Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File:                     UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier:          8c2f0HIHKGIT5gRDw/RHOXfgjyTaXEOulDhTL08iK80=
Subject key identifier:   A7:86:AE:04:B0:E7:C3:E7:49:E2:61:D0:77:1A:2C:F5:8F:C0:81:90
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer:       /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial:       01976D7453A13EA57639E582CE4CFBBD12E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number:          0F2A
Signing time:             Sat 14 Jun 2025 08:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:29 +0000
Files and hashes:         1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: R0IHmqMpEJcU3qJYNnBuWFO1NrYg2xXEc+877yuBZWU=)
                          2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:53:a1:3e:a5:76:39:e5:82:ce:4c:fb:bd:12:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
        Validity
            Not Before: Jun 14 08:00:29 2025 GMT
            Not After : Jun 15 08:00:29 2025 GMT
        Subject: CN=a786ae04b0e7c3e749e261d0771a2cf58fc08190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:c7:09:c2:da:f7:88:67:4d:b2:a2:f6:19:
                    31:0d:a9:02:2d:92:45:90:50:a2:b6:6c:9c:ef:ba:
                    71:89:0e:a4:de:c0:87:67:d7:3d:fa:47:4f:64:65:
                    9a:b1:fa:d2:dc:0d:93:3f:24:2f:3f:db:fb:36:08:
                    67:30:93:36:2b:bd:7a:7f:8e:3c:44:80:55:76:d2:
                    64:25:d7:8b:8a:af:37:ca:a5:a9:e8:55:4d:76:1f:
                    50:12:6c:d9:08:52:4c:07:96:4b:fd:ed:36:e9:c7:
                    0f:35:3d:93:5d:c3:b0:95:7d:7c:3b:b5:39:fe:d1:
                    c2:78:68:f6:56:da:6b:05:86:80:f8:14:a8:dc:6a:
                    75:b2:63:0c:a5:f9:c0:d1:e7:d6:cf:ba:9b:a7:ce:
                    c2:c0:18:6f:a5:10:63:87:27:59:23:02:1d:2d:d2:
                    db:f4:3c:f5:5f:fc:91:25:f8:ba:fc:cd:47:ba:b7:
                    98:76:85:c7:5a:ac:16:36:36:bb:8d:c0:3c:6c:a5:
                    66:b0:67:c9:8a:9c:c9:b2:c8:21:91:bd:07:c0:6c:
                    59:d7:e9:b8:d2:f3:f9:39:f0:da:49:d7:be:97:66:
                    22:11:0d:87:61:04:43:51:b7:67:ce:89:1d:6f:3a:
                    ad:d7:53:94:ad:36:43:51:49:7c:bc:da:7b:e8:a3:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:AE:04:B0:E7:C3:E7:49:E2:61:D0:77:1A:2C:F5:8F:C0:81:90
            X509v3 Authority Key Identifier:
                keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:03:9a:92:6b:d8:7a:9a:e2:87:69:5a:48:5f:03:77:5c:b7:
         ba:fd:25:d3:49:35:5e:a1:3d:c7:18:ed:5e:f3:08:48:52:41:
         81:40:82:f7:87:51:86:7c:22:ed:43:28:0e:fc:97:27:21:80:
         93:a3:7d:63:66:3e:e4:76:3f:61:20:a4:a1:06:09:ca:97:20:
         2c:8f:a7:ff:48:09:7b:d4:ba:fc:6b:97:14:0a:c4:65:55:63:
         a2:b6:93:a9:45:3b:ea:df:f5:76:2b:9f:55:59:20:ae:a9:15:
         90:7f:43:58:f9:b5:4d:2f:e0:fe:38:e5:0d:59:96:1c:27:bc:
         67:ab:e3:52:75:16:c9:67:3f:4f:78:89:3b:bc:a9:ce:be:ef:
         16:54:43:e8:93:d0:df:89:bf:7b:3e:8e:5c:89:80:ef:ea:c6:
         7c:f5:19:e9:7e:a6:e5:a6:aa:b6:4b:5f:74:8d:85:90:34:7f:
         35:9c:6f:d9:c5:a6:5e:a7:73:a5:09:0d:ef:a9:51:f3:2b:9b:
         6f:aa:dd:f7:8c:a7:e3:86:a5:0c:10:61:65:9a:28:b9:02:bf:
         45:72:ee:39:00:65:67:29:dc:5c:c9:c4:96:5e:ae:a9:8c:a4:
         82:61:46:fc:a1:10:ac:0d:ca:d2:8f:13:85:a0:c9:f6:bb:8b:
         bd:ad:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:45 2025 by rpki-client