Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File:                     uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier:          m8Eoi9tXTWW2A7dWvBRuwu3Qm7iRq4z/hXnna1swI1A=
Subject key identifier:   3E:8F:FC:23:F1:71:B2:40:A9:E3:FA:31:6A:86:96:CA:48:5E:78:8D
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer:       /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial:       0197700786E5F440993E323E2417737D49B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number:          03AD
Signing time:             Sat 14 Jun 2025 20:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:30 +0000
Files and hashes:         1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: Xb3YmIsGMQo9IT4I6xjEaLPyEfHbvW/+Ep12KJPfq6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:86:e5:f4:40:99:3e:32:3e:24:17:73:7d:49:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
        Validity
            Not Before: Jun 14 20:00:30 2025 GMT
            Not After : Jun 15 20:00:30 2025 GMT
        Subject: CN=3e8ffc23f171b240a9e3fa316a8696ca485e788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:d9:81:35:55:3d:51:0d:db:68:c8:f6:56:
                    b0:b7:2d:4f:23:13:97:83:09:92:ba:1f:97:24:19:
                    b7:fa:3c:3b:5c:ff:06:f0:55:42:29:ae:9f:f9:95:
                    06:a5:61:96:d1:0a:50:df:f4:91:28:ba:ad:81:77:
                    ef:33:0b:d5:74:a9:2e:e2:87:51:e7:66:d3:82:24:
                    70:c8:0c:07:97:72:5f:2f:a0:c5:e6:8d:06:08:48:
                    c8:34:a0:77:85:76:a6:62:07:46:a2:96:9d:44:85:
                    d7:ce:75:d3:14:18:fd:3d:c7:c9:2c:c5:58:a1:3a:
                    b9:ef:dc:c6:6f:85:06:9b:81:96:70:3b:36:85:a2:
                    b7:a5:2c:33:0e:79:b5:73:47:b1:e2:ff:d7:07:21:
                    2e:1e:bd:16:57:1c:ff:6a:9a:63:cd:21:9c:f7:ab:
                    e0:88:d1:75:82:5e:78:f4:6d:54:9f:fa:67:10:ad:
                    7a:ed:da:3a:3f:99:78:92:4e:b9:77:81:f4:bc:ad:
                    b4:ff:93:ec:88:8f:90:c0:07:95:97:07:98:b3:47:
                    86:8f:0e:b2:d0:55:f7:e8:eb:3f:cd:58:3d:39:6b:
                    2a:42:a2:69:d8:e6:2c:bc:25:ed:5f:e1:a5:c9:12:
                    ec:79:18:74:09:76:3d:ac:d9:ee:b3:f5:00:d7:0e:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:FC:23:F1:71:B2:40:A9:E3:FA:31:6A:86:96:CA:48:5E:78:8D
            X509v3 Authority Key Identifier:
                keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2d:63:ae:72:aa:d6:8e:ea:77:3a:97:33:1d:3e:3e:be:0f:
         d4:20:f9:92:65:a1:76:26:54:f1:de:49:72:4e:9b:50:33:b4:
         e8:bd:9c:e3:aa:37:bf:23:95:fd:1e:b1:41:5d:7e:1a:b7:6a:
         7b:1c:74:d2:07:35:49:87:50:89:f9:d4:e1:45:97:94:58:af:
         98:56:63:46:35:84:ce:19:34:60:4f:fa:87:8f:8e:4b:ec:ec:
         1e:c7:5a:4e:f0:e0:c9:61:3e:29:cf:d9:5b:ad:6b:c5:9d:8d:
         ec:1e:17:74:3d:21:a1:a6:61:f7:79:f2:4b:af:5d:f8:b1:0f:
         83:4d:4c:4e:7a:4e:53:99:52:fa:c0:38:ae:4b:74:6b:bb:2d:
         04:00:35:46:4b:df:83:e2:5c:a8:4c:4c:75:f1:f3:f9:45:10:
         ff:d2:cb:5d:dc:35:0a:36:c5:05:01:ac:a0:62:25:6c:86:3a:
         6b:bf:3d:05:76:59:9c:86:b2:89:f7:46:ef:b4:5e:7e:5b:71:
         03:7a:ef:7d:e6:92:1c:cc:ee:df:8c:a5:43:8b:38:e2:56:2e:
         a8:8c:b6:65:c2:eb:05:b8:07:9b:30:70:82:28:94:c8:41:4a:
         c4:51:00:ea:5f:cc:c9:af:6f:e3:4e:17:93:03:45:15:ed:d5:
         ec:2e:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:58 2025 by rpki-client