Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          Eef9ty8REwuAAVyJ3jfFxnjUmZcmM5kud73d0TxhX00=
Subject key identifier:   8D:55:57:7F:F5:A5:C5:57:20:B3:17:5A:3D:AB:50:71:27:EC:EF:72
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       0197C7940459B1B1EB71BEB8A7ED2E9AC948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          15BF
Signing time:             Tue 01 Jul 2025 20:00:55 +0000
Manifest this update:     Tue 01 Jul 2025 20:00:55 +0000
Manifest next update:     Wed 02 Jul 2025 20:00:55 +0000
Files and hashes:         1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
                          2: Lmvz7UtyX1lXwrZFQxyw10f965g.roa (hash: vCjTy8e/EOIM+a9VJ+a62nLt4xZsnuTV5eHITh46LzI=)
                          3: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
                          4: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
                          5: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: IneSluKCjN6IJgDmiQE8hLvU3Pfz0t9hCgtnAgwr9ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:94:04:59:b1:b1:eb:71:be:b8:a7:ed:2e:9a:c9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jul  1 20:00:55 2025 GMT
            Not After : Jul  2 20:00:55 2025 GMT
        Subject: CN=8d55577ff5a5c55720b3175a3dab507127ecef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:3c:9d:f5:0f:e4:f3:cc:2f:73:bb:0c:06:
                    d3:0f:c1:f4:ea:df:c4:57:56:5f:30:02:68:3a:96:
                    f0:b8:d6:60:fb:88:f1:40:4a:c0:97:fb:d7:e9:29:
                    f4:e3:65:d4:3b:2b:1e:30:33:ec:6f:65:bb:86:41:
                    4a:10:12:17:b5:6e:cd:ca:29:3e:18:25:77:52:9b:
                    a7:ac:af:6e:ed:5e:e9:9a:64:d9:0b:02:f8:2a:f7:
                    ec:51:50:9f:2b:47:5a:ed:2b:90:40:64:43:29:82:
                    ea:fd:18:c9:27:18:1d:f1:54:50:64:b2:4c:a1:b9:
                    75:e1:d2:28:46:86:5a:b5:43:15:8b:08:15:d8:f3:
                    55:25:d6:c4:5f:a5:c0:46:c5:bd:17:36:82:2b:8d:
                    a9:3e:34:46:c6:56:f9:87:b4:d9:4f:52:90:f2:e9:
                    24:7e:3b:96:45:4f:78:73:94:13:4c:74:2c:86:a2:
                    98:46:b9:2e:d5:a4:f3:85:be:1f:9c:bd:24:6a:9b:
                    c8:b5:2e:26:86:c3:a1:17:e2:cf:14:58:f5:dd:98:
                    d8:5c:07:b6:7f:81:8f:fd:de:f8:5b:a7:84:fd:08:
                    55:15:db:8d:0a:aa:5d:20:7d:02:da:d1:7c:5c:27:
                    15:31:1e:f4:a2:61:1c:e9:88:7e:24:e2:c9:80:da:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:57:7F:F5:A5:C5:57:20:B3:17:5A:3D:AB:50:71:27:EC:EF:72
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9d:ad:8b:cb:5b:c6:df:ac:80:1f:f7:b6:f8:1c:e7:58:54:
         c9:62:e7:a7:13:8b:43:2d:b2:5b:79:6b:69:94:37:02:2a:c4:
         b3:d0:a0:d1:58:58:6d:de:e5:73:e4:09:92:7d:81:95:d2:e7:
         7e:3d:10:b2:6b:7d:a2:8f:d0:93:26:be:13:d1:99:db:be:00:
         a3:f1:ca:c4:21:1f:7f:3d:4f:2a:64:a1:60:57:80:42:28:1a:
         bb:61:83:5b:a1:cf:7c:93:45:ca:09:c9:86:36:9e:4f:76:9d:
         c2:80:94:ba:dc:da:08:df:0b:bc:1f:e6:2e:d5:a8:fb:cc:d4:
         42:fe:d7:02:ad:29:46:19:63:ef:28:5c:fe:59:50:46:a7:0e:
         12:46:d2:9f:4d:9f:35:57:3e:19:23:f0:43:c1:2d:03:7e:e4:
         95:81:08:ad:db:d5:18:98:a2:5a:65:44:fc:4c:eb:ed:0a:f3:
         5c:16:90:7b:14:c8:e6:9f:da:a8:06:38:e6:34:3b:40:03:fe:
         6b:2d:5a:40:22:c5:3d:0f:17:ff:24:78:a1:78:d1:4b:ee:f4:
         06:13:ee:d4:c6:6c:a5:b4:47:83:c5:34:a0:9a:83:d4:58:87:
         d4:40:81:f6:e1:be:48:77:0e:fd:48:d1:08:11:46:7e:b4:2c:
         b5:46:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:42:28 2025 by rpki-client