Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File:                     uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier:          ttKUMBqq569DQDYoEbnehoFWbzhLvxUGAVDmHrURlik=
Subject key identifier:   D3:BB:74:1D:4D:82:DF:62:29:5E:F9:2C:F8:C4:EA:9D:3E:FD:14:0C
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer:       /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial:       01976C2B1961F9BD2E9A303F0BC5DD8FF575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number:          0D99
Signing time:             Sat 14 Jun 2025 02:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:53 +0000
Files and hashes:         1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
                          2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
                          3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
                          4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: qKvRMwRXa/ZW0zpocS94hiuYAOR66jJ1HcPYs+nXoIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:19:61:f9:bd:2e:9a:30:3f:0b:c5:dd:8f:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
        Validity
            Not Before: Jun 14 02:00:53 2025 GMT
            Not After : Jun 15 02:00:53 2025 GMT
        Subject: CN=d3bb741d4d82df62295ef92cf8c4ea9d3efd140c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:5b:b1:14:09:0c:04:35:7e:f7:4c:1a:9f:
                    01:de:02:bd:1e:b4:09:40:28:fe:d6:6f:3a:07:55:
                    f3:d2:79:fb:94:fe:6f:25:c3:60:97:7d:61:40:cc:
                    08:81:b3:7f:2a:47:15:38:8d:01:91:65:2e:d0:bd:
                    21:af:b9:c1:5c:77:09:5c:8e:4f:af:d6:ed:48:e3:
                    9d:6f:d7:e3:65:b5:2c:4d:7b:20:70:6b:b1:08:37:
                    cb:12:f5:6c:eb:1a:da:9d:ce:4b:7c:96:3b:a5:fa:
                    97:97:49:c6:46:c1:0a:e7:e1:6f:6b:41:f0:b6:39:
                    11:71:80:43:eb:e9:6f:3a:cf:0e:ec:c7:b8:42:6c:
                    ce:4c:b0:de:2e:f1:69:1a:4b:61:f0:93:68:1a:5d:
                    fe:20:4e:4a:ee:d7:5d:dd:b0:29:b8:4f:c9:d5:12:
                    ee:87:4f:52:9e:8b:00:82:55:13:43:9c:62:71:5b:
                    30:cd:e8:9f:56:93:aa:76:f9:10:92:3b:ea:f6:a3:
                    8b:d8:3d:9e:64:c3:6e:76:00:e0:d8:e9:74:8f:1b:
                    07:b0:0d:c2:55:5c:fe:ac:94:a4:0c:90:df:2c:40:
                    73:c3:f0:4f:3d:ad:27:0c:8f:23:2b:45:c5:16:ad:
                    bd:47:86:55:ec:47:c8:13:0f:e1:d6:cc:2f:98:12:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:74:1D:4D:82:DF:62:29:5E:F9:2C:F8:C4:EA:9D:3E:FD:14:0C
            X509v3 Authority Key Identifier:
                keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:8d:9c:f6:82:4e:8e:9b:3c:24:36:40:8b:be:98:07:7c:
         55:9c:db:c2:89:d0:77:56:e7:01:df:60:ff:6d:54:2d:cc:50:
         9b:a4:08:21:e3:1a:b8:9e:08:fe:b5:48:da:7d:ff:eb:e7:4c:
         d9:0c:1c:2d:47:bf:02:df:07:83:68:41:d2:ea:29:cc:c4:db:
         42:c9:0f:76:7e:66:cf:4f:0b:d4:0c:0f:2c:38:01:c8:1b:25:
         24:0f:77:e5:4c:c9:f7:c3:75:92:bc:f2:3e:70:76:35:be:d3:
         34:98:58:aa:d2:c2:0d:d4:35:55:37:c1:a9:f0:2a:1a:ea:ae:
         58:30:0b:36:85:01:bc:92:3b:56:6b:62:fd:32:3c:35:d0:7f:
         3a:7d:0e:91:34:a5:71:ea:8d:01:ac:9a:c7:35:81:80:90:4c:
         db:45:c5:f8:eb:a3:1f:16:20:14:15:88:e2:83:e2:4b:a6:e4:
         d6:05:3a:08:07:9e:3d:84:75:cc:a9:cb:16:38:66:73:1c:78:
         74:1e:b8:6e:61:e5:f7:e6:d9:30:52:29:e6:e7:43:f9:06:54:
         b1:2d:e4:a3:bf:c9:4d:d5:f9:c0:bf:d8:f4:0d:9d:47:38:98:
         cd:16:b3:57:ce:f2:d8:a2:3e:b9:f3:a1:70:3a:80:07:75:68:
         3d:d5:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:17 2025 by rpki-client