Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          5jk+7B2K8nw4c1XAtT4rINAiBnYEIAs5bw3mcOvfv1M=
Subject key identifier:   FE:35:D4:CA:36:24:3A:2A:FA:2C:F4:64:95:07:EC:82:E7:ED:DB:70
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       0197B70F00B57CDDCFF71E259D50E73515A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          111C
Signing time:             Sat 28 Jun 2025 15:01:43 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:43 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:43 +0000
Files and hashes:         1: Brko5nMKSPwBgCgkjjg5igCr-DI.roa (hash: 3fOnCI08ItaZVpBsarkgTQcdgGi7HK10nR8m2pkLLWI=)
                          2: RdMb9DZXvill1bIjga0E0ALFTSE.roa (hash: glVlBHXB1p3fuc6KcN7QeAF0s4whdubmLa4lXiIAO04=)
                          3: bGID9MISfapCQvxtnoK2mwgER1c.roa (hash: 48jEs1SYz7H/DF1j6XjhPt2MSQotOuG8cV4gNdbAuRU=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: vxcPMJb4u7AnrDHRuxIEUUnEc+1VA2xXIsNX9EqiZUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:00:b5:7c:dd:cf:f7:1e:25:9d:50:e7:35:15:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Jun 28 15:01:43 2025 GMT
            Not After : Jun 29 15:01:43 2025 GMT
        Subject: CN=fe35d4ca36243a2afa2cf4649507ec82e7eddb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:a9:49:cf:f2:dd:25:d3:b3:9b:d6:96:dd:
                    64:dc:83:3c:1b:6f:6f:3d:81:d7:a4:b8:1f:5d:85:
                    5d:77:d6:f4:4a:88:6a:a6:2d:7d:9d:6a:aa:6a:71:
                    9c:cd:cf:c5:cb:d6:65:d8:62:d8:8f:1c:d4:a6:8a:
                    94:a1:d0:3a:8a:87:65:c0:41:58:eb:53:20:f4:0d:
                    95:47:00:59:a8:80:88:6f:f8:80:82:e4:e0:db:39:
                    24:5a:6c:99:f8:13:5a:26:52:1f:96:23:b8:e0:59:
                    fb:3a:10:8b:c8:a6:84:2f:91:26:f5:61:78:a5:cf:
                    f4:07:e2:29:a2:94:d5:b5:c1:08:e4:b8:0c:de:04:
                    04:b0:9c:b4:65:d7:e6:eb:98:1e:6a:e8:11:ba:28:
                    c7:60:e1:fe:d3:6a:92:2e:4b:0f:d8:28:80:8c:de:
                    37:41:b3:54:07:8a:13:ca:1a:80:d9:3b:e1:1b:8d:
                    65:36:9d:97:d7:bf:b0:8e:d6:d0:06:f0:5b:77:36:
                    81:c3:49:d3:1e:c2:e9:4b:ca:2d:d2:c7:b2:48:6b:
                    42:00:3e:73:30:8f:b2:2a:dc:c6:8d:bf:c2:f9:8e:
                    cf:f7:bb:d9:c5:6e:19:0c:98:6c:92:15:d0:7c:76:
                    23:95:e5:35:ca:2f:d0:38:c9:f3:4d:b3:c4:e5:12:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:35:D4:CA:36:24:3A:2A:FA:2C:F4:64:95:07:EC:82:E7:ED:DB:70
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5d:03:4d:23:91:c6:2d:a0:5b:cf:c6:f9:c4:c3:94:86:ba:
         b3:31:0b:83:ff:da:30:25:ba:1f:5f:9e:7b:59:8d:ba:2d:e5:
         75:a1:50:dd:ee:6e:7e:2e:28:b8:1e:71:77:3e:03:e5:5c:dd:
         5a:06:00:ad:18:a7:92:ea:f2:4f:02:76:43:87:df:80:59:80:
         42:4c:00:cc:b4:23:a6:a6:2e:7c:66:57:0c:b7:71:fc:ca:79:
         0b:57:a5:8a:1b:60:c3:3d:23:e1:4c:7c:0f:6f:d2:a3:44:c7:
         45:06:23:6c:92:ea:9c:e2:83:07:6c:e1:27:a7:a1:b9:0f:89:
         0c:58:2c:d3:ef:be:4b:94:ec:aa:8b:1d:4e:01:20:8c:58:ca:
         e8:67:59:c8:15:73:d6:cb:90:77:db:a0:11:26:cd:ca:7e:cb:
         4a:66:f1:59:95:aa:e9:fb:0d:60:1e:3c:45:c8:e4:1f:cc:59:
         2e:11:ff:08:92:d7:8a:95:ca:29:26:8a:f7:14:37:e4:fe:ef:
         c4:74:97:f0:8c:ff:3f:53:5d:97:c0:f2:ef:12:6e:a8:0d:ba:
         74:cd:f7:a1:c2:51:2e:25:36:bc:c8:3a:42:f3:18:4a:ad:cf:
         22:a2:fe:9d:b8:b3:38:5a:d3:11:c8:f5:9f:74:20:6e:22:ae:
         70:2f:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:33 2025 by rpki-client