Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          aoaVGdbn8UE7XMM3HvMefjvKjyVqotOQq3mq5j4SBYU=
Subject key identifier:   3E:6E:AD:23:B3:46:8B:42:83:6C:65:0C:C7:88:75:41:E6:C8:F2:FC
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       0197CA5DFF59DE0183736AC1DDB6D26F57AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0838
Signing time:             Wed 02 Jul 2025 09:00:47 +0000
Manifest this update:     Wed 02 Jul 2025 09:00:47 +0000
Manifest next update:     Thu 03 Jul 2025 09:00:47 +0000
Files and hashes:         1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: FC1i86BTDfkgdi4XeUV0QaYe+/wLyWbm0uaFQDrkl3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:5d:ff:59:de:01:83:73:6a:c1:dd:b6:d2:6f:57:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Jul  2 09:00:47 2025 GMT
            Not After : Jul  3 09:00:47 2025 GMT
        Subject: CN=3e6ead23b3468b42836c650cc7887541e6c8f2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:14:43:b8:22:0f:eb:c9:69:4c:48:aa:68:
                    52:70:1d:87:07:7e:b1:29:13:0d:c5:34:fd:54:2d:
                    77:e9:4a:d7:32:35:b8:14:37:62:1f:21:0d:e4:b6:
                    9a:c8:8d:9e:be:73:78:8e:26:da:bc:b6:06:7e:d9:
                    85:42:61:c5:41:cf:66:8c:f0:3c:90:11:c6:19:a1:
                    81:ae:18:af:a7:d7:8c:fd:cc:32:85:5b:49:28:f6:
                    94:2f:41:15:46:80:3a:5b:e1:d1:e6:23:36:b5:a1:
                    e6:f3:d4:e4:53:bf:b4:a9:d7:41:20:de:a0:75:cf:
                    62:e3:f8:1a:02:04:65:0a:5c:8b:0b:ff:b9:b0:c9:
                    de:d3:bb:f3:66:28:97:73:72:34:a3:0a:b2:ab:e6:
                    30:73:be:42:77:69:99:c4:27:82:f8:36:af:15:e6:
                    c3:4f:01:2e:60:d8:06:5c:b5:84:56:05:24:1c:2d:
                    c6:89:d7:93:dc:7d:21:d1:c1:3c:47:47:c2:fa:0d:
                    0e:09:0d:e2:9e:0b:be:9e:fc:7c:1a:6c:9b:90:f4:
                    8c:df:e8:8a:87:af:34:f6:50:92:7f:63:27:5a:b5:
                    61:6e:8e:2e:55:39:50:97:89:b7:9d:63:e5:d4:e0:
                    6b:90:12:a4:8c:16:1b:ce:19:6f:c4:9a:18:b0:1f:
                    50:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6E:AD:23:B3:46:8B:42:83:6C:65:0C:C7:88:75:41:E6:C8:F2:FC
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:f2:4f:3f:93:ed:a0:91:09:27:46:3c:38:63:a0:5c:3b:
         90:9a:80:72:08:b2:11:4e:08:92:d7:86:26:84:69:a0:22:07:
         72:b8:5b:8d:af:26:ef:9c:08:79:1b:a3:d4:29:b6:ed:ac:a5:
         2d:5d:11:02:e9:85:31:75:52:0d:47:5d:33:77:14:79:9d:d0:
         a0:45:68:6d:81:95:b0:61:71:2c:af:1a:61:5b:db:d5:1c:cc:
         10:d3:6e:dc:19:5f:b0:ec:12:a9:0c:4b:51:5e:b8:50:e9:65:
         7a:dc:3b:c9:25:6f:a0:10:8a:75:e2:38:f3:b3:a4:b1:e1:41:
         50:b9:7e:5d:4d:d7:29:5c:60:ae:77:6e:d4:01:38:57:7e:35:
         4f:2d:b2:80:9b:4e:c9:3f:da:5e:f4:f6:53:41:c7:56:dc:ba:
         90:42:14:6c:91:b5:29:46:c3:4a:e1:03:77:ff:d0:35:86:f1:
         06:64:81:36:50:6c:15:c2:c3:35:54:2f:86:13:2b:d0:c0:91:
         ba:94:f0:32:81:da:f4:d9:44:44:46:de:43:87:a0:ca:36:93:
         f9:f6:14:f7:c9:cd:be:20:1f:43:63:9d:5b:5c:02:b0:43:70:
         10:5e:d2:cd:74:29:9f:c4:2f:30:24:92:21:a5:aa:43:96:2b:
         52:fe:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:36 2025 by rpki-client