Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
File:                     d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json)
Hash identifier:          pNiLP5eEHydnB0hBZ+flJUedzigJkgYHL1/Sq1hNyrY=
Subject key identifier:   22:59:D4:09:BA:EF:7E:BC:F0:F3:E1:D9:B5:6A:7E:67:74:83:FF:0E
Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Certificate issuer:       /CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Certificate serial:       019916F674F26EE6221F2513EE168771C471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
Manifest number:          53
Signing time:             Thu 04 Sep 2025 23:01:14 +0000
Manifest this update:     Thu 04 Sep 2025 23:01:14 +0000
Manifest next update:     Fri 05 Sep 2025 23:01:14 +0000
Files and hashes:         1: _jCuY0H7p6bIiBFSZYJo7QRa2GM.roa (hash: TpMghtYoXA8sj9zv0aUbBiasB0uWw4MufaB/nWeBcDs=)
                          2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: oVAIg6AGMOiHO0PQ9e3G2w2ynmSBlHc6vJVqmwowmRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f6:74:f2:6e:e6:22:1f:25:13:ee:16:87:71:c4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
        Validity
            Not Before: Sep  4 23:01:14 2025 GMT
            Not After : Sep  5 23:01:14 2025 GMT
        Subject: CN=2259d409baef7ebcf0f3e1d9b56a7e677483ff0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:42:b2:a0:5a:e3:8b:50:39:c4:4c:69:ca:
                    c4:77:a7:e4:ee:57:f6:47:96:51:e6:78:51:e5:94:
                    0c:a7:15:13:b8:17:d8:34:3a:87:46:8e:19:be:82:
                    a6:e3:94:1b:d5:74:1a:84:30:d9:f7:e2:ef:4f:e2:
                    50:54:e4:99:18:8c:a1:5d:c2:56:87:98:2d:95:9b:
                    19:b4:3b:5d:6e:90:2e:10:56:ba:64:68:e2:13:bf:
                    c2:21:86:b0:02:29:30:ac:ae:a5:ec:9f:41:06:77:
                    52:45:aa:88:f6:bc:8d:d5:cf:54:51:12:b8:fa:7f:
                    76:97:e0:8c:02:98:45:4a:60:0d:5a:2c:9b:cf:7a:
                    f7:73:4c:1f:60:ca:41:0f:bd:8a:f4:d5:a3:2e:bf:
                    71:c4:89:66:71:34:f2:dd:5e:4a:06:c4:be:60:e4:
                    c5:45:87:5b:96:7c:d4:42:5e:c2:5d:c6:aa:81:70:
                    54:37:2a:3a:c5:e4:70:11:29:ee:7e:8a:ae:fe:60:
                    25:3b:dd:fb:00:4d:21:27:7b:99:fa:97:ad:81:7a:
                    45:9d:e8:94:d4:e5:96:e7:24:6b:47:3f:0b:12:82:
                    04:72:23:df:fa:82:ec:a4:cf:7b:0c:e3:a7:8b:ba:
                    1d:8e:c5:a2:28:84:f8:81:a9:60:6e:78:13:df:e3:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:59:D4:09:BA:EF:7E:BC:F0:F3:E1:D9:B5:6A:7E:67:74:83:FF:0E
            X509v3 Authority Key Identifier:
                keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d0:dd:6b:67:8f:a4:9e:4b:61:1b:ac:86:38:7d:e8:d5:d7:
         9b:9d:2d:2e:8a:01:cb:f8:83:86:7e:78:fb:7a:f8:03:fa:70:
         31:ee:ed:d5:88:e4:f3:5f:e8:16:48:be:7d:7e:f8:e9:d4:de:
         03:3a:6e:4b:ac:21:12:6e:15:55:d8:f3:c1:20:a1:a1:5b:69:
         91:d8:35:be:95:74:a9:11:37:55:b5:ed:2e:7d:26:a7:0f:f0:
         e5:d1:fa:74:3c:8f:01:ad:cf:27:4f:53:d5:22:7c:cc:17:ad:
         9a:3d:35:40:57:70:fc:0d:62:a0:8d:d0:9b:c9:96:8a:a3:30:
         7a:09:b5:ce:71:58:9f:6e:a5:d2:07:59:ef:0a:13:e0:68:95:
         ae:2b:79:dc:95:8c:98:e3:00:5c:da:be:29:64:ad:bf:37:29:
         df:8e:11:39:47:e4:ac:48:cb:71:46:25:60:47:59:f1:55:a3:
         07:7f:a2:a8:33:48:29:55:20:c8:51:2c:56:aa:e6:8f:43:8a:
         40:9b:90:c0:b1:c5:f4:ad:8a:3f:f4:10:9f:84:76:5c:9c:4c:
         2f:c1:da:cd:7e:a4:31:88:a9:77:b1:d6:76:21:15:45:4c:a6:
         96:e2:65:d4:27:c0:9f:51:62:a1:1d:4b:04:47:74:24:ff:37:
         6b:ba:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:19 2025 by rpki-client