Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          KqEe97NF8XaxAgePp4pO1BdTI//7257bY0J4Qz9/cRg=
Subject key identifier:   EF:31:D4:45:5C:30:96:CD:EC:33:54:8D:2E:25:24:91:A1:E5:93:40
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       0197C313141FAC73A5AB1FED33896D91F041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          0EDE
Signing time:             Mon 30 Jun 2025 23:01:36 +0000
Manifest this update:     Mon 30 Jun 2025 23:01:36 +0000
Manifest next update:     Tue 01 Jul 2025 23:01:36 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
                          3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
                          4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: ONYvwe36KPcKVp5aglXE71SdSz5MFYkhLWc2QssO7GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:13:14:1f:ac:73:a5:ab:1f:ed:33:89:6d:91:f0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Jun 30 23:01:36 2025 GMT
            Not After : Jul  1 23:01:36 2025 GMT
        Subject: CN=ef31d4455c3096cdec33548d2e252491a1e59340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:da:af:e2:e9:07:a5:70:a6:bd:f4:4d:e1:
                    e5:62:17:8e:e7:11:b4:d1:ab:f7:8d:99:54:82:b6:
                    8e:ec:65:d2:41:84:9c:04:f4:cb:61:6d:71:4b:89:
                    0a:f6:75:ff:f2:49:f3:c0:2b:e1:5f:f9:b6:57:d9:
                    8e:6b:ff:c2:7b:aa:06:e3:7e:5d:14:34:7d:cc:b5:
                    3c:be:8f:a7:ea:e0:09:dc:b3:93:4c:f7:31:08:3c:
                    eb:6b:a7:74:10:ea:d5:28:fc:b3:8d:89:a4:4b:80:
                    0e:66:59:b3:cc:69:b7:2c:56:17:c2:e3:7d:d1:fa:
                    c3:7e:2c:b5:e6:c5:5b:e8:e1:27:e5:4b:e3:c2:4f:
                    65:4b:af:f5:83:40:5e:a1:61:16:4e:49:5e:7d:56:
                    c8:e3:0d:43:fd:03:e3:3c:2e:42:1b:d3:8b:51:77:
                    e9:4a:21:21:cb:22:ff:d3:ee:53:b3:ab:39:e8:b9:
                    30:bc:af:4b:a5:98:47:73:1e:b7:8e:f0:96:51:6d:
                    70:97:1c:2f:9c:bb:82:21:b3:39:a2:73:a8:1a:16:
                    58:a0:ea:5e:7e:92:f4:dd:a6:fd:72:b9:ef:ac:4b:
                    77:a7:32:52:6d:b8:8e:6f:a1:c8:d9:62:8c:82:d2:
                    5c:a3:46:fa:af:b7:5a:57:5c:19:cf:2f:58:4d:b0:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:D4:45:5C:30:96:CD:EC:33:54:8D:2E:25:24:91:A1:E5:93:40
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:66:3b:72:b5:a5:7b:34:1a:25:24:aa:1a:14:68:b6:2f:7c:
         ca:0b:be:75:d7:ba:a3:b3:a7:54:bb:e0:1d:2e:14:d9:0d:dd:
         84:6c:b5:8d:37:fb:36:75:49:5a:82:cb:4e:b0:bb:b6:50:e6:
         3a:a7:04:38:56:50:9e:d9:e0:0f:fe:8e:7d:14:0a:45:ed:7a:
         43:01:77:19:22:33:74:7f:e7:e9:1f:2e:b3:3d:aa:cf:03:b9:
         33:69:d6:cc:b7:99:16:5c:44:0b:0c:fd:cd:fa:4a:04:b8:87:
         1a:01:ed:17:d3:59:37:6e:07:3c:a1:eb:08:6d:75:6c:7a:c3:
         59:e1:73:2b:34:a9:b4:70:89:03:08:5b:97:78:5f:1d:35:54:
         4a:8c:29:24:6b:74:89:9a:bf:1c:64:5f:da:54:02:98:10:f0:
         85:9b:d2:30:e2:c1:6c:ac:cb:03:d1:8a:69:c9:4c:4f:19:41:
         94:cf:f0:a1:06:c5:d1:58:5f:c7:c0:37:6d:84:81:26:86:ad:
         f1:c5:dd:d6:79:63:30:bb:01:c9:b7:f3:4b:cc:8d:57:4b:fc:
         d0:b0:f0:20:e4:9d:a9:f6:d3:88:b8:e2:a6:00:e4:97:40:dd:
         01:96:78:82:0b:30:5a:d2:17:cd:3f:cd:a2:d2:c2:ff:9a:85:
         0c:db:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:36:23 2025 by rpki-client