Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          +xOwoQs8uaVtXtYTqd/9qJ0hp8hNqfe9nq+RwQR/7kI=
Subject key identifier:   4B:1F:B1:6B:33:87:4E:F3:BC:BF:8D:D9:77:5C:0B:99:D1:97:E7:AE
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       0197722D3DA479B032CB571614705116FD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          04DD
Signing time:             Sun 15 Jun 2025 06:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:56 +0000
Files and hashes:         1: CtRLEvt809yNddQQC3-YdVEz8S0.roa (hash: iOnEw767paDA6G2cUVNf8J3Qp7lK0IUOS20QbdMgtb4=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: Y07hgmmRx4EvOloW6QP3QrKh5xAWjBhA1Y9PeOzhcGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:3d:a4:79:b0:32:cb:57:16:14:70:51:16:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Jun 15 06:00:56 2025 GMT
            Not After : Jun 16 06:00:56 2025 GMT
        Subject: CN=4b1fb16b33874ef3bcbf8dd9775c0b99d197e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ef:92:21:4f:1c:fa:58:a7:ce:7b:0b:4b:39:
                    79:92:ea:88:ae:0b:fb:b5:cf:e1:c0:b0:81:fd:f7:
                    23:6e:12:dc:13:33:a0:ed:88:3e:0e:78:4d:16:d2:
                    46:f7:15:2b:e8:e1:0d:e6:ec:8c:42:11:28:1e:c5:
                    df:9d:4a:f6:58:fd:9a:86:66:40:2b:a5:74:7d:de:
                    bd:ba:78:30:95:3a:2d:b5:92:ea:2d:86:9a:6c:69:
                    01:d2:ac:24:66:8d:be:d6:6f:c2:26:ea:32:ba:83:
                    68:a7:dc:96:4f:ce:69:87:d8:f2:55:b0:98:6d:eb:
                    fe:9a:16:47:c1:9e:db:7f:29:5c:98:e2:ec:39:42:
                    3e:77:2d:b2:ff:13:f2:07:08:19:d7:15:66:c1:96:
                    36:4b:4c:43:1a:71:95:09:33:9c:82:22:62:0b:b4:
                    af:88:2c:35:e0:f9:08:87:7f:84:5d:0c:d3:4c:81:
                    ea:71:88:80:fd:8e:d0:d9:56:20:98:1f:89:36:d7:
                    aa:92:14:9f:4d:7f:ec:d8:64:e5:a6:64:40:32:30:
                    b5:b1:65:98:3a:d6:45:1a:d1:bb:2e:f4:09:2e:ef:
                    77:53:84:36:ae:9c:70:82:28:f1:ce:0c:69:83:38:
                    f5:82:5b:19:ac:9a:2e:fe:f5:62:ce:a1:0f:17:4e:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1F:B1:6B:33:87:4E:F3:BC:BF:8D:D9:77:5C:0B:99:D1:97:E7:AE
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cb:ab:5a:99:c6:e0:e2:f0:17:92:5c:2e:01:7a:c6:eb:1c:
         ec:aa:14:2a:29:b9:da:98:d8:fa:9d:d7:8d:73:23:12:67:d0:
         19:fb:16:4c:e0:95:73:0e:de:66:88:c8:99:39:4f:7f:6d:bd:
         bd:8e:9d:25:c7:d1:62:19:a4:1c:b9:bf:f5:e5:f8:cb:57:cc:
         d9:ff:a2:a3:81:9f:07:41:90:55:ae:99:52:51:63:d1:1c:49:
         c5:e0:f7:f2:01:18:9e:62:5d:0f:7b:d1:48:c7:d3:b5:91:88:
         5c:ed:5d:28:b2:f7:6e:aa:cb:64:aa:d6:2c:d5:cd:e4:01:3d:
         45:f1:bf:88:6a:04:c4:a6:3e:b5:3e:4a:e9:f3:e5:dc:bb:a0:
         f5:9a:dd:f6:b4:a1:4c:9f:bd:9d:0a:06:26:4c:8c:c6:62:a5:
         b2:19:e1:18:26:fb:47:d8:7b:87:ec:1a:a9:2a:1e:cf:47:13:
         36:0f:1e:f5:c8:d1:0e:2d:d9:fe:0c:81:ec:e4:88:3f:e0:9a:
         d2:a0:22:92:b8:10:2d:c9:32:2a:31:f0:2c:a1:53:f8:66:fd:
         5f:93:0b:9c:2a:6d:78:fc:16:ce:70:47:49:12:fd:d7:64:c2:
         3f:6f:2e:75:44:bd:1f:d2:b2:83:f8:b6:11:45:3c:e6:07:c3:
         9d:e9:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:45 2025 by rpki-client