Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File:                     k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier:          iwhtKqNhpd3h4VCyHXCGFgFpk9HdFqa1A+rA7aS8Z6Y=
Subject key identifier:   A5:B1:EF:30:1D:52:BF:CC:F3:05:07:AD:B5:47:23:8F:36:43:CC:66
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer:       /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial:       01977FE971D35F5B3596A0959B13022930F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number:          1599
Signing time:             Tue 17 Jun 2025 22:01:34 +0000
Manifest this update:     Tue 17 Jun 2025 22:01:34 +0000
Manifest next update:     Wed 18 Jun 2025 22:01:34 +0000
Files and hashes:         1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: KF7wH5yGjqBumrQMe5b5+kjTTj+nK/jbHD0iBIy+tfM=)
                          2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:e9:71:d3:5f:5b:35:96:a0:95:9b:13:02:29:30:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
        Validity
            Not Before: Jun 17 22:01:34 2025 GMT
            Not After : Jun 18 22:01:34 2025 GMT
        Subject: CN=a5b1ef301d52bfccf30507adb547238f3643cc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:45:cc:3f:a3:5d:eb:24:e2:8e:9f:40:7e:
                    0e:da:79:9d:0a:1f:a7:ce:59:bb:c5:55:62:09:23:
                    3d:f0:65:9a:6f:35:d2:df:d7:ac:97:4b:15:c1:ca:
                    8b:2a:9c:18:95:0b:60:cc:c9:47:e6:37:52:d8:ea:
                    1f:8f:02:a3:5e:bd:46:1e:9b:7d:2e:56:ba:bc:b8:
                    9b:12:39:66:8b:f9:a5:8f:e4:75:e7:b4:b3:06:06:
                    50:19:9a:69:81:d0:21:09:80:da:3b:f2:19:96:7d:
                    61:a0:59:b5:72:f3:f7:15:5c:12:38:cd:65:ee:88:
                    8a:6f:bf:c4:07:8e:c2:86:ff:b2:78:be:92:e5:f2:
                    75:1d:31:56:a0:4f:c0:55:fb:cf:4a:f2:8c:99:1d:
                    a0:10:3f:7a:b8:fb:87:3a:e3:0c:14:f2:0d:5b:f1:
                    27:42:cf:ea:4b:e2:0b:99:4c:f9:2c:a4:14:2b:ac:
                    a8:91:bf:0f:f7:b8:d1:85:8b:f8:13:e8:d3:7d:0f:
                    9c:26:46:74:e9:1d:b0:23:9b:67:b3:ff:fd:bc:a6:
                    9f:b7:a4:60:db:ab:2f:a5:41:4c:82:a1:1a:97:b7:
                    8a:54:ef:aa:d0:48:cf:a8:bd:22:45:cd:8b:d1:5e:
                    d1:90:08:0c:bd:f9:6c:75:b3:e3:8f:cb:b3:71:c8:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:EF:30:1D:52:BF:CC:F3:05:07:AD:B5:47:23:8F:36:43:CC:66
            X509v3 Authority Key Identifier:
                keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:53:32:df:47:77:0c:28:1a:b2:34:9c:44:3d:63:7f:b6:
         6d:51:65:e5:8e:6a:51:f8:11:62:16:76:e1:26:0e:75:b4:e6:
         97:6d:cd:ce:d4:7d:5b:d3:3b:f7:7d:12:cb:c4:23:91:51:43:
         ee:6e:67:82:ac:34:11:1b:bd:36:f7:dc:45:ab:f4:16:20:f1:
         ac:9c:bf:4e:6b:b6:64:b5:b2:63:25:de:ef:b7:1a:d0:ef:82:
         70:ab:4a:b0:ac:17:c8:1d:ea:84:0b:ca:de:7c:51:b7:e9:24:
         a4:42:ac:90:80:ab:73:0f:57:87:e2:a7:95:e4:80:8e:10:0e:
         91:73:65:ed:a1:71:53:ee:9d:f0:76:03:08:0e:2e:36:ec:6a:
         cd:4e:63:43:e4:12:6f:a2:e8:28:33:a9:c4:28:e4:44:8b:b2:
         f5:09:5f:f2:42:0b:b1:80:16:1b:9d:7b:39:53:c9:b9:03:4d:
         15:70:6b:16:52:2e:b9:d6:a3:a5:19:2f:f4:a0:31:e1:3d:d8:
         07:49:f3:aa:b7:2f:10:60:d0:4d:3e:5d:51:e6:99:33:19:da:
         42:c8:3c:78:5c:2c:35:53:09:cf:bb:10:73:96:18:4d:87:b7:
         80:01:d3:99:31:a6:f5:53:ec:a6:ef:31:10:ae:7e:3e:5f:1f:
         1b:a3:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:45:34 2025 by rpki-client