Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File:                     ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier:          N8YKoRojYz6wOAgG2JK0HaeHNk2N1XhnuSI8/A01UJk=
Subject key identifier:   13:37:C4:D6:4D:F6:FE:BA:4B:42:0D:82:28:1E:C2:81:5D:27:31:CF
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer:       /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial:       0197835736DED2552A164BD459B2E0ED0CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number:          14AB
Signing time:             Wed 18 Jun 2025 14:00:20 +0000
Manifest this update:     Wed 18 Jun 2025 14:00:20 +0000
Manifest next update:     Thu 19 Jun 2025 14:00:20 +0000
Files and hashes:         1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
                          2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: pqUyNQzQQS8kHwuBo61/x5HWxjzATgV7dxaXNKxUII8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:36:de:d2:55:2a:16:4b:d4:59:b2:e0:ed:0c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
        Validity
            Not Before: Jun 18 14:00:20 2025 GMT
            Not After : Jun 19 14:00:20 2025 GMT
        Subject: CN=1337c4d64df6feba4b420d82281ec2815d2731cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:bd:30:51:20:76:d1:05:3d:a5:87:94:18:
                    83:e2:21:48:49:a0:98:b0:af:6c:e3:85:91:b9:47:
                    f2:36:7d:86:92:fa:06:f8:c0:cd:e6:16:f7:dd:35:
                    61:89:55:fd:9a:c9:2a:05:9e:48:f1:af:e7:53:1b:
                    cc:7f:63:23:a5:4e:01:de:df:71:2a:72:57:e3:85:
                    af:f4:67:0f:cc:6c:2b:15:a8:cf:c1:69:f8:b7:fa:
                    cd:b4:31:42:01:d0:03:ad:4f:54:1e:1e:57:3d:71:
                    26:0b:da:04:01:4e:d0:7c:f7:65:de:ca:7f:fa:54:
                    de:48:b9:16:df:e7:b5:ff:ee:a2:4e:be:d2:c8:89:
                    cd:a6:d9:76:e9:54:43:c8:77:85:fe:36:cd:47:9a:
                    18:d2:e1:38:1b:0e:98:d8:3a:c6:1a:92:b2:2e:59:
                    d7:64:ca:46:30:86:4b:8c:9c:48:c2:ef:dc:74:ed:
                    27:f7:5a:df:b8:4b:bb:e2:78:c2:f5:e4:33:e3:31:
                    e4:1a:51:24:68:1f:ad:4f:25:fd:43:ea:64:03:ee:
                    be:2b:34:8b:93:f4:fd:ab:a6:53:1e:34:ce:aa:d4:
                    57:6d:3d:91:4e:51:30:c0:db:60:43:09:a7:e6:13:
                    d5:96:5c:66:c9:a3:0b:15:20:43:c1:af:dc:c3:a3:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:C4:D6:4D:F6:FE:BA:4B:42:0D:82:28:1E:C2:81:5D:27:31:CF
            X509v3 Authority Key Identifier:
                keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:45:8a:4e:1d:fd:04:8f:ba:56:f9:6f:00:dd:a3:5b:fe:4c:
         e3:8a:68:51:7e:d5:1b:75:ef:ca:df:05:4c:af:2f:0c:7b:fa:
         cc:c6:b5:23:f1:9a:78:a0:dd:c5:60:33:83:c5:6b:de:58:eb:
         50:2a:bb:43:7d:e2:e8:1d:62:7d:cd:20:14:c4:f2:e7:d1:83:
         3c:33:f9:22:6b:90:94:9b:19:25:05:4b:a5:a9:8c:fa:42:0c:
         16:10:ca:32:b2:c8:7e:bc:4f:b2:80:b2:fa:ce:61:6e:f7:d6:
         61:ca:39:01:75:99:9e:65:1a:40:cc:2d:70:4c:51:84:f7:40:
         b8:e0:a5:60:8d:49:f5:da:b4:51:65:92:32:d0:3a:56:58:5e:
         4a:7f:eb:d8:9b:3b:b6:2a:62:a6:17:98:2c:ed:13:63:22:e1:
         37:74:59:81:50:0b:98:cb:c2:80:d0:f7:cb:15:e3:da:c9:99:
         f5:57:49:88:0c:c8:01:be:f1:1b:b9:d7:62:94:8e:8b:68:18:
         a2:4e:72:88:f4:d7:a3:47:5d:a0:4a:cd:8c:24:8f:3e:28:96:
         b6:31:12:d0:1a:e5:c6:19:17:f3:55:57:e0:58:1d:7f:28:98:
         50:e0:f3:74:f8:b7:3c:08:67:6d:28:76:2e:c6:3a:76:59:84:
         e6:92:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:44:31 2025 by rpki-client