Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File:                     uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier:          DQKLikdRQyhkIF7tRC6l2yxssWawbi4ElJ9QnwThDng=
Subject key identifier:   48:BA:4B:9A:C4:49:5E:67:BF:BE:D7:B8:FB:02:11:A8:79:E6:F5:75
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer:       /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial:       019749D627EF7684314516C302495EC7795F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number:          1034
Signing time:             Sat 07 Jun 2025 10:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:01 +0000
Files and hashes:         1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
                          2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: YQqXObJimLuxfGKBPEHrqSkOPM5rK+El4AKdVIHeXMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:27:ef:76:84:31:45:16:c3:02:49:5e:c7:79:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
        Validity
            Not Before: Jun  7 10:01:01 2025 GMT
            Not After : Jun  8 10:01:01 2025 GMT
        Subject: CN=48ba4b9ac4495e67bfbed7b8fb0211a879e6f575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:29:4a:06:b0:74:7d:8b:a7:94:64:86:7d:
                    0e:91:30:52:5d:a6:60:fc:88:00:eb:11:f0:99:4a:
                    2d:5a:c3:0d:57:ce:4d:02:ef:25:d6:52:e7:75:dc:
                    2c:1c:5b:73:ad:5f:58:10:ce:ea:7b:86:dc:63:1e:
                    e6:a6:66:7a:f9:08:27:22:08:e9:e2:8c:e8:64:ec:
                    fc:9d:75:49:e8:d6:fc:54:41:3e:7d:8e:44:d6:3b:
                    42:3b:7e:ac:fb:84:ab:d3:36:78:86:7e:b8:c5:a7:
                    90:b7:b3:c1:47:5b:8d:85:15:29:05:8a:29:c8:2d:
                    0d:06:c1:f6:1d:06:57:36:5f:83:ce:01:20:bd:df:
                    e0:87:7e:32:cc:c7:43:e1:ec:c8:75:11:b3:26:06:
                    c0:ca:93:58:13:17:2f:a5:c2:23:d1:f7:a6:6a:a6:
                    7d:19:8d:ce:66:93:80:05:d7:e4:d9:7c:c3:16:a1:
                    a7:2a:8c:61:d2:ad:b3:7a:4d:05:c0:aa:ba:99:f2:
                    b9:95:87:ce:49:20:f7:fa:84:38:eb:c2:9c:c9:cf:
                    72:47:73:da:a4:b5:93:e9:4e:1a:49:a6:0c:2d:1e:
                    51:18:fa:ca:d6:2b:64:ff:f3:6a:c0:ff:38:12:f3:
                    ea:21:36:75:fa:05:c5:a9:05:52:0c:e3:a6:ad:ac:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BA:4B:9A:C4:49:5E:67:BF:BE:D7:B8:FB:02:11:A8:79:E6:F5:75
            X509v3 Authority Key Identifier:
                keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:99:ab:9e:a6:eb:d5:94:64:b6:a8:cd:a2:1c:f1:51:a8:d2:
         eb:56:99:89:ef:45:09:27:4f:73:ea:37:c7:5d:47:78:8c:29:
         6b:88:78:d4:02:2c:c7:7a:b3:3d:fb:e7:23:21:9d:79:24:87:
         6a:c5:4d:86:87:50:f6:d2:89:2d:57:c0:f2:6c:a1:b1:5a:e6:
         2d:0c:ba:9c:9d:6a:a0:19:2e:d5:39:4d:55:1d:a2:e4:79:80:
         53:9c:10:8e:0f:00:a4:a7:15:b3:5b:32:46:3e:b1:1d:9a:87:
         d0:06:34:44:85:b8:0c:42:fd:18:5b:a1:90:2f:35:3d:39:5f:
         64:0d:e0:6d:0c:38:cf:8e:27:a1:73:b2:19:dc:18:50:30:8c:
         5a:74:c4:4c:37:cd:f4:87:86:d2:1c:18:0e:ec:95:91:1d:f4:
         d2:dc:bc:43:26:06:34:a3:d7:6f:09:cf:06:89:81:6b:bf:cb:
         8a:af:35:a4:41:9b:b3:75:79:c1:5b:7a:68:08:3d:7a:2a:44:
         36:a8:02:89:d4:2e:a1:bf:95:d9:13:6b:82:55:52:c8:c2:8c:
         63:e6:47:17:c0:84:83:af:38:a3:dd:85:73:c9:ce:e4:9c:64:
         64:09:64:78:19:f9:b8:0b:95:f0:0d:d1:eb:43:2a:9d:34:d3:
         5d:25:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:37 2025 by rpki-client