Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          kaWB5u0UZSkNSiRuBNAr6IC23XmMtKkIHhtjmoGsRlg=
Subject key identifier:   10:8C:B6:DE:3D:17:CF:4C:53:33:A7:AD:CA:17:28:F4:C0:78:E0:4F
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       0197B6A0DB58AE0E4BC9CB55E3654DBEF4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          0EDD
Signing time:             Sat 28 Jun 2025 13:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:24 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: wYQUSkEA0+D8bj8v5RbUo/e1FMwisOyxrxe40hH/uOo=)
                          2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:db:58:ae:0e:4b:c9:cb:55:e3:65:4d:be:f4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: Jun 28 13:01:24 2025 GMT
            Not After : Jun 29 13:01:24 2025 GMT
        Subject: CN=108cb6de3d17cf4c5333a7adca1728f4c078e04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:81:c6:ab:4a:27:f5:91:40:d5:9c:a7:c8:
                    1c:85:03:53:a0:b8:e7:1f:a2:07:63:8d:53:92:a7:
                    0c:dd:c1:26:65:e4:d1:ac:25:df:b6:70:5e:66:df:
                    e6:99:b5:ca:b3:86:0d:31:c6:32:6d:ed:16:2c:bd:
                    62:1f:2f:67:aa:e6:6f:52:bb:46:94:95:5b:65:ec:
                    d7:11:71:5b:6b:87:a0:08:96:13:e3:c7:32:6a:ac:
                    7b:97:5f:94:c7:2c:92:4b:9e:73:86:6f:6c:89:77:
                    59:5f:c7:1e:69:d3:80:aa:72:48:20:8a:a5:64:03:
                    0c:7c:f9:96:b3:de:25:da:05:4e:5f:70:9a:ed:19:
                    e4:30:42:fb:7c:83:de:97:57:80:b2:e2:e8:92:c4:
                    b2:ec:49:62:55:a8:b0:9a:d4:1e:11:aa:ed:ad:28:
                    a1:b3:a4:1c:ff:9f:67:b7:20:be:56:d1:ff:bf:46:
                    15:19:e4:b5:79:e1:40:cd:2c:56:64:18:6d:1f:a4:
                    be:6b:3b:a2:0c:f6:0c:6f:b9:45:9b:1b:6a:27:ad:
                    d4:62:21:de:39:78:e9:49:e7:ca:e6:67:c3:f5:50:
                    29:38:92:a0:98:38:2f:5f:c6:38:e9:55:f3:b9:d6:
                    0b:2d:d9:08:94:33:41:ce:c2:92:ae:fa:3d:b1:71:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:B6:DE:3D:17:CF:4C:53:33:A7:AD:CA:17:28:F4:C0:78:E0:4F
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:df:f5:c7:d9:46:63:36:7d:cd:55:ef:f1:ed:df:55:1e:
         8e:36:01:2c:40:ea:fe:93:fc:c6:0e:39:24:01:e8:98:d6:dd:
         57:57:bd:e1:8a:3e:ac:f9:cc:85:0c:76:bc:b4:d5:9c:96:b0:
         1a:ff:59:22:c4:b9:34:53:ca:74:3b:2d:fc:ae:14:8c:84:48:
         05:64:c2:73:84:97:fd:be:d2:d5:cc:02:b1:bf:8a:cb:b9:71:
         3a:78:54:ee:b5:5a:e4:93:bd:ba:4c:3a:02:d3:08:24:f3:bc:
         4c:c7:78:6a:7b:2e:cf:17:d5:bf:5e:a6:e0:d3:d8:86:0f:0a:
         08:c9:68:0d:da:e9:d3:21:ed:cb:eb:33:3f:19:35:bc:69:b3:
         0b:c3:b2:64:59:37:26:fd:7d:a4:ac:52:09:1b:ec:7b:63:b7:
         69:63:39:89:68:61:6a:99:c4:27:3a:4b:08:8b:0a:d5:be:2c:
         f9:11:36:d2:b4:5a:86:73:0e:51:93:06:e9:67:a5:a8:5f:ea:
         cf:70:f2:b9:95:54:e9:0e:34:08:83:3d:c0:bb:98:f4:ca:01:
         51:3e:d2:88:14:95:84:a2:d4:5a:db:f1:0e:97:25:5a:b7:5a:
         f4:71:d2:dd:a5:ac:7d:60:b1:6b:44:52:c1:cf:cc:48:c5:64:
         b7:68:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:13 2025 by rpki-client