Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File:                     UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier:          0WA2JsFyfSHgyS9/s06WhGLNMuL+cRBdtE1rMt1sA7U=
Subject key identifier:   E4:D6:F3:89:83:59:51:D3:3F:E0:0E:EF:00:B2:FD:F1:27:7B:D1:85
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer:       /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial:       0197B70E8838E5F558851212EDA78DFBF16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 15:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:12 +0000
Files and hashes:         1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=)
                          2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: eH9+L2FC5q/nF3jsbUFDIe+qoHTS3VTMYOeqKaRscX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:88:38:e5:f5:58:85:12:12:ed:a7:8d:fb:f1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
        Validity
            Not Before: Jun 28 15:01:12 2025 GMT
            Not After : Jun 29 15:01:12 2025 GMT
        Subject: CN=e4d6f389835951d33fe00eef00b2fdf1277bd185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:b8:f5:dd:3b:73:06:c4:71:cb:61:b0:e4:
                    ac:be:27:96:36:84:46:50:6f:00:d7:55:d6:0d:51:
                    5f:06:41:fd:cb:a4:9c:87:82:26:2a:ec:c0:da:14:
                    eb:e6:19:f8:de:e3:23:1e:c3:d1:eb:30:95:ea:02:
                    5c:c9:03:b1:e7:63:8e:1f:7c:f7:79:29:a0:b6:4c:
                    52:87:63:d4:e6:b7:42:a0:67:f9:ea:43:2e:8a:9f:
                    02:f8:5c:be:d4:b5:7c:8b:fd:d7:37:f8:5f:53:ac:
                    c2:da:4c:44:e8:aa:0f:1a:da:a7:60:4f:dd:b8:c1:
                    81:79:52:a1:a4:5f:8c:0b:61:e8:13:7c:02:20:fe:
                    9a:98:36:0c:fc:97:5b:2b:fb:3b:c1:a9:0d:2e:c1:
                    02:2e:4d:34:9f:87:bc:bd:73:61:9c:d3:5e:61:15:
                    f5:f7:fc:04:7c:45:1d:b2:61:41:85:d7:d1:f6:62:
                    ed:bf:d9:39:41:0b:3b:ce:f5:6d:17:79:9d:67:50:
                    e1:36:42:b5:a6:33:65:fc:79:b7:a6:cc:b6:fd:5e:
                    d2:5f:a5:be:7c:e4:60:fd:37:12:9f:5b:69:7b:27:
                    ec:18:20:28:f0:45:04:5d:7f:ed:76:71:76:7a:34:
                    42:81:13:81:a4:b8:25:f8:1d:52:1c:e0:0d:d0:87:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D6:F3:89:83:59:51:D3:3F:E0:0E:EF:00:B2:FD:F1:27:7B:D1:85
            X509v3 Authority Key Identifier:
                keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3a:10:69:6e:d5:38:66:40:7b:89:c3:0e:c1:c3:d8:06:31:
         4f:b6:92:69:b3:db:50:86:63:5f:e1:5c:42:51:3c:6a:f5:ab:
         8c:a2:b0:6e:64:d7:7f:8f:06:aa:c7:a7:1a:48:0c:ae:4a:08:
         39:65:f9:77:49:8c:b4:71:b0:e7:5f:2a:0d:1d:e0:b6:3b:15:
         d1:19:1b:1e:fb:c7:19:f1:3f:6b:4c:6c:f7:a9:56:b0:b6:f8:
         bc:5b:54:6a:06:72:2c:42:66:bd:90:3f:d4:b4:23:93:b7:2f:
         4a:1d:e0:cd:8a:e7:66:62:17:ef:ae:ee:94:cf:56:a7:57:2b:
         b5:bf:48:69:61:e9:51:bd:b0:7d:4a:a6:18:31:90:7b:c5:45:
         ba:b1:60:83:ee:72:da:b0:4a:72:97:45:96:e8:db:29:61:04:
         2a:22:47:8f:9e:7b:1a:4c:45:41:42:00:54:cd:e6:02:d5:a2:
         00:fd:66:c6:c7:83:a9:d7:12:2a:e2:03:91:79:78:99:86:33:
         fd:9a:e3:2d:a8:c2:4d:6a:33:fe:bd:9d:5e:c7:20:df:15:35:
         b1:58:cf:e3:73:43:90:7d:e5:c6:f5:ea:f8:d9:a2:8d:e9:1e:
         41:15:68:4e:ce:8e:70:03:a2:d7:09:fd:05:4e:b6:04:45:ef:
         43:7b:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:13 2025 by rpki-client