Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File:                     UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier:          NANDVZPjQUNv/PO/ofnOcWWC8lXxkHVw22c5nE+rep8=
Subject key identifier:   77:2D:0A:7E:72:54:47:26:24:72:A9:D3:FF:04:B1:8D:27:AD:0D:9B
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer:       /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial:       019748C32DA3EFFC2B3B650054E031037FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 05:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:40 +0000
Files and hashes:         1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: b9zx2E/zlJzMzLg3K4zbkZ6Viy5RnKT5AlAxK00vcpI=)
                          2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:2d:a3:ef:fc:2b:3b:65:00:54:e0:31:03:7f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
        Validity
            Not Before: Jun  7 05:00:40 2025 GMT
            Not After : Jun  8 05:00:40 2025 GMT
        Subject: CN=772d0a7e725447262472a9d3ff04b18d27ad0d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:94:05:07:36:3f:38:e2:26:67:e6:ca:4a:3e:
                    7b:1c:93:70:62:7a:9d:78:1b:1b:e1:fa:ec:e0:e4:
                    fb:a8:1e:b2:d7:5e:e5:4d:03:83:84:bf:1c:0d:13:
                    e0:2a:63:c9:eb:5b:de:cb:55:94:16:c9:62:41:6a:
                    c1:e2:ad:ec:87:68:cc:2b:eb:1a:af:b3:40:46:ec:
                    0c:3e:7a:67:f2:5f:68:fd:cc:6d:d3:28:15:72:c2:
                    8b:64:41:45:98:d1:40:f1:ab:2d:0a:ac:c1:b4:ea:
                    19:f8:1f:f9:da:7d:b7:12:c0:bd:df:a8:bd:b5:85:
                    36:72:7d:e2:2d:71:94:88:25:84:fd:8c:71:97:7d:
                    cf:f7:98:cc:db:aa:64:38:17:bc:30:f7:04:cb:8c:
                    06:ca:a3:64:e0:05:64:c8:15:90:cb:d6:dd:6c:60:
                    9f:d3:70:d4:6a:4a:2c:c1:4a:57:5b:a3:82:e0:17:
                    da:83:79:0e:ad:09:9b:b9:69:7a:d1:b3:75:5c:13:
                    b1:45:f5:55:84:d3:78:47:25:29:7c:4e:60:46:86:
                    d1:1a:87:2d:45:c1:2b:b2:7e:fb:96:f7:32:e0:6c:
                    af:d0:97:7e:97:0f:60:dd:eb:6d:42:cb:80:86:1e:
                    3e:cf:c7:06:94:60:05:20:bf:36:76:30:72:40:4e:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2D:0A:7E:72:54:47:26:24:72:A9:D3:FF:04:B1:8D:27:AD:0D:9B
            X509v3 Authority Key Identifier:
                keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:89:a3:a1:8f:33:ff:2d:8c:be:6a:da:a8:64:0a:5c:14:6a:
         93:2a:c8:08:7f:4c:0f:26:6a:0c:12:10:fd:b5:c7:d1:de:14:
         8a:ac:66:44:eb:42:b9:7e:c6:07:c7:b0:f5:9d:63:d2:af:02:
         9f:9a:5f:fb:6a:78:0f:c8:3b:5a:83:be:2e:a3:2c:31:2f:14:
         82:76:ba:01:07:2c:eb:ea:87:65:47:67:dc:ea:82:de:20:51:
         1b:7a:16:c6:c7:2e:13:cc:ab:74:14:cd:2a:67:63:ff:d8:92:
         de:0a:92:4c:1e:dd:1f:f9:d0:0f:69:a8:89:ac:c0:ce:3e:0f:
         92:6e:a4:f7:49:d3:4e:e5:ba:ec:8b:5d:99:18:d5:1e:28:02:
         5e:2e:02:97:12:ee:5c:9c:bb:92:75:f3:5f:7c:57:8c:c1:1b:
         8e:28:8e:30:f2:55:de:e8:1e:14:9c:16:ea:4b:0e:a5:49:18:
         d7:e3:c8:d3:31:15:df:70:a0:e4:8a:30:31:f4:bc:fa:a4:c5:
         b7:c1:bf:f8:85:34:f7:4f:20:51:04:b4:a5:db:d1:e5:29:bc:
         f6:9e:af:87:c4:dd:9a:f4:aa:0f:98:37:ef:32:7b:b5:c4:cd:
         75:b7:5b:56:c6:83:56:4a:e3:af:7f:a5:ff:1c:6a:b9:4c:25:
         a9:a1:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:18 2025 by rpki-client