Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          G8mo9oeROj+iKiE4KuL8AFBpyHF7CDlNg1U7q75x+lI=
Subject key identifier:   F9:D9:B5:48:B8:17:0E:50:0E:D0:2A:81:0A:5E:D1:F6:F3:E0:E7:27
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       0197BB594F1928D1F74943DEAC596C0879F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0CED
Signing time:             Sun 29 Jun 2025 11:01:21 +0000
Manifest this update:     Sun 29 Jun 2025 11:01:21 +0000
Manifest next update:     Mon 30 Jun 2025 11:01:21 +0000
Files and hashes:         1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=)
                          2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=)
                          3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: NK/WIH2XOQf/LooC4P3UL/FRHJmvNvL+MnUg+DSg/vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:59:4f:19:28:d1:f7:49:43:de:ac:59:6c:08:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Jun 29 11:01:21 2025 GMT
            Not After : Jun 30 11:01:21 2025 GMT
        Subject: CN=f9d9b548b8170e500ed02a810a5ed1f6f3e0e727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:7a:1d:4d:72:3e:c5:4e:c8:91:e3:ad:43:
                    a5:6d:38:3a:89:ff:10:21:65:39:3a:ce:27:3c:37:
                    fb:bc:9e:82:73:4f:c0:ad:e4:73:9f:8b:7e:65:9f:
                    4c:42:08:cd:c1:db:96:f8:eb:ab:f7:e6:9a:ac:f6:
                    85:cb:dc:41:6d:7a:5d:8e:bd:cb:0c:a8:84:ec:5f:
                    81:fd:90:42:a5:d1:e7:15:ae:ae:da:22:b2:00:0b:
                    ba:9f:a0:8c:aa:78:c0:7e:6f:ed:78:2e:e7:bb:28:
                    51:c3:0d:00:90:92:f9:8e:01:47:c4:ff:e1:69:5c:
                    ae:ba:f0:0d:77:27:6c:b6:54:82:80:ca:d6:70:ff:
                    70:cd:1f:49:b6:8b:1d:3a:81:39:56:38:8c:f1:31:
                    73:b7:ae:35:2f:77:10:03:97:f3:ae:1c:64:8b:19:
                    b8:42:73:78:87:17:f6:cb:6b:48:26:9f:9f:ea:6c:
                    19:57:19:23:63:65:90:c0:2e:06:e9:95:fe:b1:40:
                    3c:46:d2:b5:ae:9d:81:76:6b:46:f5:c0:26:9b:08:
                    8e:40:40:2a:29:43:ed:dc:93:8c:d5:a5:77:1f:15:
                    94:30:00:32:5a:88:14:17:e5:56:74:6b:37:2a:72:
                    b3:ef:a8:b7:f3:80:26:b9:98:e9:bc:4a:ba:73:98:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:B5:48:B8:17:0E:50:0E:D0:2A:81:0A:5E:D1:F6:F3:E0:E7:27
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7e:9a:cd:84:08:30:21:cd:fd:58:8a:08:f6:83:6b:42:0d:
         f1:e6:24:ec:1f:fe:a5:43:22:51:35:c4:20:cf:16:a7:33:54:
         0a:92:5a:b3:5c:4c:a1:86:f2:40:eb:ef:89:cc:3a:aa:4a:d6:
         87:30:5f:68:db:6c:a3:ca:b2:38:96:5e:35:c7:d5:1e:6f:29:
         1d:bd:ef:f0:46:fa:96:fa:e9:f3:f7:88:c4:6f:d3:e6:e2:2c:
         d8:7d:0d:04:70:e5:3f:33:df:a0:db:d7:90:9c:0f:e1:c8:57:
         9b:0f:11:00:dd:5d:21:45:72:c8:54:9b:14:16:8e:6e:ad:d4:
         f0:ea:43:40:3b:ba:63:a7:a3:0f:ec:b3:01:2e:1d:97:37:ba:
         ac:13:0f:e3:1a:3e:b6:76:74:ce:78:0a:22:13:ad:a5:49:3c:
         34:b6:64:ff:31:80:81:03:a7:cf:bc:eb:d7:3d:23:be:42:0b:
         06:52:14:d3:03:74:f9:fc:ea:f7:43:d5:24:cf:38:36:0c:0e:
         1c:a4:79:d0:b5:d9:de:68:9d:9d:50:62:b9:09:b5:72:db:63:
         e0:78:95:57:68:de:e7:20:fb:7b:dc:ab:56:26:db:17:17:5f:
         6a:a9:56:fc:ac:81:d1:d1:4d:2f:de:4b:43:7e:a4:c6:76:56:
         22:92:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:41:01 2025 by rpki-client