Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File:                     UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier:          uNCc3O6Q7JfpJMcSCl05zaXgZtNO8FZFjWXFgbdrXN8=
Subject key identifier:   CD:22:03:A4:A2:6B:91:82:4B:C6:38:4E:6C:E5:24:74:5D:44:FE:91
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer:       /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial:       0197B70E94EAC744F916E5426A87D0708230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:15 +0000
Files and hashes:         1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
                          2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: CN1+kgR+REU6JX9/+a5rjQbUgLZzeMsgQVDfJXT3IP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:94:ea:c7:44:f9:16:e5:42:6a:87:d0:70:82:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
        Validity
            Not Before: Jun 28 15:01:15 2025 GMT
            Not After : Jun 29 15:01:15 2025 GMT
        Subject: CN=cd2203a4a26b91824bc6384e6ce524745d44fe91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:88:7f:91:06:30:5d:25:dd:a9:e0:82:fb:
                    3b:51:4c:4a:b5:a5:8d:2b:a3:78:c3:0a:5e:7d:84:
                    7a:0a:94:c0:c9:6e:2a:9f:f0:97:02:6c:82:61:d9:
                    e7:ed:a0:e7:9a:32:8c:ec:be:2f:02:80:c5:f9:6a:
                    8e:db:e7:80:1d:f4:da:c1:52:e0:86:9f:c3:fe:2c:
                    b7:7a:f0:a5:29:dd:cc:6f:49:c5:0a:b8:ae:95:94:
                    25:24:1b:5b:81:2d:fe:14:2d:76:a4:ae:cb:40:86:
                    ec:13:a7:47:86:9f:d9:2d:e4:38:25:32:1a:f0:4c:
                    ee:30:20:13:43:ed:63:b1:3d:d5:eb:a9:2d:e7:70:
                    34:8b:eb:5d:14:61:c8:18:63:c0:92:59:71:55:a2:
                    88:9f:a8:f3:77:b5:ec:00:30:34:67:b7:6d:e3:9a:
                    b0:8e:f8:64:0f:b4:bf:78:7a:fd:3d:c2:45:2e:c5:
                    50:54:58:16:14:3d:96:87:54:a2:88:c0:5f:2d:7e:
                    24:e8:ae:6e:46:27:f2:e8:32:73:2d:ca:78:22:75:
                    0e:43:21:bf:c3:a7:23:85:dc:98:56:9d:07:d2:b4:
                    bb:0d:88:ef:78:b0:ce:50:28:c0:53:14:92:66:0a:
                    ca:e6:41:c5:f2:43:11:91:06:7e:d8:9b:98:ea:a3:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:22:03:A4:A2:6B:91:82:4B:C6:38:4E:6C:E5:24:74:5D:44:FE:91
            X509v3 Authority Key Identifier:
                keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:34:bc:87:9e:37:9f:f9:c1:fb:2a:45:9d:71:7c:38:39:8e:
         83:5a:06:27:c8:d7:02:42:ea:da:d2:40:27:a9:fc:c8:1c:df:
         a1:94:de:2b:68:3c:4f:66:fb:86:d8:ec:8f:8d:da:7e:57:56:
         7c:ab:46:b4:22:40:10:e8:a5:d7:0e:3f:f9:c7:74:d0:8b:bf:
         bd:20:a8:d7:5d:ef:ae:4c:96:69:4a:2f:d0:1d:17:54:72:5e:
         b4:b9:4d:9f:23:e8:aa:ac:7f:91:d0:f0:33:8f:3f:ee:31:a2:
         96:84:3b:eb:4d:cd:c9:de:75:ae:1c:8a:4a:5a:11:c5:71:ec:
         46:75:74:db:2c:e9:89:78:0e:15:f5:31:29:7d:ff:df:2d:71:
         91:71:1c:6b:48:7c:e0:c9:67:8f:31:49:4c:ea:0b:ad:df:f3:
         81:2c:08:3b:3e:d4:6e:23:ac:64:a2:a8:6d:ae:e1:2b:98:f5:
         c8:c6:0c:3f:45:0c:02:83:f5:88:04:2c:81:43:5d:8c:2b:88:
         95:63:b1:0c:ce:22:46:63:25:4a:36:24:f6:c1:51:9d:30:9b:
         ab:fe:e9:df:65:5c:48:00:a7:62:73:17:c5:61:41:a9:77:69:
         66:27:b2:ee:99:2c:c4:e6:9c:8b:1b:c8:64:90:44:40:19:f9:
         4c:3a:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:52 2025 by rpki-client