Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File:                     UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier:          XnxOUfr6Vvy6OHejqEObrh6jAfE14GOz5x/WQGc7s3k=
Subject key identifier:   9E:65:82:FC:64:1A:5B:5A:69:D0:32:8F:16:B1:AC:46:E5:23:EE:B9
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer:       /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial:       0197B77C2D8345C4CAF110888D07E83795C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 17:00:57 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:57 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:57 +0000
Files and hashes:         1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: bxWE8tiVpZ6ul9PZ2EQOJX7Ym8Ad5I85sarje3MtrRY=)
                          2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:2d:83:45:c4:ca:f1:10:88:8d:07:e8:37:95:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
        Validity
            Not Before: Jun 28 17:00:57 2025 GMT
            Not After : Jun 29 17:00:57 2025 GMT
        Subject: CN=9e6582fc641a5b5a69d0328f16b1ac46e523eeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:83:56:32:4b:c5:e1:2d:58:71:d8:5f:ed:
                    b5:49:9f:b9:58:b1:d9:30:08:1b:37:83:bc:6d:4f:
                    da:6c:78:ea:96:51:5e:84:63:ae:f0:90:17:a4:c3:
                    59:f2:d7:7a:d3:70:49:14:7f:46:2c:70:19:cc:8b:
                    b9:db:29:bd:a0:bd:74:e8:fc:ab:c4:a7:85:10:0d:
                    24:f7:d3:4d:18:8a:11:51:a8:a4:03:bb:12:b5:46:
                    ef:ae:ff:8d:38:50:ee:06:f6:bb:d8:44:11:01:c8:
                    89:5f:6f:45:d2:5d:e5:99:2a:78:54:e8:e9:26:da:
                    98:cc:00:ef:3c:8a:5f:82:48:dd:71:c6:2e:ee:7f:
                    33:45:f0:14:07:06:aa:42:d1:d3:a9:e5:a1:69:ff:
                    ef:f3:76:de:71:72:32:7f:68:cd:e8:38:c4:fc:3d:
                    d0:ea:82:e6:d1:da:f5:70:f9:e4:ff:b6:24:53:15:
                    50:c4:43:fe:59:9a:23:c7:39:fa:5e:a2:c0:cc:46:
                    41:3c:ab:b7:b7:86:1b:44:72:c3:cd:db:0a:2d:06:
                    8b:52:4e:ad:fd:22:0e:f8:07:fe:a4:2a:3f:80:3f:
                    cb:bd:18:b0:77:61:62:f9:f8:92:c7:15:b3:3d:17:
                    69:f7:91:b4:c4:af:36:27:9c:07:76:a7:ee:2a:2c:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:82:FC:64:1A:5B:5A:69:D0:32:8F:16:B1:AC:46:E5:23:EE:B9
            X509v3 Authority Key Identifier:
                keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:15:a1:ed:39:0b:7d:36:c2:2a:28:8b:1e:95:65:b6:9e:57:
         75:25:a3:b0:27:b7:d8:38:59:42:f3:58:7f:6e:f9:34:c5:a2:
         e4:a9:6e:6f:25:f6:6d:84:be:53:fb:f9:cc:91:10:a8:f7:5a:
         22:3d:94:ec:7c:a7:88:18:75:dd:32:6b:4c:34:20:52:45:3d:
         eb:1d:3a:90:48:72:7e:2f:60:e1:47:10:21:9b:ee:64:17:e0:
         9a:1e:2d:dc:4b:5d:49:d2:53:53:03:92:db:e0:f1:69:21:5e:
         ba:81:e8:5c:14:96:02:57:01:58:60:c9:93:71:a9:cf:3a:a6:
         89:8b:12:92:b7:09:99:f9:ac:49:fa:89:b0:7b:f3:77:ba:d9:
         88:93:b3:14:01:6b:34:b4:1c:df:80:d5:8b:64:a2:23:cd:6b:
         11:51:67:5d:02:8d:90:9f:a4:36:54:5f:ea:9e:49:9c:79:34:
         09:13:7b:75:95:57:ee:0c:76:19:35:25:d3:61:3f:cb:c3:2d:
         eb:9e:a2:c1:86:9a:fd:93:35:ef:32:b7:c0:78:b6:3b:fa:75:
         56:19:55:4b:d2:3b:36:97:89:6b:26:b5:52:60:fd:8a:bb:82:
         56:40:63:26:36:93:03:80:87:9a:8d:a3:15:fe:0b:9a:d7:c4:
         9d:f0:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:13 2025 by rpki-client