Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File:                     uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier:          sHq1SGj9XtkmAp5n3IISCzCINmdHYRUikU8KlTKJjQw=
Subject key identifier:   6D:D5:A1:B6:68:D9:00:B3:A6:62:17:B7:09:D8:46:1A:18:BB:88:F7
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer:       /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial:       019780C46CC0CFB049D7D05B7623B1339786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number:          0CF4
Signing time:             Wed 18 Jun 2025 02:00:45 +0000
Manifest this update:     Wed 18 Jun 2025 02:00:45 +0000
Manifest next update:     Thu 19 Jun 2025 02:00:45 +0000
Files and hashes:         1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=)
                          2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: 2mBvClveOEkW+tRwgLaKWJoiZHWH5j+sikYJcSV21ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:c4:6c:c0:cf:b0:49:d7:d0:5b:76:23:b1:33:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
        Validity
            Not Before: Jun 18 02:00:45 2025 GMT
            Not After : Jun 19 02:00:45 2025 GMT
        Subject: CN=6dd5a1b668d900b3a66217b709d8461a18bb88f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:7a:59:54:ef:f8:40:8e:4d:7e:e1:27:46:
                    78:8f:f6:21:88:e1:e3:10:d4:a2:d6:33:3a:d3:5e:
                    b1:18:6c:ea:85:af:10:63:bd:76:f3:a7:3a:b4:7a:
                    f0:36:45:05:af:fc:99:45:e5:38:16:fe:07:17:60:
                    fa:cc:20:3e:35:66:12:6c:51:90:ae:5d:1e:45:20:
                    08:4b:f7:d5:de:57:f2:a6:dc:82:94:e1:02:cb:e0:
                    f3:1f:6c:4a:26:79:c3:73:16:bf:db:ea:1c:3c:f0:
                    34:fb:b5:26:82:a9:33:f0:35:7b:a2:33:fe:13:c4:
                    82:b9:18:b0:d5:17:6f:74:93:f1:ea:03:0d:0a:7a:
                    b0:af:34:34:bc:39:8f:a2:1b:8a:82:5b:bf:5a:9f:
                    92:95:51:a6:13:b8:10:f0:41:dd:39:f4:0e:e3:ba:
                    b2:5e:d3:a5:96:a5:68:ab:db:f0:36:76:c9:df:e0:
                    7c:ec:08:f8:f7:da:f9:8f:38:be:e8:45:8a:5d:09:
                    c7:c3:bc:24:ed:33:75:bc:fa:6a:4a:5f:58:fb:c7:
                    4d:ec:c4:b6:c8:5f:7e:ac:28:ba:96:f3:7d:50:be:
                    9d:e6:bd:61:9a:2b:cb:05:0c:e7:eb:39:78:46:9e:
                    32:1d:a0:12:19:2a:1f:0e:43:3b:8d:0f:35:f6:2c:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D5:A1:B6:68:D9:00:B3:A6:62:17:B7:09:D8:46:1A:18:BB:88:F7
            X509v3 Authority Key Identifier:
                keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:f0:fe:2e:8a:d9:8e:a7:62:d6:63:f6:fb:d4:5a:d4:b5:
         14:55:1d:58:39:e4:6c:c1:ae:a9:53:bf:66:ce:52:2a:30:14:
         98:40:d4:e9:32:c9:6b:52:06:3b:87:16:49:e3:4e:9a:8b:7e:
         d5:a4:0f:3f:41:27:c5:9f:c6:de:83:20:ef:e3:e8:ac:6c:08:
         92:ac:1c:81:e8:49:6b:65:e4:58:31:7f:82:3d:c9:b8:2a:f0:
         20:72:13:2e:4d:1c:50:a1:25:c5:5b:1d:a6:fe:76:f1:65:af:
         6d:2a:57:b8:f1:24:73:15:c1:cd:91:ff:ce:67:80:d0:fe:70:
         38:b6:13:d0:53:e1:a6:99:72:07:81:9e:dc:d7:c9:cf:cb:8a:
         17:da:df:30:b4:99:13:59:28:31:8a:98:f9:fe:3b:a1:7e:6a:
         44:63:92:09:e6:a3:74:4f:7d:10:2a:4a:57:71:e4:ab:95:5e:
         f9:47:ee:a3:0f:b3:b6:ab:f8:ce:f2:60:a4:19:ab:b8:a2:3c:
         89:8c:f1:67:77:c3:17:d6:63:23:ad:38:c7:2a:4b:ce:b9:fc:
         e8:d0:a1:9a:2d:d8:95:88:35:9c:ab:40:48:ab:02:1d:5f:72:
         c2:f7:cc:bf:72:f4:44:21:17:1d:0c:47:e0:b6:ce:17:c0:22:
         9d:9f:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:40:47 2025 by rpki-client