Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File:                     UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier:          lhQmqHpQuzduvADg/yKcalKhynWJt24VdwClAtAxr6o=
Subject key identifier:   C5:8C:F1:18:8E:A5:F7:0C:17:8D:CD:05:13:BF:36:6F:BA:72:87:63
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer:       /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial:       0197B7B2FB16BDE68BCD748CC8440857DBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 18:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:49 +0000
Files and hashes:         1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
                          2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: 3bSvkv61gVOk3Zcn//tidShYNDZN/0Dza2VPCmD0ZUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:fb:16:bd:e6:8b:cd:74:8c:c8:44:08:57:db:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
        Validity
            Not Before: Jun 28 18:00:49 2025 GMT
            Not After : Jun 29 18:00:49 2025 GMT
        Subject: CN=c58cf1188ea5f70c178dcd0513bf366fba728763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:09:58:0d:3b:36:51:4f:97:c9:f9:8e:2b:
                    92:92:e9:d1:b5:8a:ec:48:18:87:3f:9c:f2:26:b4:
                    16:b1:42:09:94:9e:85:a4:3b:90:54:97:a0:6f:a6:
                    f1:34:80:2e:6b:d9:47:04:05:cc:85:e2:d0:6f:a1:
                    11:a0:41:c9:13:bc:57:fc:6c:1d:19:48:e7:2a:15:
                    75:f7:5f:07:fd:47:bc:8d:91:fe:82:a0:6a:a9:74:
                    0a:ed:26:25:b8:b6:6a:0b:d3:37:82:b9:2c:ee:35:
                    e8:54:a7:28:de:6a:9e:a2:24:09:0f:8a:03:9b:67:
                    d7:97:88:1b:c8:cd:1b:17:0d:69:37:ba:87:4d:74:
                    88:77:ed:98:3d:59:88:5a:33:5e:44:27:54:86:70:
                    0b:bf:a9:19:86:16:73:97:f2:21:2a:aa:a3:0e:c6:
                    ca:0f:c6:51:c3:83:3a:a5:1e:fb:9e:57:91:1a:c3:
                    77:91:40:0a:ab:66:22:b0:44:29:87:df:7d:3c:68:
                    4c:78:8a:c8:a2:c8:de:09:8b:f5:99:6f:76:3a:db:
                    19:ab:f8:53:a7:e8:0c:de:8c:42:ee:c2:3e:fe:b4:
                    27:2b:92:f8:6b:f3:70:49:99:5e:38:16:a1:7a:5b:
                    6f:56:07:14:d7:88:0d:cc:ff:bc:5d:42:32:10:24:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:F1:18:8E:A5:F7:0C:17:8D:CD:05:13:BF:36:6F:BA:72:87:63
            X509v3 Authority Key Identifier:
                keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:f5:54:2c:86:0a:59:5f:fb:dd:e0:0f:f4:38:46:c5:64:
         91:e5:e6:02:92:c5:99:0c:cb:c3:0e:17:ce:c8:a8:ca:1d:27:
         94:1c:74:8a:fa:c9:aa:22:5e:f7:f7:5d:96:fc:41:2c:ac:39:
         36:7f:49:92:e4:fd:af:61:01:03:9e:0e:ac:64:5d:a7:e3:9f:
         13:f5:5f:60:9e:af:2d:9b:4e:5d:2e:5c:7a:8e:7b:10:04:ec:
         c4:2f:06:53:6f:25:75:4a:04:2c:7f:e6:26:d7:9c:92:37:c8:
         54:a8:53:ef:3d:4c:80:c3:73:32:b2:0c:9b:85:66:73:e0:0c:
         d4:b1:dc:52:98:3d:b3:9e:bd:b5:65:c2:5c:a3:1a:9d:30:93:
         cc:a3:f0:d8:8b:be:97:9c:92:f8:3e:8e:28:ba:5d:ec:a7:d3:
         cb:54:8a:1b:ed:a0:9d:34:a3:b8:90:82:82:5e:d2:f7:4b:59:
         4d:b0:62:c5:08:22:2a:e9:a1:6e:f3:9c:26:5b:d4:28:7f:87:
         76:46:6f:8e:06:28:73:08:53:31:1f:e0:34:44:e6:0d:c6:1c:
         99:1c:22:00:09:82:1f:9e:48:70:eb:89:bc:6c:73:69:4f:97:
         75:5b:94:4b:79:19:f9:4e:b7:2c:af:aa:45:c9:cf:44:74:ae:
         87:d4:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:49 2025 by rpki-client