Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File:                     uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier:          v8f+AKdapsOimjp2Hy59+VxrpHpZ0WXsz6L38zwpB9Q=
Subject key identifier:   1C:61:1C:F1:99:FE:B4:CB:B5:F4:3E:CF:AE:44:7F:1F:9E:47:00:CE
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer:       /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial:       019772642B289C7762032D2D3F6110CDBF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number:          0524
Signing time:             Sun 15 Jun 2025 07:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 07:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 07:00:56 +0000
Files and hashes:         1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: ru2D9avCXk8dpg1qyWKatPANjXV3wRT2lmeTP9tp108=)
                          2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:64:2b:28:9c:77:62:03:2d:2d:3f:61:10:cd:bf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
        Validity
            Not Before: Jun 15 07:00:56 2025 GMT
            Not After : Jun 16 07:00:56 2025 GMT
        Subject: CN=1c611cf199feb4cbb5f43ecfae447f1f9e4700ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:95:6a:b2:fa:72:84:97:c2:37:a4:e5:e7:
                    72:3b:36:26:96:9a:b4:58:d4:d8:5a:72:48:47:66:
                    44:30:57:29:23:ca:bf:8b:77:b6:00:5a:74:0b:5f:
                    10:29:05:29:d0:8e:9a:32:ae:ba:5a:e0:7a:1e:ca:
                    99:f3:fe:95:c9:74:3a:6a:ff:be:b1:5f:a1:62:d5:
                    83:ff:17:89:14:74:13:da:ca:3f:7f:c6:f8:d4:84:
                    b5:92:f2:a3:8e:7a:39:0c:71:45:a4:72:96:4f:df:
                    af:ae:81:57:06:16:a7:b3:a6:ec:39:42:df:02:12:
                    c0:07:43:bb:43:4b:54:86:a9:0b:4d:9f:a2:35:13:
                    1e:52:e9:12:c6:28:8c:a3:a2:70:19:65:a0:9e:3a:
                    90:af:be:f0:d1:63:46:18:64:91:e9:6c:96:85:11:
                    f5:e1:07:e1:e0:f0:3e:f9:ea:77:1e:f3:04:1c:7d:
                    ef:a3:81:93:07:df:97:e8:97:3f:0f:a5:d5:d4:99:
                    64:e2:9d:94:0d:4b:1e:5e:4c:81:de:39:66:6a:c0:
                    e4:ec:0c:c0:fe:30:17:77:c5:61:e2:16:0c:44:e6:
                    db:f0:57:12:4a:98:50:16:4c:a4:11:ad:0d:16:20:
                    58:ef:74:01:3a:32:eb:94:24:4c:91:41:74:b1:81:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:61:1C:F1:99:FE:B4:CB:B5:F4:3E:CF:AE:44:7F:1F:9E:47:00:CE
            X509v3 Authority Key Identifier:
                keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:f3:29:3e:f6:c7:da:6d:28:dc:3d:90:01:40:53:60:62:
         bd:5a:d9:5c:06:8f:b1:a1:e9:61:78:fa:12:33:84:02:46:02:
         3b:32:53:72:10:1d:76:93:53:07:69:5e:50:d7:61:48:e3:5a:
         24:8c:ee:02:83:4b:b0:39:07:1f:01:02:a9:3c:d3:54:d5:6c:
         e0:e2:0a:db:59:a7:04:ad:8e:6f:6f:10:6c:b2:ec:db:a4:4b:
         c7:6f:88:3b:08:ef:26:0f:6d:49:78:c5:13:ae:79:96:5c:c7:
         f5:bc:ae:d3:35:60:82:a2:ab:64:a4:3b:50:69:2f:f0:2c:4d:
         d7:8f:88:73:48:a4:84:08:2c:36:8e:05:22:d4:05:60:c4:50:
         29:2a:21:ff:e9:a1:b7:6c:fa:a5:6e:59:71:ab:e8:ea:3e:38:
         aa:85:f7:ee:92:a9:19:82:a8:84:2d:53:32:b2:d1:1d:f5:31:
         f2:8b:48:09:0c:10:85:d0:a0:20:28:48:61:b4:48:00:8e:85:
         20:1b:ab:ab:4f:a3:3c:f4:8c:2b:91:1e:0f:6d:b0:8d:bc:36:
         e6:0d:00:c6:e7:4d:de:32:58:b6:e8:14:db:4b:18:68:ef:2d:
         ee:ce:01:82:f1:30:09:c8:9f:7a:01:14:92:11:87:47:e2:51:
         04:04:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:49 2025 by rpki-client