Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File:                     UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier:          7KLX2FLayl5T71Uk2sUVXsPYPxRWhyez96i6Cui/e6U=
Subject key identifier:   AC:D7:3B:0C:F3:8E:B2:B8:43:04:F9:6F:44:92:22:A3:FD:EB:3C:B7
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer:       /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial:       0198391615C9590DD579854047408CAF094C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number:          1539
Signing time:             Wed 23 Jul 2025 21:00:05 +0000
Manifest this update:     Wed 23 Jul 2025 21:00:05 +0000
Manifest next update:     Thu 24 Jul 2025 21:00:05 +0000
Files and hashes:         1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
                          2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
                          3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: 3jKS+zOTpjoX8YOXgJ6DMsnhzy2hmkcE/XFdpsMntxY=)
                          4: zGd05-NZw-sJTwuBu02tPsH24pE.roa (hash: ofSwbMcGSKnZ4x4xLzhpGhAWtlZ8SB33VsUVqo3M7tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:16:15:c9:59:0d:d5:79:85:40:47:40:8c:af:09:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
        Validity
            Not Before: Jul 23 21:00:05 2025 GMT
            Not After : Jul 24 21:00:05 2025 GMT
        Subject: CN=acd73b0cf38eb2b84304f96f449222a3fdeb3cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:57:3c:bc:23:36:57:27:4f:36:c6:cc:df:
                    13:4c:44:1b:36:a5:d8:e9:97:ee:fd:ca:68:ca:69:
                    2a:a9:4c:34:67:d6:a2:d7:7c:f1:60:e7:84:21:19:
                    74:13:a1:f3:95:f8:7b:5d:38:b9:69:5a:9f:d1:c7:
                    60:11:5c:7f:90:ee:d6:56:74:37:0a:bb:87:83:80:
                    35:35:d1:10:2a:eb:d0:57:ce:05:4d:03:c3:51:bd:
                    48:aa:88:d8:a3:17:7f:33:98:b7:d5:09:02:ed:2f:
                    06:1a:52:7b:47:88:b6:62:ad:75:f2:48:7c:d9:10:
                    99:5f:b7:a7:30:e4:57:a7:52:9f:14:0d:b5:d2:52:
                    48:ea:a6:39:26:8f:cf:29:28:d8:18:3f:b1:dd:4e:
                    c4:5a:c1:e9:c8:91:88:42:25:4d:17:d6:67:73:78:
                    39:1f:30:af:d4:27:4c:36:d5:a4:ef:bb:41:8b:eb:
                    f2:a0:96:4c:29:d0:ea:e5:09:b8:58:49:a8:fc:f0:
                    54:39:02:58:6a:a5:49:b8:d7:48:bb:83:88:db:a5:
                    c5:98:dd:be:99:f5:2a:c7:30:9c:90:df:36:39:43:
                    bc:e1:88:d7:5c:50:1f:67:ec:6f:56:45:15:89:c4:
                    db:b4:9b:a0:16:7c:d3:c3:07:3e:5d:08:d7:41:ce:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D7:3B:0C:F3:8E:B2:B8:43:04:F9:6F:44:92:22:A3:FD:EB:3C:B7
            X509v3 Authority Key Identifier:
                keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a0:ba:0d:50:79:bb:71:b5:2b:fd:09:17:59:f5:e9:eb:95:
         05:a7:a6:6e:1a:89:39:34:1d:e7:76:f0:f4:03:c4:43:cc:eb:
         6b:3b:9c:c0:7b:cc:bd:cb:ef:ae:60:fb:d0:1a:16:7b:2f:05:
         d7:b7:cf:53:5d:bf:fa:1a:8e:13:29:24:51:5b:69:09:c7:3b:
         e5:e7:19:84:f0:ec:c6:64:69:91:4b:b2:07:cb:41:2d:94:fd:
         10:a0:ce:46:7c:ef:0f:92:db:43:90:b8:0d:14:09:49:5b:d6:
         59:fc:fc:7f:46:b6:ef:f8:44:ce:d0:29:87:93:c1:82:bc:bf:
         8f:cc:64:e5:ee:fa:a2:94:af:9f:e8:c3:09:96:1f:9e:a2:56:
         88:16:87:1b:17:ac:43:21:07:ec:67:c7:f5:4b:7a:8c:bf:f1:
         f5:be:ed:12:f8:02:29:60:34:7e:d5:02:23:88:68:ae:7e:8d:
         fb:b0:40:d0:5b:d3:63:26:e0:33:2b:13:ae:26:bd:b8:da:fd:
         bd:c6:b0:d1:63:b2:fa:9c:8b:c4:6c:b8:a2:f6:b2:88:e2:77:
         05:69:19:18:08:fa:4c:ee:a2:50:76:13:23:f1:50:7a:67:7d:
         af:bd:64:98:9f:b5:71:87:81:5b:4d:82:5f:e0:33:d5:07:3f:
         90:cc:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:26:11 2025 by rpki-client