Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File:                     UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier:          E09iGpK9ibyniODi/if2AK1e958HweGWvXZL0TpHXmk=
Subject key identifier:   89:B4:3F:DB:C4:91:35:22:2D:6D:28:82:4A:34:57:89:54:8A:95:F8
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       0197B7B36F5716B51DE00EC57FCE1305FF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 18:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:19 +0000
Files and hashes:         1: O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa (hash: UAJCEcCp2/+1CwINfz4/qAR0IkJC6tKzPu5ouB4y1xo=)
                          2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: XPUGNKE33rqyfWl1LZtJ7ntG2O9x4ZTfNdLZeDX+Wd8=)
                          3: i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa (hash: 1WJwasmqZfO5Vi7FzjM8cLSApQE5Ou2nBbRnhWtNShk=)
                          4: mpgyXJ7iE41eH88IcrenXFUA9NI.roa (hash: wZqBDQ4cwcpcocBr4dj1IjCT+ao6cHj31fYRn+uOxj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:6f:57:16:b5:1d:e0:0e:c5:7f:ce:13:05:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Jun 28 18:01:19 2025 GMT
            Not After : Jun 29 18:01:19 2025 GMT
        Subject: CN=89b43fdbc49135222d6d28824a345789548a95f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:46:45:c4:79:d9:67:71:a9:23:16:62:4f:
                    3b:e3:09:1b:d3:9d:b0:65:1e:be:00:97:a7:e3:ef:
                    c7:94:da:3c:15:c6:4e:e1:5d:91:17:f7:8b:4a:21:
                    8b:aa:64:8e:84:f3:e6:0f:16:b6:d4:63:36:ab:4c:
                    77:1e:06:9f:53:9c:de:72:58:8f:23:bf:58:fd:a1:
                    07:99:a2:9a:2f:be:4f:b8:59:49:50:08:8e:6e:6c:
                    23:18:d5:69:a4:63:6d:83:ce:88:95:60:69:37:92:
                    87:64:c5:3b:c7:47:4b:f4:18:02:5e:df:a1:17:03:
                    f1:59:e6:1b:d5:52:3e:a2:7d:dc:d2:75:80:07:4d:
                    35:cb:4b:5b:ba:8a:66:5e:d5:d6:1d:44:d6:bc:64:
                    15:df:9b:b8:35:0e:34:d2:96:93:01:cc:95:85:4b:
                    8f:40:35:97:6d:00:bb:85:10:e9:c6:ba:09:de:17:
                    d3:54:d3:08:5d:36:85:b9:35:e9:5b:f5:f7:90:9e:
                    66:c8:05:d7:67:b6:ed:7b:68:36:dc:20:e0:a9:9e:
                    27:d7:8d:93:00:e2:99:79:21:e8:58:cd:a4:c5:da:
                    2e:fa:ea:d1:f3:07:be:2a:5f:2c:f9:cb:40:7b:6a:
                    38:82:9f:0c:54:38:6f:51:b7:bc:e8:4f:a8:c9:95:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B4:3F:DB:C4:91:35:22:2D:6D:28:82:4A:34:57:89:54:8A:95:F8
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:3b:1f:64:0f:e5:c0:f2:48:1d:ca:49:b2:a8:3b:af:0d:
         ec:f3:54:0e:f1:b0:f2:98:46:d6:d5:64:e1:a7:de:d3:28:d7:
         b6:ba:67:d7:88:2d:86:c0:34:f8:5c:1b:02:fd:d3:26:b1:eb:
         e3:c2:08:90:c9:60:80:44:cd:72:30:47:88:eb:43:dc:be:e7:
         13:0f:3b:f6:d5:e4:c5:ef:e6:06:bc:19:8e:a1:bc:bb:6e:7e:
         f5:b4:d6:1f:87:b6:3a:07:35:a0:5c:e6:1f:03:f6:04:b6:fe:
         14:29:28:3d:cc:74:50:e5:51:78:b2:73:3a:40:00:66:d8:78:
         d8:4d:7f:29:f6:a3:0a:3f:72:63:3b:7f:90:11:ad:cb:14:f0:
         b5:f1:fd:1a:5d:1e:c7:46:01:4c:15:f0:41:7b:11:16:fa:9a:
         93:0f:a7:7b:7c:9a:99:15:05:f5:55:66:cb:d2:a7:54:cf:7e:
         9e:0e:65:5b:2f:28:c8:2e:89:e1:70:8d:d2:6e:f8:bb:7b:59:
         fa:83:fc:bc:6c:87:17:8d:80:7b:f6:12:16:de:00:88:0a:62:
         cd:ae:91:d1:a9:9d:71:43:d6:75:15:1a:d5:40:10:07:58:1d:
         39:8e:ac:9d:6a:61:f1:cf:f4:58:a1:4c:04:f0:3b:ad:f9:fd:
         53:8f:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:54 2025 by rpki-client