Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File:                     Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier:          lHYztwErs1pJ6NgZBey2ZFJGlMYydcPEKqsFws8Y1zg=
Subject key identifier:   9E:AC:DA:75:F5:BD:38:53:7E:42:57:BC:BE:2D:D2:27:6C:38:30:FE
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer:       /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial:       01968391D6ABE81C001E8C867A740CA1E610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number:          06CF
Signing time:             Tue 29 Apr 2025 22:01:35 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:35 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:35 +0000
Files and hashes:         1: Jwm-Y1gLbkw4UaAdwxRZjNwmTZo.roa (hash: Q969PgNrXLr8Br8ONSHHTQG/i49jEw6PhYCVXnskszU=)
                          2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: 8D/7a86AOcDAhBy/6ztuCvVuIzObvDsdk1MbrBHePec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:d6:ab:e8:1c:00:1e:8c:86:7a:74:0c:a1:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
        Validity
            Not Before: Apr 29 22:01:35 2025 GMT
            Not After : Apr 30 22:01:35 2025 GMT
        Subject: CN=9eacda75f5bd38537e4257bcbe2dd2276c3830fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:92:88:31:73:98:f2:77:66:9d:42:1e:9f:
                    e0:c4:0f:f5:43:ac:5c:53:2b:b6:94:bb:d4:3d:3b:
                    ef:da:07:49:c5:5a:85:f8:bb:43:de:8d:45:72:f5:
                    06:3d:57:a7:81:7a:90:76:e6:6f:ec:ec:35:6b:d4:
                    9c:8d:4f:f7:04:59:35:42:50:a7:8e:9b:53:d9:99:
                    33:38:0e:67:f6:5d:40:cb:42:e3:86:88:a6:17:91:
                    a2:6a:41:5b:92:94:1e:3c:c2:86:82:5f:38:3d:ef:
                    b6:9e:de:8d:e4:77:46:d2:9e:ca:d3:f6:12:aa:07:
                    40:9e:8e:fb:8f:5a:be:27:d1:ba:a4:f0:21:0b:2b:
                    b9:a0:6a:a7:7a:79:99:f9:dc:37:cf:47:e7:01:5c:
                    17:51:1f:67:91:56:a3:9a:8e:aa:44:68:8e:a9:b3:
                    ae:33:92:5e:e7:c1:bd:ce:eb:15:15:97:02:99:ed:
                    7e:44:70:4b:57:30:90:d9:ef:f9:87:9a:45:12:18:
                    31:45:da:41:20:e7:ef:21:bd:88:52:a6:6f:08:9e:
                    40:67:2c:70:fa:22:64:82:8b:66:88:7b:5d:5e:31:
                    d2:6b:6a:5a:53:94:99:74:f8:67:ec:d3:d0:7c:3d:
                    95:b2:9d:44:20:a0:0b:b3:69:9b:c0:62:37:9c:5b:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:DA:75:F5:BD:38:53:7E:42:57:BC:BE:2D:D2:27:6C:38:30:FE
            X509v3 Authority Key Identifier:
                keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:a7:83:79:34:f2:58:94:e8:d5:27:ab:f5:2c:38:85:d3:
         01:ad:e7:c5:85:cf:27:a8:c5:c8:67:1e:99:77:d7:80:2e:f3:
         26:56:f0:6a:9f:a2:5e:9d:d5:75:a2:95:b7:9a:2e:6c:1f:3f:
         de:27:b7:5f:9c:87:00:9c:cc:16:16:14:72:e2:d8:b2:87:a1:
         f9:a6:6d:d1:6d:df:a1:be:09:40:65:5e:b8:ec:20:3b:cc:04:
         92:71:20:f3:56:4d:82:d2:7f:06:e7:03:b0:0c:18:8a:2f:0b:
         fe:37:1a:9b:95:9d:d3:9d:78:a7:db:a4:34:a9:ee:8b:f5:6d:
         7a:b1:aa:c7:13:f6:df:7b:aa:f2:0f:1f:4c:95:d1:5b:95:24:
         a2:d6:9d:1d:41:36:ef:11:3a:05:2b:a9:05:21:b8:42:5f:b4:
         af:08:6a:56:60:96:d9:b0:74:c5:4b:21:7d:0c:a1:bd:2c:cd:
         24:f4:86:d6:43:a1:d4:77:c1:5d:0c:8d:86:82:94:1c:22:7e:
         ed:79:a5:1d:3f:7a:21:b8:39:66:c6:06:53:5e:a1:5f:c6:d8:
         75:3f:91:c3:60:36:56:5f:ec:2c:cd:a0:18:de:0f:ee:21:01:
         6a:f6:4f:8f:c7:3f:70:ab:ff:28:db:40:5e:8f:b6:4a:2c:4f:
         a3:3b:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:12:13 2025 by rpki-client