Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File:                     uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier:          I+zM03l2rHsPrmk0UtBOR9Q0v4dv9UyXT9F8aAiUGZY=
Subject key identifier:   00:17:12:35:93:D4:9B:D4:F0:1B:F1:90:87:AC:B3:83:A9:42:A4:98
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer:       /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial:       01974B5655CD7954DFEDCC7B69EA616D2394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number:          03C3
Signing time:             Sat 07 Jun 2025 17:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:38 +0000
Files and hashes:         1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
                          2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: xf2xAbKXjsz9bbuVP/Jqta5nwGMApdKHQSLZqDCkqIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:55:cd:79:54:df:ed:cc:7b:69:ea:61:6d:23:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
        Validity
            Not Before: Jun  7 17:00:38 2025 GMT
            Not After : Jun  8 17:00:38 2025 GMT
        Subject: CN=0017123593d49bd4f01bf19087acb383a942a498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:ec:45:23:3f:30:cf:66:2b:7e:e9:39:7a:
                    32:2b:65:38:54:07:fe:d0:f6:64:0f:ae:72:88:64:
                    89:fc:a2:18:b9:5c:b7:a2:ff:bb:c0:1f:62:5e:c1:
                    e3:c9:5b:a2:bc:bb:12:3d:1c:68:ee:e9:f6:90:c8:
                    f1:35:04:5c:0d:b0:29:0f:e1:57:cb:c7:c9:cb:58:
                    9d:1b:7d:03:75:78:97:0d:07:52:ae:8f:b5:cd:c0:
                    16:27:48:7a:13:9e:67:e4:89:d1:97:1d:01:a4:6e:
                    94:3b:31:07:76:b1:75:fa:19:5f:00:06:f7:3e:55:
                    ed:29:a7:75:fe:cd:8d:27:79:5e:0b:58:4f:65:8a:
                    cc:90:41:18:13:0c:92:ba:7a:d6:c6:94:3d:40:4c:
                    b9:0b:be:33:1b:1c:6f:18:2f:1c:7e:d4:53:54:8b:
                    ba:a4:32:f0:5f:7b:30:d1:64:3b:dc:a7:06:f1:df:
                    c4:04:12:93:c5:00:e2:77:23:23:72:d9:67:77:18:
                    6a:9a:5a:c5:84:22:be:24:ce:77:2d:9a:3c:d6:a3:
                    cf:68:80:b4:49:4a:8b:a8:f5:a8:dc:18:86:f9:67:
                    fa:52:12:b9:55:91:a7:3a:6e:66:bf:79:1a:01:00:
                    e8:b3:46:14:21:4e:fc:8e:ed:7e:56:85:bd:42:55:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:12:35:93:D4:9B:D4:F0:1B:F1:90:87:AC:B3:83:A9:42:A4:98
            X509v3 Authority Key Identifier:
                keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:44:8c:e8:bb:f9:59:3c:1c:02:67:52:21:ae:93:2f:1a:12:
         c7:bf:2e:5e:93:4d:09:60:84:ea:3d:80:41:f2:c0:71:22:e8:
         fe:62:64:70:ba:5b:a2:46:d9:26:75:3b:93:8a:74:e0:fc:8e:
         66:8b:ab:d5:29:23:e3:07:71:9c:42:a8:32:e2:ba:b0:54:c2:
         22:77:30:12:f3:c3:42:ba:30:99:70:b7:6c:7d:4b:6a:b3:28:
         4b:d3:0d:93:0b:fd:8f:0d:27:cd:28:e5:97:59:43:c7:3b:9a:
         8a:e8:f4:93:94:ba:d1:09:1a:f8:8d:68:fe:07:7a:9c:6b:d6:
         c1:9e:57:53:6b:11:a9:9a:e7:ea:ac:14:40:78:08:af:b9:a5:
         ad:5d:51:6a:78:85:35:80:27:d2:ef:09:7e:fe:ea:ba:56:a9:
         33:53:e4:25:43:60:65:9d:4b:d9:5c:99:75:f3:e6:ea:f9:4a:
         eb:90:cf:d8:3a:d3:bd:0a:75:12:35:e0:02:79:c6:34:70:f2:
         c6:e8:b0:d8:60:07:80:1e:2d:45:e6:7f:31:e4:e5:75:c5:02:
         f7:b0:3e:a8:3f:98:6d:6c:37:cc:09:68:b6:75:7a:27:34:60:
         54:56:63:e0:3a:38:34:12:5c:4e:ed:41:c0:a5:a6:06:4e:d0:
         1a:71:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:07 2025 by rpki-client