Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File:                     Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier:          whpQ1cHKizK3fnsNe2w91lKVN5+m0LQ46olV2Je8oyU=
Subject key identifier:   C9:70:66:B8:2E:E7:BC:26:CF:37:7E:8D:75:37:28:E5:70:70:E8:B3
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer:       /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial:       019771514160BD4E48A32F7F57BCF424F426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number:          0BFB
Signing time:             Sun 15 Jun 2025 02:00:39 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:39 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:39 +0000
Files and hashes:         1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
                          2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: EZsoGQK9fFx15OtEEwUHn9IT+xf49nTODVBWgsiDuqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:41:60:bd:4e:48:a3:2f:7f:57:bc:f4:24:f4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
        Validity
            Not Before: Jun 15 02:00:39 2025 GMT
            Not After : Jun 16 02:00:39 2025 GMT
        Subject: CN=c97066b82ee7bc26cf377e8d753728e57070e8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:57:b6:84:d4:53:53:c1:2e:7a:58:67:21:
                    35:3b:34:b8:7d:e3:78:c9:fd:ff:03:56:c3:51:a6:
                    a9:df:70:7f:29:d5:0a:a8:dc:08:d1:b4:4e:27:ef:
                    45:e1:f6:f1:89:3e:bb:3c:0e:36:44:61:9a:fc:bb:
                    99:f1:4d:aa:c3:f5:c2:f2:73:33:56:90:dc:de:c2:
                    3e:8f:56:de:47:93:e1:bc:d2:e9:bc:17:23:9d:ea:
                    7d:39:c7:b9:85:8e:07:d6:3e:30:61:8f:41:44:0f:
                    0f:68:de:04:60:2f:47:a8:83:09:c1:4d:fc:b1:7c:
                    4c:13:a4:f8:a1:7e:04:41:1f:d8:f9:78:e4:3e:b7:
                    24:4a:a4:5c:46:41:7e:d2:96:5c:45:bc:fd:43:33:
                    b6:10:69:00:3e:2a:60:21:c1:01:02:6e:7e:d1:85:
                    83:fc:ee:38:9c:6b:8e:a2:15:e4:0a:1c:df:ad:2a:
                    61:66:5d:fe:2b:d3:5c:9c:54:70:42:09:1e:80:cd:
                    07:2a:e5:7c:2f:fb:de:e8:b5:87:1e:91:2e:c6:91:
                    9b:32:80:2b:45:89:46:86:df:8d:14:c8:59:38:dc:
                    55:b1:58:a6:af:f2:7d:39:35:d1:7a:df:2a:23:ad:
                    ac:de:16:bf:8a:ff:a8:93:42:2c:c4:57:19:16:b4:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:70:66:B8:2E:E7:BC:26:CF:37:7E:8D:75:37:28:E5:70:70:E8:B3
            X509v3 Authority Key Identifier:
                keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:07:61:ca:05:be:ff:54:36:bc:cf:a6:e1:45:8f:86:f2:
         66:fa:c7:ac:14:f2:41:d2:b3:0b:6b:84:3c:f9:a1:df:44:83:
         f3:59:a8:72:e3:6c:2e:be:6d:be:db:f7:2c:b5:d2:91:23:62:
         fa:38:e1:22:fb:31:b4:d6:28:1e:be:b4:f9:ad:79:e3:05:4f:
         68:bf:10:9a:77:fb:c2:88:6f:e4:4c:70:39:8b:10:40:33:0b:
         30:52:bc:bc:f2:42:40:dc:24:6e:9d:89:da:e8:c3:bd:b8:27:
         db:df:db:99:da:d6:67:b5:dd:f2:91:9e:c8:e4:b2:e4:4b:e5:
         14:22:8a:ad:b6:36:c4:d9:d7:98:55:2b:8a:b0:2a:e4:9d:aa:
         b7:fa:7f:36:c0:da:d2:14:5d:eb:c8:2e:59:b6:27:bd:5b:93:
         d6:4a:a5:a3:ea:2e:4d:be:a8:49:5b:bf:46:84:b8:3a:27:6f:
         b2:36:8a:a4:46:d5:da:f4:3e:94:5e:89:94:b9:7f:66:d5:1c:
         8a:9a:1f:2e:d8:4b:65:be:fd:71:8e:47:27:37:65:99:45:d6:
         86:67:b8:5b:52:96:76:8b:f5:63:c1:56:47:1a:b9:e4:ee:00:
         b5:17:5b:ce:80:32:a9:28:c7:ec:01:75:ba:48:e4:36:22:60:
         70:6b:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:47 2025 by rpki-client