Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File:                     UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier:          h1Dw9tkanr6brVQVml0ivsgpW+G2j0MtjmHXsuxtdRo=
Subject key identifier:   01:38:F5:32:DD:DC:A5:0B:B9:B1:E3:F1:A7:B6:64:D1:30:92:CF:AC
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer:       /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial:       01976997CE51C1DA9C3ECF75BA9CB8526038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number:          132F
Signing time:             Fri 13 Jun 2025 14:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:45 +0000
Files and hashes:         1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: NiS/8VyYUmMB7kKrAKlAbBAR3/fF3Hh8VDNJ884SA5c=)
                          2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:ce:51:c1:da:9c:3e:cf:75:ba:9c:b8:52:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
        Validity
            Not Before: Jun 13 14:00:45 2025 GMT
            Not After : Jun 14 14:00:45 2025 GMT
        Subject: CN=0138f532dddca50bb9b1e3f1a7b664d13092cfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:58:56:9d:f8:13:02:ae:e5:5f:b2:53:19:
                    a0:98:d8:4f:b5:cd:30:dd:b3:fd:2f:5f:2c:7d:d7:
                    46:04:45:14:ae:77:3a:28:0d:52:cd:b6:70:50:d8:
                    20:a1:fd:a5:71:0f:fd:b0:92:f8:22:c9:be:8c:59:
                    49:19:d7:98:4c:19:4f:b2:f9:e6:c1:29:f2:e8:fd:
                    f0:75:9f:33:bd:d6:1b:95:3f:bc:ed:5f:c7:3f:a0:
                    1d:d0:35:e0:cb:e8:9d:4e:56:55:20:12:55:41:1f:
                    0c:e8:f7:e8:17:74:e8:3c:3f:05:d7:11:32:6f:f4:
                    5f:d8:5c:4a:10:6d:a9:33:9e:6a:44:aa:10:d4:60:
                    fb:c4:06:0f:8f:04:45:47:c8:16:42:40:2e:8b:88:
                    32:b7:24:2a:1b:7d:98:22:9b:db:86:18:ae:28:65:
                    ca:59:ff:ff:09:94:ea:3a:ff:5e:d2:2c:e5:9e:a1:
                    ae:ba:76:ea:fa:d6:c7:dc:8d:42:eb:74:03:3e:e5:
                    9a:80:1d:2d:03:9f:98:4c:ee:fd:43:82:1e:5c:cf:
                    4e:b1:1c:48:c4:3b:75:e6:b5:6f:81:e2:9e:7f:96:
                    a5:1e:1d:ba:6b:90:a9:b8:79:0f:c0:97:b2:9a:4e:
                    0b:d5:c0:52:94:83:11:5f:d7:c4:c8:6b:e9:ae:8a:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:F5:32:DD:DC:A5:0B:B9:B1:E3:F1:A7:B6:64:D1:30:92:CF:AC
            X509v3 Authority Key Identifier:
                keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:02:12:69:07:60:df:10:51:38:2b:ca:7c:59:f1:ab:1b:a4:
         44:c4:19:fa:35:f3:e9:33:fe:73:0b:92:2d:b5:8b:de:ff:13:
         bd:34:59:45:03:73:4e:0e:5e:88:fc:28:21:67:6b:c3:0f:c1:
         6e:20:10:de:db:1a:96:b8:38:74:e4:8e:85:09:f7:19:b9:94:
         de:b0:f7:b8:4c:68:a2:bd:46:24:9c:a1:0a:c0:83:d1:38:6b:
         ba:51:fc:78:35:b0:0a:5d:8f:2a:a5:98:58:33:eb:a5:25:47:
         66:e5:8a:e4:94:d8:65:aa:e2:91:ec:68:33:ea:57:4a:98:c9:
         5c:63:09:dc:3c:7d:53:a7:13:0d:f1:e4:7f:25:d7:b1:8c:76:
         8e:2e:a0:85:ae:75:d3:28:1e:18:8c:7c:97:8f:72:ac:f6:6e:
         b4:08:17:a0:1c:c1:62:e5:b5:bd:f3:e7:c7:6c:60:bf:94:6d:
         3a:1d:05:59:7b:e0:38:c6:18:d5:fe:e6:74:fc:74:e8:a7:50:
         f6:e4:97:85:b6:5c:4b:3c:eb:87:73:53:09:93:3d:ad:6b:b0:
         9a:50:78:28:b3:0d:da:fc:f3:18:1f:d6:01:50:c5:c2:bf:76:
         41:38:2e:62:98:95:9f:65:14:38:d6:db:22:df:94:bd:06:90:
         a9:45:4d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:25 2025 by rpki-client