Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File:                     UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier:          6SzFz80jyoW31cc52ooEz8oaVFr/mCmLuJ8hy7Zg4AE=
Subject key identifier:   30:A3:DE:3D:C6:83:6B:82:D0:56:C2:55:A6:EE:15:0E:23:3D:CB:AF
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer:       /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial:       01976FD0BE916A7E9BAA799ADD3576B11EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number:          0DFA
Signing time:             Sat 14 Jun 2025 19:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:40 +0000
Files and hashes:         1: 1mN4TTVsQBMWz0jdNdzF9ia-Nrk.roa (hash: j77lZH/1fvCNPjqeRf7BLA0vb4Pw3UvnzVBQAcJctxA=)
                          2: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: 3l9A4VpyvUEzu/2xHZEuJgv6TG4HVJuBv0NkYRCUyTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:be:91:6a:7e:9b:aa:79:9a:dd:35:76:b1:1e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
        Validity
            Not Before: Jun 14 19:00:40 2025 GMT
            Not After : Jun 15 19:00:40 2025 GMT
        Subject: CN=30a3de3dc6836b82d056c255a6ee150e233dcbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:b7:08:81:cd:96:e5:ea:e3:54:42:e9:84:
                    f3:08:23:7c:cf:f1:84:79:63:c7:ef:b1:03:5b:bf:
                    08:f0:9c:1b:c3:c4:eb:11:a2:6c:fc:69:a2:07:af:
                    20:91:76:05:60:a7:82:cb:34:9a:08:73:7b:e8:e8:
                    c6:74:f5:28:75:a9:5a:45:eb:06:ec:d4:b3:a1:f1:
                    59:df:68:9a:4d:68:6b:01:ae:d0:48:a0:1b:e7:05:
                    5d:fe:fe:9f:60:ae:60:ba:58:d4:da:03:e2:19:66:
                    44:c6:32:37:a8:77:3a:68:e8:78:91:c9:04:e6:35:
                    1b:7b:3d:50:ea:35:94:8a:40:5c:85:4e:6f:86:89:
                    f3:70:0b:76:8a:ad:6c:de:72:5c:12:3c:31:b8:1f:
                    65:8e:1d:12:28:58:10:fa:c1:72:00:84:44:ee:1b:
                    9e:78:b7:7a:eb:7d:d2:40:d2:7a:9f:7a:a2:0f:e7:
                    72:73:49:45:2c:5c:09:f6:e2:1a:4e:3e:1d:1d:b6:
                    ef:e5:05:75:37:7d:9a:51:46:91:de:30:bd:97:ee:
                    9f:70:f7:c9:9e:44:8a:57:d8:54:9b:24:5f:6e:95:
                    c3:ab:e5:ff:d6:ca:fb:5b:7b:3b:12:6b:10:61:0b:
                    2f:25:71:0a:66:94:2a:d2:74:28:43:4d:b9:c6:3c:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A3:DE:3D:C6:83:6B:82:D0:56:C2:55:A6:EE:15:0E:23:3D:CB:AF
            X509v3 Authority Key Identifier:
                keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:b3:74:21:9d:4a:d0:b9:d6:5d:de:86:20:31:1d:db:53:
         1e:39:94:90:53:da:5a:82:db:f7:4d:ea:d8:cf:31:70:dc:a5:
         48:d8:b2:03:f0:da:87:26:90:1f:5f:19:f5:8d:74:3f:3f:7e:
         84:84:0c:c1:67:27:cc:57:a2:4b:92:f5:ae:bb:c6:9f:63:d9:
         ac:ff:8e:5f:cd:80:93:f9:57:16:91:2a:a1:06:66:16:a0:f8:
         eb:69:bf:d0:61:bc:75:fd:6c:ee:53:be:0f:a0:b8:99:d4:47:
         83:ae:74:eb:05:ca:ae:35:07:dd:23:90:72:8f:9a:02:a4:1b:
         da:c2:d1:bc:11:38:fd:51:d9:87:4e:b7:51:b7:0c:54:7a:7c:
         ed:3a:3b:ff:92:db:19:fe:ee:83:0e:04:e3:6f:21:f4:46:00:
         9c:81:e1:39:f8:3d:7a:41:cc:14:e3:f7:a1:30:0d:47:02:96:
         d6:12:e9:28:bc:9c:7b:4b:eb:31:29:31:d3:10:40:af:12:33:
         45:16:a0:21:b6:2b:56:7d:cf:ae:8a:48:6d:fd:2b:57:51:40:
         67:df:85:d4:ed:d1:17:12:ad:cf:ba:47:46:14:a2:82:2d:d3:
         68:bd:2a:44:b0:bd:f1:72:97:23:d4:38:1a:2c:84:90:dc:d4:
         74:d1:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:53 2025 by rpki-client