Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File:                     uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier:          CK0JcdqRY8MHmMuHsV8vq/cfBSkmseL93KZwyI4gJ2g=
Subject key identifier:   2D:C9:1A:37:25:33:4C:25:65:58:67:21:92:B2:86:3C:7E:E0:F5:F5
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer:       /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial:       0197D4E1E68B626C7C13864E674D1B2B1E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number:          087A
Signing time:             Fri 04 Jul 2025 10:01:03 +0000
Manifest this update:     Fri 04 Jul 2025 10:01:03 +0000
Manifest next update:     Sat 05 Jul 2025 10:01:03 +0000
Files and hashes:         1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
                          2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: NnBXpEgUkGpmF+WiAKdM1+//bg+4fqTEg7ECt8lU+RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d4:e1:e6:8b:62:6c:7c:13:86:4e:67:4d:1b:2b:1e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
        Validity
            Not Before: Jul  4 10:01:03 2025 GMT
            Not After : Jul  5 10:01:03 2025 GMT
        Subject: CN=2dc91a3725334c256558672192b2863c7ee0f5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:65:6b:ec:58:64:be:d2:43:dd:d9:ac:d1:
                    42:b6:2d:ed:43:31:a2:95:01:24:b1:e3:02:13:fa:
                    cf:80:21:c6:55:9a:42:91:65:4e:97:c6:75:27:b5:
                    f1:a7:dd:43:60:93:53:6e:aa:4f:ab:81:7a:87:3f:
                    9e:0b:c5:41:4e:bc:50:52:3f:6b:89:cb:4e:55:8a:
                    4e:08:5f:16:c8:62:a7:9a:94:1d:74:98:79:65:06:
                    07:00:24:c3:0d:64:4a:00:2c:f1:95:67:3e:d0:5e:
                    7a:8a:bf:ac:20:df:6d:62:74:4e:67:44:d6:bd:5f:
                    3d:2c:0f:b2:74:e8:90:ce:bf:84:2e:e1:d4:0c:ac:
                    79:14:8a:5c:d9:95:69:39:ea:49:4e:89:34:f7:c0:
                    62:5a:23:dd:e5:26:2e:7b:2b:4b:de:49:08:25:b6:
                    ba:46:02:af:e3:32:85:bc:92:49:23:28:98:38:f3:
                    2b:16:3c:3a:f5:22:8e:c2:94:dc:2c:2d:03:99:28:
                    b5:54:d0:1c:13:2b:d2:be:79:13:de:b2:28:d1:dc:
                    ca:29:b8:ed:f8:80:b9:e2:fe:3a:2a:e7:d1:e5:6f:
                    94:49:80:80:b5:3f:34:77:6b:6d:5e:20:fe:54:38:
                    68:7c:75:39:5b:e2:61:78:e8:a4:72:1a:ce:13:ea:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:1A:37:25:33:4C:25:65:58:67:21:92:B2:86:3C:7E:E0:F5:F5
            X509v3 Authority Key Identifier:
                keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2e:bc:bb:35:33:68:b3:29:9c:92:0f:77:63:34:71:ad:9a:
         32:04:a5:f5:73:d4:39:9e:cf:a9:04:77:a1:f5:4a:64:ca:a5:
         76:10:a2:16:fd:7e:69:7e:1c:2a:71:e8:ec:55:f2:c7:fd:e9:
         8d:2c:07:6d:3b:6b:8c:40:81:1e:ed:b5:a9:a2:70:cc:34:86:
         b1:ca:e4:ff:e2:5f:08:c5:e9:36:f6:eb:1e:58:5b:60:55:59:
         e9:50:88:7a:06:96:8d:ca:cf:cc:85:63:ff:be:b2:0b:f2:2f:
         9b:70:1b:c8:e2:8b:cb:78:c1:51:80:8c:95:f9:59:d6:36:9a:
         bb:63:1f:b2:ca:88:8c:2b:89:8d:a0:64:0b:e7:d6:4d:8d:88:
         27:ef:81:c1:b9:c7:6d:5e:27:52:81:db:81:15:a4:c0:87:13:
         c3:20:d8:4f:43:09:a0:b8:b1:1f:b6:b7:1d:40:65:c4:31:94:
         71:2d:e8:07:84:6e:44:be:17:68:72:71:64:3c:bb:8e:86:13:
         0c:f3:df:40:0f:e8:85:05:d1:2a:91:c5:d0:9e:80:a7:36:f3:
         3c:e7:1a:65:35:96:2f:20:48:31:d1:a1:d2:82:ff:59:69:a2:
         86:02:39:87:50:db:1e:0c:ba:c3:79:c7:44:ec:c7:ba:f9:58:
         f7:da:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:01:07 2025 by rpki-client