Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File:                     uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier:          UNkbyiUupPc9U1umluq31Y8zpCZQM5qaUHiJbp0kwA0=
Subject key identifier:   17:A9:60:2D:E4:BD:21:E6:63:09:AA:18:D6:BB:C3:52:2F:6F:FB:36
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer:       /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial:       01976F2CDFFD22C15AA8209C48631B766DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number:          153D
Signing time:             Sat 14 Jun 2025 16:01:41 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:41 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:41 +0000
Files and hashes:         1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
                          2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: h5HPNOLzfKsB3t10TO70lJPEyA1XOT1XXVTLBYIvX7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:df:fd:22:c1:5a:a8:20:9c:48:63:1b:76:6d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
        Validity
            Not Before: Jun 14 16:01:41 2025 GMT
            Not After : Jun 15 16:01:41 2025 GMT
        Subject: CN=17a9602de4bd21e66309aa18d6bbc3522f6ffb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:89:06:8a:b6:a8:92:fa:6c:48:a7:c2:55:
                    ba:15:4e:f6:5c:e0:30:f4:5a:ab:34:f7:fa:c8:e1:
                    7b:11:cd:53:de:34:e4:da:30:59:32:95:48:44:d7:
                    ad:6c:f4:2b:22:e5:09:eb:fe:39:cc:e5:c5:09:34:
                    44:4a:33:92:a5:03:4e:d6:1a:73:e1:66:8f:fc:75:
                    61:58:d2:42:9c:be:c9:46:d2:f3:fd:0a:23:a9:b5:
                    9c:4b:10:92:1b:a4:06:21:46:b3:31:4e:3a:c5:30:
                    7a:f1:44:3b:ba:53:07:59:a1:95:53:46:2e:12:7e:
                    78:ab:36:e8:7c:e9:c5:75:d3:ef:78:0f:16:6e:19:
                    ac:99:73:6d:c2:37:75:44:b1:ec:db:c5:7e:49:92:
                    02:f2:2c:63:e1:5a:d7:4e:b0:de:13:be:da:73:86:
                    d1:9a:51:8a:46:e5:69:7b:2e:62:b1:bf:e2:5f:59:
                    91:64:bc:91:4b:f3:90:59:c9:86:05:0d:a2:ce:48:
                    03:19:fe:25:d6:40:ed:34:3d:88:69:70:89:61:c9:
                    ab:84:c2:66:04:5e:0f:71:8a:c8:66:d6:ff:4e:29:
                    cd:11:a1:4b:2e:1f:b1:fb:ca:34:16:f1:56:70:60:
                    ac:4d:fd:86:9f:26:7f:e5:26:4a:2a:8b:15:89:71:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:60:2D:E4:BD:21:E6:63:09:AA:18:D6:BB:C3:52:2F:6F:FB:36
            X509v3 Authority Key Identifier:
                keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:35:92:34:2f:ee:0c:4e:e9:44:17:68:fd:4d:68:e4:f0:c0:
         fd:67:28:4a:a6:ca:a4:63:a7:bf:a6:ec:1a:0c:c2:dc:74:ec:
         cf:c5:dc:f2:5b:f8:e7:6f:37:95:41:38:c9:56:39:62:8e:e8:
         31:d2:40:09:9d:38:73:17:39:73:7a:91:f2:85:75:ce:21:51:
         f4:a7:59:34:47:a8:a5:63:fe:9d:fb:f1:7d:85:8a:ff:6a:a4:
         a7:ff:e7:5a:91:4d:d6:20:bd:d0:c8:d1:e6:b7:1b:87:bc:50:
         ba:8c:d3:35:5d:12:25:45:e2:cb:8f:8c:b8:ad:ef:fe:cb:d1:
         e7:4e:a2:01:24:2b:75:8b:7d:0e:60:d0:d7:b1:51:93:75:7d:
         ea:85:bc:c0:f7:c3:8d:f6:21:f6:d6:33:8a:ec:2f:39:9d:06:
         9c:34:c1:b4:9a:61:b7:6c:5b:f7:48:e0:0c:7d:66:d6:27:6f:
         ee:4c:e1:c4:2e:65:2c:34:7c:dc:ba:f3:eb:22:70:3c:89:72:
         18:e9:16:68:77:2c:ab:45:38:86:34:a0:0c:f0:f4:7d:f7:9e:
         2c:d1:c0:67:c5:6d:e5:56:19:94:44:65:03:80:8e:41:ea:3a:
         3f:66:63:df:a3:8c:97:32:ef:97:79:c4:6e:3d:ec:8a:a8:d4:
         37:93:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:10:31 2025 by rpki-client