Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          zovMjZaIzl8pu/hckp3jcTk42gHm7zKPqsz4ydBeLxY=
Subject key identifier:   09:7F:BB:54:EF:D3:CB:C4:C4:90:CD:1E:58:EF:AD:0F:14:5D:23:3F
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       0197B70E774BB6EACCD58BAD315EA421E9BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          01C4
Signing time:             Sat 28 Jun 2025 15:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:07 +0000
Files and hashes:         1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: MW4hDCOmJ31+hMLDSgyW8RWCgyVzBUleQx6VxhO1B8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:77:4b:b6:ea:cc:d5:8b:ad:31:5e:a4:21:e9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Jun 28 15:01:07 2025 GMT
            Not After : Jun 29 15:01:07 2025 GMT
        Subject: CN=097fbb54efd3cbc4c490cd1e58efad0f145d233f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:9f:81:11:8e:1b:a2:43:a9:31:82:1e:86:
                    bf:e6:43:4b:81:76:78:1d:4d:57:e1:2c:2b:3b:e8:
                    bd:57:86:5e:57:4d:96:98:7e:f1:f9:ae:32:65:49:
                    da:d9:86:03:4a:ef:6e:bb:51:af:12:02:1f:c7:69:
                    92:ff:3f:d4:33:f8:b3:6e:5d:0d:19:55:46:2c:34:
                    cd:e1:9e:b4:75:a7:58:7a:38:81:07:bb:49:4d:74:
                    8e:4d:a4:16:7b:a4:a0:0c:49:f1:68:37:d5:20:47:
                    2a:eb:ba:ff:ca:ea:d5:4b:cd:47:60:90:2c:88:53:
                    ef:74:84:a8:44:51:e0:e4:03:e0:0a:4b:bc:cc:bf:
                    da:76:87:de:79:2a:db:98:d3:45:92:0f:f4:be:fd:
                    a1:f8:f7:7b:97:d8:75:b1:65:b1:f4:5d:60:30:59:
                    0b:04:5a:ed:65:f5:73:ed:86:d2:35:df:8f:a0:b7:
                    9b:ef:a6:d1:4d:63:36:e8:8e:27:ea:1c:42:4b:f2:
                    f2:10:ef:35:ce:d5:1d:1d:b8:bc:ab:02:1b:cf:31:
                    40:27:85:18:4a:4f:1b:0c:ee:b6:8d:26:4d:c8:ff:
                    f6:c9:2f:05:2a:f2:71:aa:8a:51:db:ca:e2:5e:12:
                    15:5f:ab:ad:9b:75:28:c1:c1:b5:b9:7f:2d:fb:00:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:BB:54:EF:D3:CB:C4:C4:90:CD:1E:58:EF:AD:0F:14:5D:23:3F
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:78:19:78:d5:6e:1c:10:40:be:7b:d9:b4:31:cb:74:90:04:
         78:81:37:e4:5c:03:0a:15:07:91:1d:1e:da:15:3d:b3:06:4a:
         3e:a5:b8:8b:8b:98:0a:28:8e:45:ad:db:0f:77:b0:15:17:b0:
         12:3f:03:b6:1a:fe:ae:e8:df:ff:af:df:f2:c4:2a:12:9b:a5:
         a5:ae:5b:a6:11:fc:99:9d:bb:7a:8b:a1:e4:11:50:6a:62:4b:
         ba:0d:fa:8b:f6:ae:19:37:d3:1b:8f:00:cb:52:39:1e:36:26:
         07:7a:03:53:ba:64:c6:fe:59:a6:42:c2:43:e0:01:10:a5:b2:
         b0:41:05:f4:c0:2b:3a:f0:fe:59:0c:f4:5f:dd:88:e3:d7:e1:
         51:51:c5:0a:67:4c:8e:62:4e:ca:d3:b5:49:3f:f2:fb:62:71:
         81:25:99:02:bb:47:d7:aa:7f:de:8b:0b:e7:ed:6e:9f:76:fe:
         e5:b8:17:93:dc:b2:65:26:c3:a0:8a:60:2b:85:31:15:2e:25:
         c4:4b:7f:7e:9a:5b:37:9e:89:23:fa:54:2a:61:95:01:af:ca:
         1b:54:fd:a4:26:88:09:27:d4:9e:6d:5d:02:ad:f8:bf:e1:d9:
         e2:b8:d6:d7:61:d7:65:c4:57:c5:4e:c2:25:07:9c:d7:7d:95:
         24:ad:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:41 2025 by rpki-client