Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          gpvBKoTzOxJb/vPF+FFLKz2MI+NVoFhVF0cpVYIKBoE=
Subject key identifier:   7F:95:05:F0:43:8E:4E:FC:D9:02:77:A2:99:89:B4:78:0F:57:4E:D6
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       0197B7B37F487C4B114E2F5252298FCF4926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 18:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:23 +0000
Files and hashes:         1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: wb0pk/6Ro8dtdMFWBcyInm62963zzyin7F9eZRdar7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:7f:48:7c:4b:11:4e:2f:52:52:29:8f:cf:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Jun 28 18:01:23 2025 GMT
            Not After : Jun 29 18:01:23 2025 GMT
        Subject: CN=7f9505f0438e4efcd90277a29989b4780f574ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:52:3b:ff:8b:0b:17:59:b1:e4:7c:76:8a:
                    9a:67:07:26:41:76:04:da:0f:1b:b6:23:a7:07:ee:
                    e9:a6:8b:93:24:4e:d3:61:bc:7a:56:fd:24:5a:a9:
                    0f:c4:7e:73:da:ee:f1:26:89:62:8a:d1:44:f3:05:
                    fb:24:8b:61:65:55:d3:1c:8a:30:1c:8e:18:60:5c:
                    bb:75:cc:fd:6e:e0:96:09:ca:1f:c7:58:3d:79:79:
                    23:f6:ba:e4:0a:03:5b:e4:75:87:91:53:1a:1d:72:
                    82:fc:e8:94:0b:1d:79:07:bf:cd:be:96:13:5b:3d:
                    b9:94:a1:d7:e0:0c:8f:60:4d:8b:ed:39:62:f2:0b:
                    eb:8d:ab:ec:ef:4f:c5:04:d3:41:f8:63:05:67:5c:
                    e3:b3:01:97:56:c0:49:92:c8:0c:d7:e9:36:90:15:
                    b4:81:21:13:ca:33:2a:01:fe:78:ae:3c:7c:25:c7:
                    c7:8e:f6:e6:36:c8:4d:d4:2d:a7:e7:87:a6:87:d9:
                    57:c6:54:9a:82:e2:77:a8:d6:b5:71:5f:29:79:16:
                    14:91:4a:fc:c6:d6:51:78:c8:84:9a:be:81:d1:21:
                    b5:5e:96:ee:0d:51:28:68:03:a0:f3:92:65:71:f1:
                    fe:ed:5f:7b:b7:8d:c0:1c:d2:08:60:e6:12:d3:db:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:95:05:F0:43:8E:4E:FC:D9:02:77:A2:99:89:B4:78:0F:57:4E:D6
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9c:c7:c2:69:10:6d:10:51:63:93:c1:a1:0c:1b:6c:63:ba:
         a4:e2:44:05:71:8e:63:35:17:1d:e5:0c:e9:3f:07:43:3f:c4:
         e3:a6:e8:61:52:eb:8f:8d:4c:12:23:48:4c:b3:7a:4e:28:f7:
         12:6e:47:ae:cd:37:10:78:97:d8:3e:ca:4f:20:52:44:a0:7d:
         57:9c:db:e0:28:ef:7e:65:ac:31:25:df:62:d2:9a:be:14:b9:
         44:3c:18:cf:61:15:f1:01:6d:88:8c:9a:cd:05:e7:a8:c8:86:
         1e:2d:f1:2d:3d:45:98:a9:49:a8:8e:83:b0:61:ce:45:89:02:
         bc:98:32:52:77:e1:b4:47:66:2f:94:4a:3a:da:4c:10:e2:b7:
         9f:6b:22:47:bc:d7:fa:ed:81:c3:17:bd:84:43:ac:af:07:f5:
         26:c6:31:43:7a:87:2b:e5:fb:4e:7f:5c:8c:b0:7f:d0:3e:2c:
         1c:68:ad:d8:40:7b:4a:cd:69:6b:96:39:5d:18:6c:67:ae:46:
         53:5c:1d:a6:47:81:d8:9e:8b:62:53:36:d4:01:22:66:85:95:
         6b:9a:bf:89:2c:6f:d6:21:83:7e:14:7b:47:63:d1:5d:84:bb:
         df:0d:06:37:06:8d:90:b0:6e:2f:3e:89:d5:28:60:ac:f6:d7:
         9d:4d:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:34 2025 by rpki-client