Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          xJtI68Jxl9sT1j61nsFEe8wvv3Ln0Hy8gsL6hhtFfrs=
Subject key identifier:   A5:05:93:E3:B3:67:AE:A6:7F:8F:77:13:5B:4E:83:FC:A7:9D:1F:92
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       0197B70EC1324B4F4916626421367CCA5332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0CE4
Signing time:             Sat 28 Jun 2025 15:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:26 +0000
Files and hashes:         1: 3NDpUsqPhJcxz3A4C7fxd4qK490.roa (hash: seRjEjrca1U020SOwQkEAWYH1YXwwlJnTmGlO6JWc44=)
                          2: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
                          3: JY70469X8sbUfsNnk7SUuu0w3Kc.roa (hash: Hfl/rx8Ob8X8Add7OXxmiGI9Zx3Lz3uXO4BW73Yc3+A=)
                          4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
                          5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: UO6cMGwZd9LfghfIF6EZ34AGCcJvJlRKbPuJRG0ujMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:c1:32:4b:4f:49:16:62:64:21:36:7c:ca:53:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Jun 28 15:01:26 2025 GMT
            Not After : Jun 29 15:01:26 2025 GMT
        Subject: CN=a50593e3b367aea67f8f77135b4e83fca79d1f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:8f:15:a9:0b:1b:a4:2b:9c:46:3b:72:3f:
                    61:f8:1c:b9:dc:c1:69:e6:f6:58:59:df:c3:d4:b5:
                    1f:23:7a:10:e6:a4:93:c9:ed:95:f6:23:14:f1:13:
                    dc:09:ee:13:ee:41:88:0c:85:ad:bb:70:62:4f:25:
                    41:8e:35:e4:77:5c:54:9d:fe:4f:2e:4c:17:fb:20:
                    de:b0:8c:d0:17:a0:14:98:9d:05:1f:b3:c4:bf:c9:
                    be:aa:70:78:b4:5a:44:4b:aa:07:2e:ed:84:8f:7c:
                    3b:e4:02:08:3e:c4:46:e9:b6:cd:c2:66:78:4a:99:
                    de:7c:85:e1:f2:f7:6a:17:f6:7c:a8:86:34:08:1d:
                    79:25:c7:81:ee:d5:39:2c:6d:03:a9:5d:f5:e0:04:
                    5e:0f:f1:d4:64:25:7f:fd:20:6c:ad:06:db:2d:71:
                    23:7b:c9:bb:49:54:2d:f4:f8:62:66:af:83:62:09:
                    4f:2e:91:53:f7:b9:da:f9:0e:d7:8f:02:4f:c1:8e:
                    e4:8e:20:69:e8:e4:70:fa:43:d1:ec:99:3f:a4:8f:
                    db:be:1f:b7:6e:82:60:44:52:6a:5b:dc:91:37:6e:
                    8e:7c:35:3c:18:d8:a6:f1:da:54:3b:96:09:6e:31:
                    ae:06:1e:18:9a:0e:59:d4:8e:2f:60:80:bc:c9:93:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:93:E3:B3:67:AE:A6:7F:8F:77:13:5B:4E:83:FC:A7:9D:1F:92
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:05:e9:13:da:1b:a2:f6:d2:5f:ce:5c:8d:59:b2:27:fe:
         0d:aa:de:a1:9f:c1:a3:8b:11:05:5b:8e:42:53:4e:09:bd:ea:
         86:f5:c9:db:e5:33:2b:cf:a4:ab:d2:8f:4c:2a:f7:3d:27:6c:
         63:67:e6:37:c6:10:47:43:f1:bd:f8:2f:a1:a3:79:42:03:c6:
         4a:bd:5a:01:c4:f1:c2:95:69:ec:6c:c9:f9:7b:61:30:f4:a2:
         14:a0:0c:a5:65:6c:ed:b2:7f:83:ee:c2:f2:dd:d9:a4:76:b5:
         9d:95:da:b9:b9:5a:ce:2e:90:96:c3:fb:b7:11:65:fb:9b:7b:
         3c:89:a2:b3:83:75:34:b6:a3:4a:7e:9d:3e:f4:67:ab:e6:33:
         3a:c3:e5:ad:59:15:7a:5a:63:cb:b1:e1:67:51:ce:7e:28:02:
         b5:ca:44:57:31:1a:51:fd:11:95:51:61:74:70:65:1a:9e:30:
         e2:d4:31:21:72:2d:3b:76:63:96:f1:64:71:09:96:71:57:c6:
         76:b7:0d:d2:51:fa:a1:b5:00:08:1c:27:16:7a:6c:5b:d8:09:
         18:b6:c9:4e:19:29:a7:29:3a:bd:8a:2e:50:d5:09:82:73:0d:
         c7:54:28:11:d2:35:60:b5:4c:ea:8a:80:75:27:49:06:89:42:
         91:8f:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:06 2025 by rpki-client