Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File:                     uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier:          XSv5ldnafLQJawQxNYQIUnIH2vKSrqA2nj+nzmvKJeg=
Subject key identifier:   A6:D9:99:26:2D:2E:DB:83:D8:5C:1B:E4:AE:D3:90:7C:1A:98:43:83
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer:       /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial:       01977F0D5A7E2A12A38EDA503AEC98A44474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number:          0AE2
Signing time:             Tue 17 Jun 2025 18:01:10 +0000
Manifest this update:     Tue 17 Jun 2025 18:01:10 +0000
Manifest next update:     Wed 18 Jun 2025 18:01:10 +0000
Files and hashes:         1: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (hash: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=)
                          2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: JUe/5DWTKM1S8mBSX0mehR/iDIeElouKBRaCWOT70rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:0d:5a:7e:2a:12:a3:8e:da:50:3a:ec:98:a4:44:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
        Validity
            Not Before: Jun 17 18:01:10 2025 GMT
            Not After : Jun 18 18:01:10 2025 GMT
        Subject: CN=a6d999262d2edb83d85c1be4aed3907c1a984383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:50:cc:4c:62:7b:03:6e:e2:e5:89:4d:cd:
                    7a:48:a4:4b:ac:fc:f5:00:8c:a4:e8:37:fd:04:3e:
                    23:66:86:30:17:67:04:10:d7:e5:8e:cc:66:84:f7:
                    ed:94:d2:a6:49:52:14:b9:9a:d3:1f:5f:1d:e2:0e:
                    e8:9c:51:f6:9c:b9:8b:5a:c7:95:0c:49:ef:ce:a4:
                    e9:a5:7e:c9:d0:dc:6d:54:47:2e:0a:ff:f1:a3:52:
                    21:0a:fe:c8:ef:88:da:f7:ea:2c:e8:dd:d1:f4:19:
                    ca:d5:01:29:fb:c1:50:2e:69:45:34:54:14:de:68:
                    78:30:90:20:af:22:0a:13:02:f3:9d:75:58:62:d3:
                    7b:a2:01:7a:19:78:66:61:4b:0a:c1:56:15:3e:e5:
                    41:e9:d7:51:88:4f:fd:24:b1:33:1a:06:0b:43:af:
                    70:7e:70:db:fc:54:0d:d7:3a:42:7c:0c:61:20:47:
                    dd:4a:fc:11:91:22:71:80:6e:09:97:1c:63:a8:c0:
                    e3:81:21:15:76:e6:a8:fc:5a:9d:84:20:5a:d3:9e:
                    8e:6a:3c:3f:3b:9a:f3:47:58:a7:3e:4b:cb:d3:52:
                    d5:c6:4b:af:fc:a3:8d:f7:cf:b6:3d:22:f2:f2:4d:
                    a2:5f:53:f8:68:87:c5:c2:eb:2e:01:b6:c6:72:f2:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D9:99:26:2D:2E:DB:83:D8:5C:1B:E4:AE:D3:90:7C:1A:98:43:83
            X509v3 Authority Key Identifier:
                keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:71:33:5f:62:6b:a4:a1:a3:ca:38:02:27:54:44:8a:41:
         af:cc:f6:d7:5b:9c:9e:21:34:a5:7d:e3:ed:57:ab:d9:0c:dc:
         19:1b:4c:07:6c:d7:bb:fd:fc:d2:38:74:b2:1d:b0:bb:90:8b:
         e4:41:63:f7:08:3f:f8:33:dd:9e:09:cb:01:40:1b:f7:67:b6:
         53:45:2b:62:72:b3:4c:6c:be:4e:f3:9c:39:db:bd:8e:d6:82:
         d1:4d:ed:a5:55:57:84:c2:9f:66:d5:8d:2c:be:22:27:d5:df:
         86:99:42:34:58:24:bb:4b:55:10:56:e1:c6:64:dd:9f:2d:4f:
         af:2c:38:c7:ed:67:7c:51:20:a9:78:d5:23:4f:7f:c2:fe:77:
         94:9c:b7:9d:46:b9:8c:dc:ca:98:22:9f:c7:fc:a4:02:9e:10:
         1e:88:63:d9:f3:a4:f9:9b:4e:ae:70:b5:78:4a:8f:4f:d1:4f:
         80:42:fd:cf:5c:6d:54:da:15:c3:98:a7:e7:a7:26:ac:b4:9a:
         da:37:9d:43:8f:8e:a1:56:2d:aa:1a:f8:6a:f5:37:87:6a:7e:
         0e:1d:35:57:c9:3a:45:83:cf:c0:ae:9f:e9:42:b7:de:3c:21:
         02:e1:4a:9e:a0:78:7d:c9:ed:42:f1:c3:0c:f1:2c:2a:20:e1:
         89:fc:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:48:06 2025 by rpki-client