Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File:                     uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier:          uaMeQQCWu6PsppJB2spf3BoOa9CTn0FXIhGW5I/E0wA=
Subject key identifier:   95:63:38:75:AE:47:24:51:2E:09:D5:A0:05:D4:D0:4E:CA:24:EC:4D
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer:       /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial:       019748C32320FE557B033B7913AD9A46FB52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number:          03F9
Signing time:             Sat 07 Jun 2025 05:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:37 +0000
Files and hashes:         1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
                          2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: mUMkeSm9B/pLVrzNTJW7BHvwdtOyzOyId0HRM1ILfd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:23:20:fe:55:7b:03:3b:79:13:ad:9a:46:fb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
        Validity
            Not Before: Jun  7 05:00:37 2025 GMT
            Not After : Jun  8 05:00:37 2025 GMT
        Subject: CN=95633875ae4724512e09d5a005d4d04eca24ec4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:e8:1a:44:8b:c9:74:a4:15:41:b6:b9:d0:
                    38:b3:32:38:27:d5:6f:8c:f8:f2:49:08:45:99:37:
                    4f:87:70:c2:e2:87:a6:c2:ba:70:bc:21:c2:f4:11:
                    80:d0:38:14:4e:b1:66:49:5b:87:54:66:52:26:7b:
                    6c:a8:96:8d:78:26:44:36:02:e6:f9:5c:a0:84:85:
                    4f:0d:7f:80:7c:76:9f:58:e2:83:df:9d:72:1f:e1:
                    79:8b:49:73:d2:d8:bb:10:a4:5d:e4:d2:9e:d8:ce:
                    34:ac:4d:ac:e5:57:82:6b:f5:b2:15:33:2d:ca:e8:
                    2f:6a:77:92:a2:5f:82:6c:77:9f:81:3f:c0:c1:67:
                    9b:27:33:38:d7:15:c7:35:c1:d4:96:ad:63:94:d4:
                    ff:43:ac:01:e3:dd:4b:69:f1:f0:7a:35:3e:72:81:
                    46:cb:8f:78:b2:27:3b:c7:8b:31:4b:02:61:39:35:
                    94:b5:fd:ec:d2:99:db:a1:41:e1:55:32:52:3c:98:
                    55:2c:d3:80:dc:ab:4d:4d:6e:37:35:ee:4c:f8:8e:
                    b5:80:37:a9:96:34:d9:b4:d3:02:9a:50:50:10:40:
                    4f:97:b9:76:ca:4d:ff:63:f4:58:41:32:75:44:21:
                    52:b7:e2:71:c1:3d:d7:f8:5b:65:11:d9:32:39:04:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:38:75:AE:47:24:51:2E:09:D5:A0:05:D4:D0:4E:CA:24:EC:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:64:23:75:80:52:b0:1f:46:49:35:4b:35:e1:3f:59:0d:
         39:4d:cf:dc:60:2b:ba:d9:d8:ee:2e:4a:23:d9:40:fb:59:08:
         ce:26:35:21:bd:cc:b6:46:3d:74:0a:5e:02:75:d9:8c:80:5c:
         8b:be:86:1a:de:2c:b8:0e:5b:83:75:54:b3:f3:3e:ac:b6:b2:
         df:d9:99:b6:30:98:70:3d:0b:6e:ae:bf:de:a2:c9:7a:55:08:
         94:57:a8:b8:b7:11:57:2f:64:70:22:3e:77:70:fc:ad:ec:64:
         54:9f:9a:c3:ab:be:ab:0a:8e:e4:e4:fa:18:7d:f9:03:1a:99:
         89:d0:d9:f8:3c:32:44:c0:69:c2:b9:da:ef:ed:11:53:9b:43:
         4e:01:d7:9e:d2:71:57:c3:22:b8:31:22:99:d2:75:58:c9:f8:
         7f:0d:5d:47:44:6c:1a:c9:c2:ec:e0:b1:21:b2:21:fb:35:16:
         10:8b:57:9b:c1:dc:ba:ac:2c:fb:79:bc:00:16:cb:18:f4:19:
         bf:6f:23:63:81:28:b9:a4:ab:e7:aa:2e:77:e4:79:48:6e:f0:
         02:c6:79:af:42:c4:be:e0:fb:13:83:c4:ad:14:4c:1f:da:fa:
         c5:a9:16:ae:f2:90:cd:e7:48:5b:b4:60:0c:a7:2f:99:21:d6:
         b9:a8:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:00 2025 by rpki-client