Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File:                     u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier:          3ivdPJHuGhloVZ0SNra8Jt3DO5W398dmv2hODa8Cgcg=
Subject key identifier:   63:4A:4E:2B:72:4F:77:6B:4A:5C:24:9F:95:29:3A:E7:F6:71:ED:83
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer:       /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial:       0197B6D79ADD160663D37768AE4B5064D1F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 14:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:12 +0000
Files and hashes:         1: 4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa (hash: T/rxg5SROv77xR3vA3yXKL1TTkjTzRNlaWirdpsIt6c=)
                          2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: x8NGkUnbKTYVwb8qr+E8OqI1E04NHi39BI+yzelP2/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:9a:dd:16:06:63:d3:77:68:ae:4b:50:64:d1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
        Validity
            Not Before: Jun 28 14:01:12 2025 GMT
            Not After : Jun 29 14:01:12 2025 GMT
        Subject: CN=634a4e2b724f776b4a5c249f95293ae7f671ed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:3b:2e:0e:44:fe:6e:ef:94:30:7b:73:e5:
                    d1:72:4b:e7:f5:9f:7d:ff:a1:e9:07:53:59:8f:0e:
                    d2:97:c9:e6:81:a1:43:4e:36:5e:26:15:14:1e:58:
                    0b:d8:0b:26:a8:d0:6f:30:c7:19:86:39:64:29:d2:
                    35:00:41:76:19:9c:42:da:5e:e5:46:16:8a:ce:fd:
                    10:8b:55:7d:51:57:21:59:3f:ee:4b:c2:cf:61:a5:
                    6f:cd:61:46:09:11:b6:6f:25:5d:c1:1b:1a:b4:ed:
                    c0:c0:13:00:b3:30:d4:65:15:ee:8f:07:f7:79:b3:
                    93:b4:a1:57:dc:33:cc:b0:4b:81:23:41:52:4b:21:
                    bb:4c:98:64:49:3a:aa:d5:ed:cb:8c:b5:57:c3:69:
                    d8:5c:e5:96:45:61:c0:02:1a:a1:41:45:c6:d7:1b:
                    31:a4:de:98:8a:0d:4b:6e:48:f5:27:1c:1e:64:ae:
                    b5:7c:58:38:23:45:84:de:f4:4c:34:ef:4a:7c:1f:
                    c1:ef:62:27:ea:bd:e3:d5:24:7f:ed:25:b8:86:19:
                    04:73:ad:33:15:ef:8a:85:49:d0:97:a7:13:cd:40:
                    b5:e8:a0:18:6e:f0:a4:38:23:15:45:64:b1:cf:be:
                    c5:4b:3a:85:ea:03:bd:31:7d:2b:9c:8e:d3:29:4c:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:4E:2B:72:4F:77:6B:4A:5C:24:9F:95:29:3A:E7:F6:71:ED:83
            X509v3 Authority Key Identifier:
                keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:66:25:41:3e:60:fa:a0:4e:04:12:0e:7d:96:ec:8d:10:
         2b:30:8b:30:ab:a9:80:05:cc:77:7e:b7:41:0c:0e:c2:44:c8:
         bc:0c:59:8e:ef:3a:73:44:94:1f:2f:55:68:6f:c6:99:31:ec:
         40:8a:e8:e6:49:50:cc:5f:4a:58:4a:8a:fe:39:1d:22:b5:c1:
         a6:ab:d2:fd:30:db:af:c3:29:d2:a0:da:32:ff:ba:f5:a3:27:
         1f:1f:10:1c:9c:23:e3:0c:3c:3f:89:1e:c0:f6:06:58:ab:86:
         82:b8:a5:9a:07:a0:2f:9a:34:8e:cd:4c:43:55:5d:68:af:1d:
         27:12:46:95:a1:41:30:22:e4:cf:9d:55:b1:b0:df:69:f8:5a:
         05:d0:48:84:1b:ce:97:e8:86:03:71:21:59:d7:ab:62:5b:11:
         34:44:09:e0:f2:da:61:45:8c:67:7f:6e:fa:26:8b:3e:5a:e3:
         6c:ef:43:e0:ca:68:5f:ad:5d:df:ee:75:b7:d4:7e:8b:2a:59:
         55:92:85:c4:e8:46:d7:f9:62:c5:15:3a:22:94:f7:a7:25:59:
         29:ce:83:e0:dd:31:c7:22:0d:92:75:2d:01:56:b8:16:47:f3:
         18:59:e1:54:76:90:3e:04:7c:dd:64:3a:13:5a:0a:e7:b5:50:
         e3:64:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:23 2025 by rpki-client