Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
File:                     UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json)
Hash identifier:          lQH9ZdF2a2lyzMvCXYG8RgY3kNNvIeyOu1rm6XgSXjQ=
Subject key identifier:   3B:AD:89:69:07:F3:C0:C7:41:15:D5:9C:5F:58:71:DB:B2:35:32:FC
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Certificate issuer:       /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial:       0197684DED5A8CF8579860323E95DCF86588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
Manifest number:          1592
Signing time:             Fri 13 Jun 2025 08:00:26 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:26 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:26 +0000
Files and hashes:         1: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: p7TU6WfINCjJv6gTB/PKts+APsfikYRi/w7Wf9U6ix8=)
                          2: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (hash: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:ed:5a:8c:f8:57:98:60:32:3e:95:dc:f8:65:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
        Validity
            Not Before: Jun 13 08:00:26 2025 GMT
            Not After : Jun 14 08:00:26 2025 GMT
        Subject: CN=3bad896907f3c0c74115d59c5f5871dbb23532fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:ab:a8:b1:c9:a6:b7:50:ed:f6:31:0a:56:
                    a5:a2:05:4a:f8:95:a6:b6:72:37:77:03:f0:de:ae:
                    cf:36:a7:7e:64:15:03:14:ff:bb:45:82:67:30:40:
                    70:91:6c:96:2e:9e:14:6b:cb:92:30:d4:21:6f:92:
                    16:07:24:cc:ee:6f:32:6c:11:64:f2:d1:1e:47:ef:
                    b0:42:6a:84:c4:bd:f7:09:34:16:37:d1:e5:97:ba:
                    53:6a:dc:54:a6:f7:fc:e0:a3:61:fe:4b:79:a1:c6:
                    61:da:b8:22:7b:ac:76:ab:cd:c1:07:77:56:8c:cc:
                    9b:ad:7e:da:1a:fc:70:d4:10:27:3f:0b:21:3f:a8:
                    60:07:f9:44:41:7a:38:58:63:c4:67:e0:55:3c:e9:
                    a2:bd:92:68:55:d1:b1:4b:f6:42:e7:69:15:27:dd:
                    24:6b:68:59:da:4b:d7:7b:00:2c:69:55:14:fa:3d:
                    7b:de:7b:38:7b:35:8d:cf:ef:d8:0a:72:a1:6f:ba:
                    fe:93:18:af:6e:39:d0:50:3c:de:19:a3:d0:dd:6e:
                    f9:59:96:c6:75:ba:76:e8:03:65:55:4e:7c:c6:bf:
                    1f:e7:a7:96:48:f2:0c:13:67:60:cc:12:1e:62:b6:
                    8a:1b:8b:2e:cb:85:76:e3:e0:2d:90:af:ff:97:0b:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:89:69:07:F3:C0:C7:41:15:D5:9C:5F:58:71:DB:B2:35:32:FC
            X509v3 Authority Key Identifier:
                keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:1f:71:e1:5a:09:25:22:8f:29:d7:3c:d5:ab:59:7f:e6:
         3b:dc:9c:98:4d:f6:c7:c1:67:7f:ba:64:41:6b:75:f4:48:44:
         c9:fd:ff:7b:1e:75:41:f3:62:d8:ae:b4:b5:6e:91:8e:45:4f:
         02:9c:4a:02:c0:be:fb:0a:78:ee:e4:dd:00:72:79:28:68:a9:
         fa:df:ae:71:92:d4:b8:24:39:d1:2d:fb:1f:cf:a8:82:48:14:
         54:13:73:31:7b:07:cb:51:94:20:83:bf:8b:04:03:42:2c:65:
         e9:df:49:8d:c0:08:f5:d2:63:2f:06:e7:58:4e:87:a1:27:85:
         60:ed:a5:33:70:30:dd:8d:d9:45:1f:f9:10:bd:c5:f1:6c:92:
         bc:f3:51:e5:1a:50:40:2d:ae:9a:77:4c:43:12:e5:9b:5f:27:
         eb:2d:3e:5d:5a:6a:0e:5e:59:8a:3c:40:2d:79:02:da:3c:0f:
         55:46:ee:db:c1:91:ac:ae:ad:62:87:f5:4d:b0:f7:c6:db:0a:
         e8:a7:e1:13:72:ab:a6:f5:5f:89:56:3d:75:99:13:37:55:81:
         86:c4:8e:15:f5:75:cf:68:6a:88:6a:8a:08:d5:1c:dd:b7:fc:
         0f:b8:17:33:55:05:f2:ef:e2:3e:2f:a5:23:3a:71:8c:b4:6b:
         a1:85:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:26 2025 by rpki-client