Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File:                     uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier:          TbvtrQ0rU1Vim9leAURmTxZ2ZYkVreglt6bizgGdd28=
Subject key identifier:   6E:D1:D3:84:CD:2F:61:4E:1D:64:BE:2D:43:71:73:89:80:F5:20:F3
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer:       /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial:       0197819FF83FAFFA50C46D01FA48C2BBAE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number:          14C1
Signing time:             Wed 18 Jun 2025 06:00:33 +0000
Manifest this update:     Wed 18 Jun 2025 06:00:33 +0000
Manifest next update:     Thu 19 Jun 2025 06:00:33 +0000
Files and hashes:         1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: UN3qFRxKlrvT8ueGkyE2Am7flT94abLcRZtI6fEeaq8=)
                          2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:9f:f8:3f:af:fa:50:c4:6d:01:fa:48:c2:bb:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
        Validity
            Not Before: Jun 18 06:00:33 2025 GMT
            Not After : Jun 19 06:00:33 2025 GMT
        Subject: CN=6ed1d384cd2f614e1d64be2d4371738980f520f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:28:08:60:57:3d:35:52:7c:f3:73:d4:c8:
                    d2:3f:99:14:dd:fe:f6:98:4d:b1:97:1a:90:67:e4:
                    48:c2:bd:f1:84:66:09:b5:4d:2a:98:87:0c:ee:2a:
                    80:90:13:53:4e:42:60:54:33:e8:6a:89:29:77:6a:
                    61:e6:9a:39:0c:81:56:84:5d:ec:69:57:b8:5f:bf:
                    8c:42:1e:19:81:9d:a9:cc:00:7b:01:f0:3c:a1:1e:
                    67:8b:3a:a5:b4:51:54:84:c2:43:a5:8e:1d:c9:43:
                    c4:b8:f9:e5:1e:a2:4e:6e:e0:f5:1c:ef:b0:cf:eb:
                    0d:ea:94:1e:1e:b3:79:21:ee:94:c4:31:3f:c3:6b:
                    f2:f4:36:34:11:2e:6d:02:18:f5:c6:87:03:bd:18:
                    99:ee:8d:74:5a:ff:4e:d1:f5:40:e2:3e:08:02:6f:
                    85:24:66:65:c1:96:10:14:5d:ab:8b:78:de:db:a0:
                    c9:f2:d7:25:fe:6e:a7:10:9f:76:c4:1d:36:f8:bc:
                    ba:76:86:ee:86:31:c1:79:f6:68:c3:e8:a6:8c:d5:
                    82:08:9e:02:72:7c:15:e6:0a:b7:08:07:bf:04:8f:
                    25:ea:94:eb:4b:4e:4f:a4:26:9c:90:3f:3f:cd:cd:
                    17:fb:fa:ed:c0:a7:d2:c2:20:4f:0d:77:bc:bb:45:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D1:D3:84:CD:2F:61:4E:1D:64:BE:2D:43:71:73:89:80:F5:20:F3
            X509v3 Authority Key Identifier:
                keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:d9:73:cf:b0:18:eb:50:23:cf:e6:e8:00:ee:f9:6c:e1:
         34:3e:e7:18:3a:3b:20:5e:91:9b:5c:b8:fe:21:1d:34:05:bb:
         89:16:e3:df:c7:9b:bf:e1:a0:39:80:ca:7a:db:6e:67:66:63:
         b0:c5:b8:89:d8:09:e5:65:97:32:22:4a:e0:a3:8d:7d:42:54:
         df:e2:e0:88:38:a2:a8:85:de:5b:32:6d:3b:8e:91:6a:f9:d0:
         83:4f:b2:b5:3d:90:c3:ab:ea:15:0d:e7:9f:c9:f3:cf:9b:ac:
         0b:ad:60:9b:ee:09:30:d6:fd:c2:64:c0:45:b1:57:32:5d:9f:
         e0:80:49:a7:bc:77:5b:12:ae:7b:60:14:15:6c:3c:ae:00:16:
         2a:4c:b2:01:6e:ce:dc:a4:d2:2b:4e:ec:17:eb:48:55:49:b7:
         a2:3e:e1:fd:91:a9:95:ec:75:0e:3a:05:7f:c2:de:b7:7b:91:
         55:c1:da:46:7f:87:57:83:bb:64:32:fa:c7:b2:ee:fd:5f:ee:
         ee:f9:29:99:16:8d:e3:7f:4f:c0:f6:a9:16:ba:78:51:fc:71:
         6f:fa:93:a2:a5:ce:fe:c2:a5:b0:41:45:ce:36:cb:ba:85:2c:
         17:72:96:e1:eb:7d:f7:00:b3:75:1b:0b:c3:91:f6:0a:4e:db:
         24:0a:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:40:14 2025 by rpki-client