Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File:                     UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier:          NuPLHSFyRj3IyzAlvsGRnhnBiVsX/Ic/zvMj5Gt0lfM=
Subject key identifier:   53:B5:6E:01:1B:F7:78:90:D3:56:BF:23:C9:7B:CA:48:12:18:25:DB
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer:       /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial:       01976C6201739F4DDC34CC182BC67F4BFDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number:          136B
Signing time:             Sat 14 Jun 2025 03:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:51 +0000
Files and hashes:         1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
                          2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: 5FtarmygcYLaLw3leZueKGPjUZioJ9yipXTZHVA3TcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:01:73:9f:4d:dc:34:cc:18:2b:c6:7f:4b:fd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Validity
            Not Before: Jun 14 03:00:51 2025 GMT
            Not After : Jun 15 03:00:51 2025 GMT
        Subject: CN=53b56e011bf77890d356bf23c97bca48121825db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:d4:ac:32:9c:3c:14:d2:83:cb:b0:43:1d:
                    c8:e9:8e:13:cb:f7:76:c8:5d:0c:37:b3:2d:c2:99:
                    77:75:29:bd:0a:95:f4:28:ce:0e:48:76:2b:fd:ef:
                    85:a3:77:ae:88:56:2b:5c:02:a5:24:66:a9:77:78:
                    42:ed:5b:ce:a8:bd:06:25:bb:8d:c1:ab:0d:21:a1:
                    55:80:8d:f0:14:b7:ca:77:f3:12:12:89:a7:2a:7c:
                    62:c6:96:dc:13:a5:55:07:46:8b:9d:3b:cd:10:85:
                    86:ba:87:b4:a4:69:82:bb:ae:d8:f4:ee:54:57:f6:
                    e0:bd:6c:fb:ad:0d:7d:83:4c:1f:e8:a2:21:b5:dd:
                    63:b9:07:39:cf:c4:c7:e9:07:78:50:13:72:a3:df:
                    63:33:57:fd:25:e3:14:26:94:29:db:7d:ab:be:e0:
                    32:e2:d3:83:0d:10:cb:6c:f2:0b:c9:f2:89:6b:36:
                    0b:b6:3d:5f:a5:e5:33:69:54:26:96:9d:73:48:68:
                    d2:fd:54:1c:27:20:a0:04:f6:d0:60:e3:fe:83:00:
                    36:26:b9:d6:c4:0d:a7:7a:e1:57:f4:87:4a:10:49:
                    f7:62:1f:16:88:03:9d:fd:eb:f2:1e:55:de:b2:1e:
                    8b:b2:ca:4f:36:e4:7a:2c:41:97:16:3a:1c:86:bb:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B5:6E:01:1B:F7:78:90:D3:56:BF:23:C9:7B:CA:48:12:18:25:DB
            X509v3 Authority Key Identifier:
                keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:a5:89:d8:98:30:30:7a:73:f4:18:a1:b7:98:25:ff:42:
         f6:12:d9:a8:80:7d:3e:80:e9:e2:71:bf:df:41:a3:4e:88:22:
         cd:73:bf:4f:7d:19:5f:87:4d:3b:35:13:79:b6:1c:f9:36:7c:
         7c:3a:73:6c:23:0f:11:67:35:c2:68:d6:d4:22:34:d6:e2:eb:
         91:ab:89:89:d9:99:fe:f2:af:e2:79:2a:9b:18:47:39:6f:e9:
         4a:39:79:3d:a1:1b:3f:a3:b0:6e:5f:bb:ad:4f:05:83:13:f2:
         c2:17:0d:b8:5f:8f:d2:39:5b:07:38:ec:e7:3c:e1:13:09:66:
         bd:50:c7:e0:d4:56:a2:cd:68:66:23:ca:9d:8b:0e:87:95:e5:
         41:20:d9:ae:fd:16:89:ba:5a:d4:9d:bf:b1:55:97:96:b2:2a:
         81:00:f0:36:9f:79:75:b5:a3:29:11:1f:a0:7d:84:42:46:38:
         91:83:55:10:ef:16:7b:f1:20:17:aa:1c:01:62:7b:66:6e:ae:
         cf:2e:18:2f:40:43:40:e7:b2:7f:00:81:ed:a8:5c:58:da:4d:
         a0:b3:0c:b3:73:37:d7:2e:3e:4a:06:d7:a6:df:d9:24:40:a9:
         c7:67:34:40:8e:38:fe:23:ed:92:c0:00:0a:e7:54:fc:20:a9:
         5e:42:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:27:35 2025 by rpki-client