Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File:                     UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier:          mtz+75pnAak0Ptngs/HamoheYVo6px7qAfRf/lwL2pQ=
Subject key identifier:   E1:26:9E:5D:57:12:DC:4B:6B:47:BF:9A:E7:81:0F:6B:42:B9:43:ED
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer:       /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial:       0197B88FB9EC3D29C1A376C580A13918A86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:01:56 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:56 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:56 +0000
Files and hashes:         1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=)
                          2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: MB9svjFF5sfOrmCaaJx61HLmXBbDHVEIlkedFdBQhCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:b9:ec:3d:29:c1:a3:76:c5:80:a1:39:18:a8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
        Validity
            Not Before: Jun 28 22:01:56 2025 GMT
            Not After : Jun 29 22:01:56 2025 GMT
        Subject: CN=e1269e5d5712dc4b6b47bf9ae7810f6b42b943ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:52:42:1c:86:39:d7:a6:f8:34:8d:86:65:
                    03:f6:43:0d:70:76:9c:82:5d:84:27:aa:f8:80:56:
                    e0:47:05:bf:76:bc:7f:b6:29:47:16:c6:91:ce:83:
                    62:93:ab:e4:96:a7:83:32:bf:cc:2f:c0:4a:4f:06:
                    47:46:46:e0:81:2f:f7:a7:d1:70:f0:50:43:14:33:
                    9c:bd:f6:e3:54:da:6c:56:41:c0:7a:40:35:a6:b4:
                    24:56:85:f9:30:ba:62:c4:d9:78:7a:d9:5c:01:96:
                    21:c7:8d:eb:ea:17:0f:fc:65:81:9a:57:8f:9a:62:
                    c9:81:98:65:9b:a1:71:f4:fd:46:e1:00:77:70:23:
                    ac:74:82:67:f2:4b:e5:33:94:e8:9d:6a:b2:9a:a8:
                    e3:87:00:f1:19:7e:e3:2a:2f:06:00:19:92:df:4f:
                    df:d1:d4:c6:d6:21:c9:a5:cf:2b:07:c2:83:7a:3c:
                    02:db:57:21:21:74:e5:de:69:9d:0a:5e:7d:30:07:
                    93:df:a9:49:bb:09:87:e3:02:e1:1e:dc:a1:96:64:
                    26:8f:45:6c:04:7a:72:3c:d9:79:c5:6d:3b:29:24:
                    66:9c:bc:24:64:c2:69:1c:29:3c:61:53:75:44:12:
                    e9:98:4c:17:cd:bc:60:85:f5:c2:3f:90:6d:cf:63:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:26:9E:5D:57:12:DC:4B:6B:47:BF:9A:E7:81:0F:6B:42:B9:43:ED
            X509v3 Authority Key Identifier:
                keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:74:e6:1e:29:fa:e2:88:f5:24:f2:fe:ec:92:83:bf:cc:
         6f:a0:f5:59:b0:98:4c:a4:4d:4d:5e:b0:ba:17:85:af:da:8d:
         4d:5c:4a:ac:c9:8c:dd:52:ea:fb:da:81:2d:ff:dd:4d:d5:6f:
         34:cc:4c:ed:77:52:91:45:4a:c9:7e:ef:89:14:2f:b0:ba:e2:
         05:4e:e4:aa:6c:50:88:21:6a:5d:bd:eb:10:67:fc:40:1e:b6:
         dc:b2:ab:0c:4d:79:fb:83:23:6a:b8:aa:e4:be:32:a1:ef:42:
         58:4a:7d:b5:cf:d3:94:23:9d:f3:c7:cd:64:6c:d4:29:41:93:
         38:1e:4e:91:63:76:9c:ff:8f:d1:58:0a:63:3f:2f:68:47:bb:
         a8:12:c2:51:a9:22:20:ea:bd:67:42:8c:ef:47:b5:b2:b3:11:
         a6:6e:16:b0:e8:4d:6b:fa:74:2e:22:1e:af:c5:f5:70:d8:1f:
         57:1f:64:72:fc:2c:5d:24:08:ae:15:38:78:c5:5a:7f:27:10:
         4e:63:76:e2:e5:c4:44:51:0e:48:02:55:17:6d:9d:12:81:24:
         01:c8:ae:3c:a4:ff:81:10:91:e1:1e:fc:6b:55:d2:25:f3:88:
         d2:2c:a9:2a:41:bd:49:4f:a4:da:dd:b9:33:ab:ac:f1:95:2f:
         a4:83:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:58:17 2025 by rpki-client