Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          iTJz2MLAfYio5CqogThu5R3y79lhk2YhT3/OiO7PfY0=
Subject key identifier:   90:9A:46:1B:49:64:28:3E:D7:A2:3D:68:0E:5B:11:0A:7A:34:12:9B
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       019963FE4C7BFD3EBF6DBCA5BA380E932270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          101F
Signing time:             Fri 19 Sep 2025 22:00:33 +0000
Manifest this update:     Fri 19 Sep 2025 22:00:33 +0000
Manifest next update:     Sat 20 Sep 2025 22:00:33 +0000
Files and hashes:         1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=)
                          2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=)
                          3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: kfo2yyVeULDLUfa3kHiy74SX7k+wJbtb6fC6ofSQJqg=)
                          4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=)
                          5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:63:fe:4c:7b:fd:3e:bf:6d:bc:a5:ba:38:0e:93:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Sep 19 22:00:33 2025 GMT
            Not After : Sep 20 22:00:33 2025 GMT
        Subject: CN=909a461b4964283ed7a23d680e5b110a7a34129b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:93:2f:c6:28:49:cd:bb:3e:4c:24:5a:ac:
                    87:f9:be:6a:91:71:ce:a1:e9:4e:ad:17:ae:8a:65:
                    29:d5:69:36:e2:e4:2b:fd:b3:90:5d:16:75:0d:05:
                    c1:12:b8:dd:fb:96:3e:d8:b5:51:b1:8b:8e:c9:7a:
                    ff:eb:10:6d:0b:61:18:e8:4d:fb:59:82:6a:23:72:
                    3b:07:fe:68:6b:c1:2c:43:e3:d6:c9:cd:12:87:2e:
                    e6:fd:e5:8e:45:c0:71:df:10:b3:c3:cc:9f:e7:76:
                    b8:f7:3d:62:ef:35:7c:dc:8f:e4:e9:3e:b8:b0:b3:
                    2a:9a:59:49:0c:48:18:24:36:9f:34:6e:d0:b4:ad:
                    db:d3:ff:c8:3b:d2:3a:f3:6e:82:be:ad:f1:f6:86:
                    c1:1d:c6:a6:2d:fc:6b:db:f7:ad:74:6d:b2:7d:4c:
                    2c:c5:4e:cd:99:7d:51:45:72:0f:81:ef:84:b0:8e:
                    bc:b8:5c:7c:5c:11:4b:86:8a:34:fc:e6:ae:10:37:
                    bb:ff:c7:02:29:d5:29:be:f5:d3:50:9b:15:2c:87:
                    1d:48:6a:12:5c:59:f3:fe:1d:d4:e3:77:3b:af:5d:
                    e5:7e:06:98:ae:bb:ce:72:87:5d:20:ae:83:dd:fd:
                    c5:06:f7:a3:04:65:3b:57:85:6b:d3:05:e5:3f:7a:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:46:1B:49:64:28:3E:D7:A2:3D:68:0E:5B:11:0A:7A:34:12:9B
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:09:ac:67:35:f7:7a:c6:9d:81:d9:45:9f:14:c6:40:f6:
         6d:95:39:03:b5:9e:0e:d6:70:0d:62:d2:ab:ff:69:c0:08:16:
         1c:fa:f7:74:a7:ba:99:af:ce:b8:fa:2a:15:b3:13:4f:b8:8d:
         69:2e:84:1e:da:e3:3f:ac:ec:69:4d:49:61:5a:89:43:21:90:
         54:95:23:ee:b9:eb:33:41:c5:11:90:c2:74:97:3f:80:98:2e:
         b8:53:75:80:8f:cd:07:52:78:58:4d:c1:f5:49:52:53:5c:18:
         dd:3e:9e:e4:5d:5d:7c:10:d3:08:52:4e:7e:5b:f5:14:81:14:
         2b:26:0f:b4:92:9a:0b:8e:97:fd:f0:0e:80:cf:ff:f7:b1:f4:
         86:e6:ee:24:58:fd:49:f7:73:75:4c:38:ae:8c:55:e8:4e:4a:
         ec:6a:48:0b:e0:df:45:f5:c1:5b:f9:f6:df:40:c1:25:3b:8b:
         9e:af:d6:ce:4c:74:58:3e:08:fd:55:92:5e:e1:e8:58:0e:0e:
         96:9a:f4:d8:a1:f5:b3:04:9d:f3:31:1b:5e:f3:c0:03:95:e7:
         c2:a1:da:f6:72:51:15:ce:f4:75:8e:48:52:d0:4c:6d:9d:c4:
         a2:ef:3c:92:9e:f9:30:5c:85:d8:17:fd:ac:8a:cd:c2:6d:9f:
         11:6b:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:48:44 2025 by rpki-client