Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File:                     UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier:          QlZK61LQa+YtzIBqECDYh39a5/Xwlx6bFc8F/GFZ0D0=
Subject key identifier:   0A:13:D3:19:46:A3:A4:37:D6:D5:34:6F:F8:0D:6E:4B:21:E7:F1:3F
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer:       /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial:       019775D3023466A8177A10F9707D686CDEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number:          1523
Signing time:             Sun 15 Jun 2025 23:00:52 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:52 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:52 +0000
Files and hashes:         1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: 01w4aObel6/7phDirqCrrPaiSpztH2pRjzUH/gSkP1k=)
                          2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d3:02:34:66:a8:17:7a:10:f9:70:7d:68:6c:de:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
        Validity
            Not Before: Jun 15 23:00:52 2025 GMT
            Not After : Jun 16 23:00:52 2025 GMT
        Subject: CN=0a13d31946a3a437d6d5346ff80d6e4b21e7f13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:a4:06:d9:5a:d2:db:e7:79:56:82:fd:d6:
                    91:6c:b7:6f:66:f7:10:ec:4a:a0:75:52:d5:8c:3b:
                    ae:08:ec:32:46:f7:1e:41:11:d3:0f:f9:af:98:c5:
                    df:bc:a0:e4:f7:d3:43:3e:13:0d:5a:85:63:b4:77:
                    f4:09:75:a8:1d:6b:5e:1a:1b:94:e7:b3:06:ad:8b:
                    14:0a:5e:37:d8:c4:07:0c:3f:83:7f:b5:e3:f2:28:
                    91:ee:60:68:e9:7d:af:38:70:ef:87:92:a1:f5:d7:
                    90:8b:01:74:23:eb:63:f7:f5:da:68:59:a1:46:c4:
                    c4:19:27:bc:17:ba:8e:b0:59:a3:63:13:ee:18:42:
                    e0:a0:bf:4d:a1:52:44:e5:b6:dc:4d:b6:ac:ff:35:
                    01:50:9b:46:2c:11:43:d9:97:3e:0f:82:73:fb:68:
                    b3:fd:36:dd:ec:e7:e7:20:1e:e8:f4:f1:c1:8e:00:
                    9a:e6:8b:d1:49:06:e6:ad:94:18:56:ea:55:c3:7c:
                    f3:c2:5a:8f:d4:30:39:10:08:9e:b6:0a:b6:11:72:
                    b6:48:39:fc:dd:35:66:95:5c:5b:a6:a4:fe:e0:02:
                    8f:6e:ee:2d:3d:3b:7c:02:51:a1:b6:c3:f7:f9:c9:
                    c7:13:17:41:46:a4:f0:57:61:d3:57:fd:24:f9:8f:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:D3:19:46:A3:A4:37:D6:D5:34:6F:F8:0D:6E:4B:21:E7:F1:3F
            X509v3 Authority Key Identifier:
                keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:c1:fd:70:68:f8:ab:2e:d8:a3:56:eb:6a:28:6b:0d:13:
         69:84:8c:ef:4a:c7:12:1a:06:0f:b5:78:70:68:95:be:dd:d7:
         ef:cc:d3:bf:00:ad:f4:89:0f:36:95:d2:9a:e5:11:f0:1e:de:
         21:04:60:75:a9:60:6c:68:f3:7f:03:07:27:59:94:a6:cd:b2:
         50:cf:16:15:e4:93:49:89:59:fd:7e:e5:ce:b0:c5:83:cb:14:
         ab:86:e2:d5:fd:f2:fd:38:35:66:02:91:4a:d1:41:0c:6e:79:
         e6:80:87:fc:76:4b:83:9c:77:6c:f6:ee:20:45:24:42:0f:0e:
         a7:03:43:a7:1f:17:33:e4:37:58:dd:11:29:63:89:15:6d:9a:
         e5:47:2a:d8:23:46:e2:a8:e9:e3:fa:61:ff:42:d6:16:0a:18:
         97:2b:46:6a:15:f4:d3:2b:16:12:08:0c:9a:ab:f8:0d:16:1c:
         d2:79:98:a4:23:c8:9a:8f:55:27:3c:2a:99:84:ce:3b:40:ec:
         ec:cd:a6:55:28:9c:07:6b:55:eb:d0:d8:48:73:d9:cd:0e:34:
         e1:f4:39:5c:ff:67:e8:f3:f8:2d:36:2e:02:72:0d:b6:cd:0b:
         59:6f:69:7f:f6:bf:a3:db:9b:1c:33:67:14:ec:b2:e4:a0:4f:
         52:53:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:22:13 2025 by rpki-client