Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File:                     uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier:          xOCYJPnVlirXaTW8Rr+u3W+ic6nvVbHg9pc0YPb26tQ=
Subject key identifier:   B2:98:41:D9:EF:1B:F3:90:01:25:56:30:FB:1D:67:DD:A8:AC:95:65
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer:       /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial:       0199221EC52785EB3BDCB2DA233C26C71423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number:          04B4
Signing time:             Sun 07 Sep 2025 03:01:05 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:05 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:05 +0000
Files and hashes:         1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=)
                          2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: 7a+JIy1s8gtrUJZ4M2f7PrSh4jO6qtx9jzx0g712eP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:c5:27:85:eb:3b:dc:b2:da:23:3c:26:c7:14:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
        Validity
            Not Before: Sep  7 03:01:05 2025 GMT
            Not After : Sep  8 03:01:05 2025 GMT
        Subject: CN=b29841d9ef1bf39001255630fb1d67dda8ac9565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:d9:5c:f3:cd:ea:71:29:77:9f:61:ac:1d:
                    39:be:a3:d9:60:5c:6d:19:51:55:4a:6f:c7:e7:27:
                    56:51:c8:96:6d:75:91:dd:1e:fd:ac:6b:9f:15:f6:
                    f4:2a:61:4a:bc:d7:ab:ef:e4:8b:5c:c8:df:b7:95:
                    33:5f:62:49:50:3d:2f:29:02:d1:6f:d2:fd:40:a3:
                    dc:42:e4:be:9d:15:e6:a9:7f:43:48:f8:66:0a:5f:
                    92:18:b8:db:c3:c0:87:4d:ce:61:99:9f:f1:51:bf:
                    f5:86:e9:76:4a:61:69:4f:e1:bd:18:75:50:17:c1:
                    5c:59:3a:b2:3a:14:20:a4:61:62:90:bb:1e:f9:4f:
                    03:8d:1c:39:ca:da:6b:c0:cf:f1:70:28:bf:46:ec:
                    d6:72:d5:48:ed:e8:ed:a3:06:84:38:9b:a1:47:be:
                    c0:1f:c6:b1:1e:4f:b1:b3:fd:d4:8d:36:c2:ae:9e:
                    03:c3:cb:10:4f:59:67:1a:ae:bd:47:28:a9:ba:d9:
                    74:d7:83:07:fa:ec:cc:9d:26:5b:9a:4a:54:10:47:
                    97:2f:bb:ef:16:78:8f:f7:44:e7:8f:d6:c7:67:8f:
                    53:2b:d6:e7:42:59:56:fc:33:ea:1d:d7:3e:ca:da:
                    75:fe:49:7e:9e:cb:88:a6:d5:84:f4:00:d4:56:b6:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:98:41:D9:EF:1B:F3:90:01:25:56:30:FB:1D:67:DD:A8:AC:95:65
            X509v3 Authority Key Identifier:
                keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:98:c9:9a:9f:1f:ed:2e:dc:1a:e6:d4:4b:26:a9:e6:35:50:
         07:1b:3b:6d:35:55:ea:44:9b:05:b0:76:fb:27:f4:4a:e0:e1:
         f2:d3:0d:38:aa:36:ce:7d:3c:a4:24:4b:64:b1:90:7d:37:58:
         86:42:53:fc:4a:8d:2f:e3:34:ca:a6:6e:2e:1a:4f:6a:25:48:
         c7:5d:67:8c:5b:64:fa:b7:06:e5:24:31:ce:1f:be:c7:7d:1b:
         36:9a:86:ce:09:80:07:4d:9e:76:d1:d7:ec:98:7d:a6:3c:6b:
         b5:cf:11:5e:2b:c5:cd:f4:64:69:3a:a1:1c:83:8e:ae:03:ce:
         10:1a:45:ef:9f:a8:9c:35:db:34:c6:79:92:c4:92:0c:33:a8:
         6f:ba:dc:45:8d:b9:a9:06:7b:7a:c1:d6:43:d0:06:77:c2:cb:
         89:1d:7b:bf:8d:49:0d:a3:34:f9:d5:65:d1:37:c9:4e:ff:77:
         57:d8:f7:a7:70:a7:5d:56:03:f1:5a:62:49:43:26:ba:e5:56:
         ec:0f:11:75:10:7f:b4:61:50:eb:c6:92:4b:76:de:bd:a9:a2:
         ad:7d:b6:4c:5d:56:bc:12:c9:6e:28:6f:e1:88:16:4e:a6:e1:
         19:aa:4b:06:d5:28:8c:bf:cd:94:29:12:a1:c5:de:cd:43:7a:
         ac:a5:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:38 2025 by rpki-client