Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          glmVOavA7mbdEx2eTWBAzQTPpJFxfHzyq8pus29Sv54=
Subject key identifier:   A1:B0:55:10:4C:C9:69:2F:43:31:9E:91:94:15:A1:D1:C7:EB:55:85
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       0197B70F12882AE1E5033A8C725E3D8F51D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:47 +0000
Files and hashes:         1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: 3GOJ1c9N/rHt/d/iCT4ElvtAmWOT07wjABeD9M29XaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:12:88:2a:e1:e5:03:3a:8c:72:5e:3d:8f:51:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Jun 28 15:01:47 2025 GMT
            Not After : Jun 29 15:01:47 2025 GMT
        Subject: CN=a1b055104cc9692f43319e919415a1d1c7eb5585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:41:44:b4:a0:57:cb:a7:69:a4:32:5a:b1:
                    22:45:ce:2c:88:12:c3:2f:fa:4a:ef:aa:12:26:1b:
                    96:35:41:27:61:4a:b1:17:ce:5e:a7:b5:4b:e4:26:
                    69:d9:73:0c:27:8d:38:01:fd:f6:6e:94:f7:a9:fe:
                    d1:2c:12:04:4f:b9:42:2f:33:e0:1e:f2:b4:5a:95:
                    a2:a5:a9:b1:6b:44:b9:a1:b9:48:de:5b:bc:8f:a3:
                    ba:ff:92:b0:f8:2e:4e:91:94:86:ad:a2:bd:c2:ec:
                    77:1e:94:eb:3d:3b:96:67:67:45:de:7b:15:ca:67:
                    a0:aa:6a:be:fd:34:10:13:7d:3e:a6:03:7b:ad:07:
                    6e:fa:b4:f3:23:0c:90:c7:23:ba:92:f6:0a:1d:57:
                    16:23:8d:32:cd:e8:bd:2d:36:6d:80:59:68:0c:66:
                    bc:3f:e6:09:99:ef:d3:73:a9:91:e8:35:fe:a8:74:
                    bb:74:b3:e6:1d:64:14:d9:dc:17:ad:87:30:d6:e3:
                    7f:f9:4d:f5:20:28:58:a4:35:88:09:cc:e8:c6:c7:
                    e6:f4:c2:bf:8f:cb:11:c9:a1:ac:3d:2d:b1:d4:05:
                    aa:0b:00:6f:84:c4:1b:56:e2:f3:21:0e:31:28:57:
                    6c:6c:b0:53:91:6f:2b:2f:a4:e6:73:7c:74:72:68:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B0:55:10:4C:C9:69:2F:43:31:9E:91:94:15:A1:D1:C7:EB:55:85
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:12:fc:96:da:a2:80:bd:6d:d3:cf:92:10:3c:d4:56:c6:2d:
         86:24:49:90:3b:9d:c9:be:b6:fa:5d:8d:8a:ec:ad:2b:45:f5:
         26:73:de:29:96:a0:06:81:69:9b:90:5f:50:58:ed:df:55:81:
         d2:5a:ed:fc:10:fd:aa:97:6d:c1:c5:f6:0f:22:5e:52:b1:99:
         e9:f9:37:03:6d:ac:2b:18:ca:40:1f:64:71:a7:48:f0:93:d7:
         3d:f3:5f:0d:dc:4e:bd:9b:a3:07:3b:90:a8:69:27:ec:a0:2d:
         4c:e0:96:77:74:2c:c1:ba:53:e9:99:f2:b0:c3:25:3f:49:ad:
         c8:82:2e:0a:14:c8:98:55:a3:bf:4c:16:8d:8a:db:d2:9d:67:
         e8:03:95:f2:15:76:af:9e:a1:4f:0a:39:1d:eb:d3:a5:3f:3e:
         ce:19:f0:cd:44:66:06:70:9d:19:b5:f6:b9:7a:3f:4e:c0:7a:
         3f:0c:5a:40:e7:c4:11:bb:43:c4:c4:53:5e:bd:6f:44:cd:e0:
         ee:5e:0d:15:9e:1e:0e:d5:0f:bd:82:01:0e:22:27:de:cb:58:
         48:50:b5:cc:dd:3f:e9:dd:40:4e:c0:dd:eb:2e:2e:17:2e:42:
         88:5e:9e:1b:e1:be:43:6e:c0:9f:3d:d5:ca:db:51:fc:0e:4a:
         04:21:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:32 2025 by rpki-client