Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          WgP/SAwE/NJi9G2IfJ2y1RybCVVb5qV4Nc4JYchkHQo=
Subject key identifier:   44:F8:F5:B4:CB:73:8C:7B:E0:C8:A6:FF:4C:CA:5A:A9:70:1F:F9:41
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       019922FABA0DEDE41CA455A08FCA1364E133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0D58
Signing time:             Sun 07 Sep 2025 07:01:20 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:20 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:20 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: EQOgO7g2d90iZbi/b/eC6YNYYRt70JftNmihMuUNbfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:ba:0d:ed:e4:1c:a4:55:a0:8f:ca:13:64:e1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Sep  7 07:01:20 2025 GMT
            Not After : Sep  8 07:01:20 2025 GMT
        Subject: CN=44f8f5b4cb738c7be0c8a6ff4cca5aa9701ff941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:4f:7d:9a:37:4d:52:86:04:67:1a:e6:4d:
                    35:62:d5:82:a7:57:e7:a5:61:f0:91:a9:f0:c2:de:
                    94:1b:17:f8:7c:82:31:ef:27:ce:e3:09:c4:d0:8c:
                    ed:a7:8c:3d:0c:be:a3:65:a7:35:bd:d9:cd:ef:9c:
                    15:98:2b:3b:a6:c1:84:4d:8c:bb:22:aa:59:8a:58:
                    0b:22:dd:08:a9:2e:70:b0:1c:a4:7e:a5:59:11:ea:
                    a1:93:85:5d:92:ab:ea:fd:c3:b0:a8:13:13:e0:54:
                    85:ac:2b:a9:10:e1:81:30:38:83:2f:ed:8f:03:cb:
                    45:a9:0a:81:45:2a:01:51:bb:91:8f:29:ec:3a:5a:
                    b5:0d:63:a0:84:df:9f:fa:5c:16:3e:66:af:d6:27:
                    80:8e:5e:74:c0:e2:32:20:6f:fa:c5:a4:60:a4:69:
                    7e:7a:92:aa:b5:d5:e8:d0:03:af:a0:a2:cd:dc:b3:
                    ce:b5:65:53:d9:bf:cb:26:85:93:7c:0b:19:5c:19:
                    1e:a2:5a:f6:71:15:25:89:fb:a9:f0:52:db:1a:fb:
                    ed:4a:e8:27:20:f8:ae:cc:4f:3f:71:bc:3d:e7:2b:
                    11:01:77:23:7e:66:4c:90:0a:a5:c6:62:52:b9:18:
                    93:b5:7d:a8:90:59:d9:64:0c:be:37:56:80:f4:2e:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F8:F5:B4:CB:73:8C:7B:E0:C8:A6:FF:4C:CA:5A:A9:70:1F:F9:41
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:01:ee:c9:4b:5d:57:37:66:1e:1b:82:74:fa:fc:ea:53:0b:
         98:0e:5a:77:c8:85:f7:7c:89:6c:99:cc:06:74:87:a3:87:55:
         2c:e7:67:6c:2e:b8:3b:9a:cd:e0:52:97:4a:0b:e9:7a:07:e7:
         ee:39:18:8c:d5:10:e0:90:cf:6a:92:91:ab:f6:68:a0:a2:e6:
         c5:1f:e4:4c:d3:01:8c:53:58:91:28:bc:5d:22:43:00:05:ba:
         6a:7a:63:2b:9b:0f:b8:a3:c1:9a:21:f3:7d:2e:cd:7d:1c:68:
         14:f0:d1:d9:10:b3:4f:7f:17:9e:b1:79:c6:4e:39:95:81:c5:
         0c:9e:f5:95:1c:92:34:f2:c9:91:60:a0:31:0e:ea:7c:3c:f5:
         e8:38:8f:1f:dd:16:44:1a:88:f1:db:6f:6b:a4:e6:2f:0c:64:
         f6:8b:19:9c:df:6f:08:26:31:8c:ce:3d:02:80:a6:1c:6f:36:
         89:9d:4d:98:9b:69:29:6a:8d:83:ca:ca:52:19:0b:64:4e:55:
         50:ef:d1:89:93:55:08:cc:01:f2:6d:3a:33:a8:e2:9d:08:dc:
         04:34:5d:94:c0:38:ee:6b:42:31:00:cf:2f:8b:5d:59:98:2f:
         d0:4a:71:e8:60:bd:1c:ef:e0:61:d1:7e:5b:fe:e3:d5:67:8c:
         44:c8:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:43 2025 by rpki-client