Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File:                     uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier:          rpAF+9NSHa1ewDidklCwujw7MHr6JWQdf9jv4HeFq6U=
Subject key identifier:   6B:EC:38:E2:1D:E8:E8:5E:29:45:E1:FE:80:E3:3F:EF:BF:C5:4B:15
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer:       /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial:       01974F331D4C64ABA61EBCABBED3740BB6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number:          039C
Signing time:             Sun 08 Jun 2025 11:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:39 +0000
Files and hashes:         1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: BlYzVgE7rWXv06HBOfXugWp7r58e/I9vb1NoQthTcQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:1d:4c:64:ab:a6:1e:bc:ab:be:d3:74:0b:b6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
        Validity
            Not Before: Jun  8 11:00:39 2025 GMT
            Not After : Jun  9 11:00:39 2025 GMT
        Subject: CN=6bec38e21de8e85e2945e1fe80e33fefbfc54b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:4b:ea:14:bf:83:40:c7:00:b6:53:6a:43:
                    1a:99:df:90:7a:6b:43:b2:17:33:4d:20:ce:b3:fe:
                    e7:13:1b:da:6a:35:a7:4c:94:d8:fb:99:d1:a1:da:
                    33:d9:f4:e5:d9:dc:38:b7:4d:45:bc:67:da:2c:ba:
                    dd:7d:9b:1c:eb:aa:62:9c:6a:01:e0:8a:aa:6e:c2:
                    5d:cb:e1:e5:ce:9e:00:cf:d4:2d:4a:a2:55:22:24:
                    75:7a:ff:35:b6:04:22:70:2d:62:08:ca:fb:5f:39:
                    db:8b:56:01:a6:00:00:b8:04:92:0c:02:f0:66:a2:
                    1c:f9:29:5f:e5:ec:60:62:64:19:6c:58:f2:17:9b:
                    3e:f5:29:37:f5:be:81:a3:9f:3f:ce:b1:13:6f:00:
                    4c:05:52:1e:09:43:3c:18:73:2f:bb:53:ad:7b:a9:
                    4e:85:c9:f3:eb:0a:de:b1:ef:c5:cf:97:9b:dc:42:
                    8c:1a:d4:66:3a:af:76:20:07:7a:6f:0c:36:aa:07:
                    08:a6:be:72:a1:eb:33:29:b7:60:7a:b6:9b:b5:63:
                    a3:b2:64:87:23:3e:a3:19:78:32:d7:42:4c:46:9f:
                    9d:95:94:b6:54:c2:8a:13:7c:e8:d3:62:f9:7f:cd:
                    75:4c:30:06:3f:d7:04:30:1b:4c:d0:03:7a:e2:8a:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:38:E2:1D:E8:E8:5E:29:45:E1:FE:80:E3:3F:EF:BF:C5:4B:15
            X509v3 Authority Key Identifier:
                keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:c0:15:f1:a5:86:01:06:58:85:2c:e5:d9:ff:28:1c:37:
         b9:e4:12:ce:b4:ea:ea:12:6e:73:e2:f1:4b:6e:9a:06:15:38:
         10:ff:d4:2a:ae:1a:7c:35:29:85:1d:a8:d5:b2:66:c7:78:62:
         ed:c0:3e:9c:e6:9d:38:f2:05:e0:8c:00:5a:33:17:f2:f1:3c:
         93:4b:3f:26:cf:e9:4d:36:ff:46:03:06:85:df:75:40:fd:61:
         64:4e:04:e5:41:2d:45:fb:b8:91:a8:4f:7e:74:b4:71:ce:e1:
         66:66:1a:2c:10:b6:0c:c3:37:d5:56:cd:70:d8:79:c3:41:67:
         2d:20:1f:0b:44:ad:c5:3a:7d:0c:d1:a1:47:19:c6:b6:f7:12:
         b8:8c:7f:8e:c1:e3:7c:38:77:0b:b7:39:0d:ca:e8:58:6a:59:
         d2:7e:f9:de:61:c3:ba:a9:b5:98:be:b4:6f:de:78:65:f6:ad:
         e6:11:59:00:09:e8:4c:6d:5d:28:2c:1b:a5:52:cd:56:96:75:
         30:88:d8:27:a3:a9:bc:e4:0c:5b:b5:2b:80:25:16:0b:d7:3b:
         82:84:65:ba:2e:04:92:d3:77:fd:6d:b2:03:18:7b:61:4d:46:
         8b:ef:41:16:6d:62:5b:c3:52:97:b6:25:65:34:5c:fd:98:92:
         ef:60:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:23 2025 by rpki-client