Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File:                     uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier:          2fc9fQ/MohBercvsJW2V1hEgAnC6jZyR61/9n7WCJtY=
Subject key identifier:   4E:14:24:A0:EB:2F:DD:98:1B:7A:6D:10:E7:4A:90:A8:38:CC:F0:F7
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer:       /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial:       0197B70EFC2E5BE7AC1A2CE660EBDF7558A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number:          03F8
Signing time:             Sat 28 Jun 2025 15:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:41 +0000
Files and hashes:         1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=)
                          2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: ahP8jSbxHAOcCGDhG0uxKHK0XtzA6Z9Qlg/panWqBUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:fc:2e:5b:e7:ac:1a:2c:e6:60:eb:df:75:58:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
        Validity
            Not Before: Jun 28 15:01:41 2025 GMT
            Not After : Jun 29 15:01:41 2025 GMT
        Subject: CN=4e1424a0eb2fdd981b7a6d10e74a90a838ccf0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:da:c7:0c:4a:ab:e4:7e:51:53:e4:c1:be:
                    4b:88:ee:1c:f0:1e:6c:be:6a:12:19:17:ec:9c:f6:
                    08:8b:41:a2:d0:e3:bd:db:53:63:06:ab:39:74:d9:
                    a0:ea:2f:19:75:ac:7a:68:02:60:a6:8f:8f:5c:34:
                    ce:2b:1b:a9:36:e8:ac:8e:37:ca:90:5c:b5:c1:96:
                    7b:19:89:9c:e8:be:a8:d9:46:5e:b4:e7:59:44:af:
                    6f:cb:b1:5a:4b:c0:e8:fd:0e:a0:16:57:1e:a0:ca:
                    95:ac:52:39:50:ed:df:51:e2:2a:24:fc:f2:19:3b:
                    36:93:09:41:3f:3b:12:d6:80:22:b8:cc:fb:69:e8:
                    d3:07:81:80:04:94:6b:80:0f:17:1d:20:21:76:f4:
                    31:6e:94:a7:60:75:c8:f8:63:18:63:79:07:83:85:
                    0c:c1:f9:5c:32:26:49:64:55:0c:8b:13:74:7c:4b:
                    c5:ea:3a:ab:a5:ea:c3:e2:73:a4:a2:5b:33:ca:8a:
                    9e:61:b0:df:09:08:22:d2:68:a8:59:f4:8e:00:5e:
                    ce:a5:92:ed:bc:d5:6c:0e:d7:2f:8a:42:95:53:92:
                    3d:08:b6:5b:5d:ef:3b:bd:49:3f:b4:a2:bf:4b:0e:
                    0f:b0:4c:41:4e:37:97:1e:0d:7d:d6:27:7f:a9:2e:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:14:24:A0:EB:2F:DD:98:1B:7A:6D:10:E7:4A:90:A8:38:CC:F0:F7
            X509v3 Authority Key Identifier:
                keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:3e:87:10:60:85:ab:6a:1b:62:64:0f:31:71:a1:36:7f:
         51:8b:f0:b6:b1:3d:3f:ac:e6:f7:41:0b:c9:e6:ed:33:cf:d3:
         b8:81:c0:5e:bd:00:55:16:ea:fa:38:fd:68:0a:db:1d:da:d8:
         62:87:6f:7f:c4:57:1a:87:dc:9b:e7:0a:97:4f:f3:db:bc:8e:
         4c:6a:bc:a4:61:2b:72:f3:49:8f:b5:5a:6d:6e:be:c5:a8:ae:
         64:1e:7c:eb:86:f5:34:83:c4:68:d6:9b:ef:59:02:d7:0f:bc:
         d4:43:4d:63:5c:04:c4:94:d2:b0:f3:7a:98:b7:cb:a0:af:03:
         66:fc:88:95:c6:4f:28:7e:e2:7f:a8:f2:70:80:cf:ed:bd:aa:
         47:44:2c:a8:48:6e:65:7c:f9:6d:d7:af:44:a9:63:7f:1b:54:
         8e:bf:e9:1a:2f:f5:a6:86:fb:df:b7:d4:c3:81:8d:86:f0:77:
         c7:4f:c8:58:2a:bc:d3:2b:83:c7:75:fd:41:63:23:88:53:cb:
         60:32:55:91:8f:92:2a:0c:ba:07:42:31:15:f2:ce:d9:8f:5a:
         e2:ea:aa:06:55:8a:34:b0:51:85:6f:d1:7e:24:bd:76:93:bc:
         55:29:59:37:17:b5:14:86:4c:a0:9d:15:02:60:eb:66:1f:48:
         e0:d2:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:17 2025 by rpki-client