPA=)
                          2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:98:c8:c8:6c:41:81:dc:91:bf:d7:fc:c0:1b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Sep  7 06:01:07 2025 GMT
            Not After : Sep  8 06:01:07 2025 GMT
        Subject: CN=563446d048332bf1253856c0c3b9d88d7be44ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:e9:89:8e:9d:a2:70:89:f4:44:a9:63:25:
                    95:d5:3c:b8:fd:da:60:2f:0d:ca:3c:eb:52:44:4b:
                    c5:0a:3a:a0:e7:d5:36:b2:47:39:30:8c:f2:bb:5a:
                    be:88:f1:88:7f:d5:16:1a:36:d6:b9:1c:b2:a8:98:
                    f0:37:6d:e5:af:ea:a2:52:be:a5:cc:ae:25:30:1e:
                    f7:18:74:04:c3:8f:64:ef:8b:e6:32:66:70:21:10:
                    66:0f:c1:87:7e:de:12:59:24:41:d5:c6:79:e5:4c:
                    6b:54:11:9b:85:ee:09:53:a8:de:06:6c:62:42:f3:
                    89:45:fc:f0:3d:94:64:f8:0c:18:c4:f8:4f:6c:b2:
                    43:d4:32:b5:15:a5:2b:e4:93:e7:4e:36:37:17:22:
                    23:43:9b:1a:72:77:ac:04:5c:26:96:eb:30:d1:99:
                    0e:1e:30:a1:4c:2f:fd:62:a3:7a:27:f6:15:52:df:
                    0c:0e:af:aa:4e:55:2b:da:a3:53:34:13:ab:9e:b5:
                    ea:31:b8:59:1a:ce:62:e6:5c:57:20:55:93:67:b2:
                    a5:b2:3e:1d:c9:d0:11:54:d4:92:ed:99:55:50:61:
                    2d:c7:a8:46:a8:9b:f8:9b:50:d2:19:34:d7:da:6b:
                    ed:f0:ad:6b:03:83:93:1a:28:73:8e:0c:09:94:71:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:34:46:D0:48:33:2B:F1:25:38:56:C0:C3:B9:D8:8D:7B:E4:4E:AD
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:60:c1:d4:23:8f:5b:f1:b0:6f:5d:7a:e0:11:c3:77:02:
         82:90:84:83:3d:b6:6c:da:60:03:4c:4e:a6:e7:b9:3f:2a:f6:
         72:bc:d6:8a:38:bc:a0:d5:98:96:0f:17:19:12:b0:cb:d4:00:
         e5:24:22:ba:78:09:ff:b9:66:b3:82:c8:d0:91:41:cd:3f:c9:
         19:56:33:cc:99:c1:ef:11:2f:17:77:c9:56:fa:e5:39:68:cf:
         c1:39:d7:dc:16:92:f1:49:96:0a:95:19:71:21:1e:3b:1f:f5:
         9b:34:f6:74:3f:56:f0:66:c5:7e:d8:92:b1:7a:a0:30:31:b9:
         c9:e1:b7:b3:cd:b8:ac:14:8c:4d:ec:10:52:84:9c:b1:d4:33:
         62:66:b7:6f:d6:6f:fa:4e:00:b3:2e:7b:c4:3f:87:61:0d:7c:
         58:ae:ee:94:69:a9:8d:98:95:72:bc:03:fb:5c:ce:f4:c9:86:
         2c:b4:e2:4a:b6:56:a5:58:5c:ef:60:cd:bb:88:ce:4b:1b:e8:
         d1:2c:55:0e:1f:7c:06:27:c2:66:a9:34:41:23:8b:2b:a8:27:
         e2:f2:82:f3:14:b7:0b:0d:0d:13:b3:c9:06:4c:33:16:84:10:
         31:67:a2:ee:e6:ec:4c:35:c9:a8:6c:ff:fe:64:b1:f9:04:a4:
         ac:75:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:37 2025 by rpki-client