Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File:                     U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier:          BzUV3pobD9rISoba/D/CCjNN7GcLeYwUi0pJY8wDOwk=
Subject key identifier:   44:61:55:7E:6C:B4:5B:04:81:DA:55:F4:2B:FD:FD:45:D9:A1:A8:0F
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer:       /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial:       01991FC3EBB3FE86CEAA7C9304B9D37633C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number:          1672
Signing time:             Sat 06 Sep 2025 16:02:37 +0000
Manifest this update:     Sat 06 Sep 2025 16:02:37 +0000
Manifest next update:     Sun 07 Sep 2025 16:02:37 +0000
Files and hashes:         1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=)
                          2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: ObLBmJ32saZp6s1SkTHxeZlHZbr6ev9vlQr59o1a1Fg=)
                          3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:c3:eb:b3:fe:86:ce:aa:7c:93:04:b9:d3:76:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
        Validity
            Not Before: Sep  6 16:02:37 2025 GMT
            Not After : Sep  7 16:02:37 2025 GMT
        Subject: CN=4461557e6cb45b0481da55f42bfdfd45d9a1a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:5c:c5:c6:55:c6:fc:a3:b6:99:88:c7:53:
                    00:6a:73:29:86:04:0b:f3:3a:57:12:a8:07:ce:65:
                    7b:88:0a:9c:b5:11:65:38:d2:90:ad:2c:35:3e:18:
                    af:88:74:5b:50:8c:51:d3:9f:9f:e1:b1:d2:e8:4c:
                    f6:e6:71:4a:15:b1:2e:ea:d5:3a:31:65:ad:76:02:
                    ed:23:d8:e4:da:fa:14:b3:71:de:72:43:99:7b:38:
                    85:63:4d:6c:73:e7:eb:23:67:f3:6c:90:55:a5:1f:
                    b2:bc:5c:eb:d8:5f:3f:e1:5c:fc:eb:e9:b3:f9:43:
                    08:40:c1:f0:7c:fc:48:cb:94:ff:6a:54:f4:32:3e:
                    d2:06:17:8f:53:30:ba:0c:3d:36:21:8f:55:a2:a1:
                    03:0c:c2:e0:8d:24:36:fc:04:73:3d:ad:00:60:05:
                    a2:cf:7c:39:d8:d0:3e:92:4c:16:d1:de:41:7b:66:
                    a0:e6:d5:bc:ac:ba:69:0a:1f:91:3f:fc:23:38:b5:
                    f1:05:89:97:d4:42:bf:2e:b9:2c:22:d1:04:48:a1:
                    f6:3d:d2:22:b5:b5:67:30:d4:0e:e0:79:ad:08:e2:
                    e3:ed:2a:e4:7c:e2:f9:ec:73:77:5a:e2:07:bb:4d:
                    03:85:3c:b6:97:1e:5c:d1:73:da:8b:8f:cc:45:89:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:61:55:7E:6C:B4:5B:04:81:DA:55:F4:2B:FD:FD:45:D9:A1:A8:0F
            X509v3 Authority Key Identifier:
                keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c3:a6:31:c2:e1:37:ed:9c:4b:ad:69:d3:67:96:d6:8c:16:
         c7:74:99:da:9a:e9:ae:85:3c:3d:09:a5:5f:19:3d:c5:2e:30:
         b0:ad:10:4a:d1:91:e8:90:fc:f9:48:26:f6:e5:d9:ea:70:a3:
         0d:4d:fb:11:c5:62:41:f8:f1:63:83:b5:57:25:a8:be:2c:5f:
         05:f8:14:d6:7f:b4:5d:bb:31:27:6d:34:d7:2d:84:20:39:66:
         33:d9:8a:08:59:b5:0f:69:0a:78:84:85:83:af:b8:48:49:16:
         6b:54:96:fe:dd:2f:9a:cf:5d:4e:22:c4:fe:6d:7e:76:d6:8c:
         b1:87:48:d3:62:d7:ab:2e:dd:76:1c:f0:6c:5c:f3:75:cb:1e:
         36:51:db:8c:d2:cc:21:fd:5b:54:15:9c:27:19:50:ed:5a:9d:
         c8:87:9c:ad:6f:5a:d2:09:d4:b0:e8:f1:af:4b:2a:3e:02:d1:
         36:03:b4:c6:59:ef:e8:0f:73:b1:d1:30:37:db:46:19:a4:67:
         37:75:a1:f8:20:a2:08:4b:4c:57:6b:4e:f8:85:01:7c:28:28:
         4a:06:2b:f1:2a:d3:5e:79:94:8b:ac:c4:98:31:dd:85:06:1e:
         60:0e:d4:22:99:65:91:b3:87:db:89:d0:bd:a6:20:23:9c:09:
         7f:9e:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:24:00 2025 by rpki-client