Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File:                     ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier:          1ByuNr6FHJoMxo4bQ5Mw6sjORb9HxeEOzoCiqkPCd10=
Subject key identifier:   C0:7A:CE:B3:5F:CC:6E:8D:89:D8:FE:96:CE:86:C0:7B:F6:28:90:C2
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer:       /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial:       019758DACE63C30CC754CB555A2DA59526F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number:          1495
Signing time:             Tue 10 Jun 2025 08:00:23 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:23 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:23 +0000
Files and hashes:         1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
                          2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: 0ZOU2JrDRAWHM4jFpR9hHvIn3OoI0UUqaWgPffhmSYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:ce:63:c3:0c:c7:54:cb:55:5a:2d:a5:95:26:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
        Validity
            Not Before: Jun 10 08:00:23 2025 GMT
            Not After : Jun 11 08:00:23 2025 GMT
        Subject: CN=c07aceb35fcc6e8d89d8fe96ce86c07bf62890c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:87:a2:d8:a6:2d:d6:2b:8b:64:94:54:1e:d3:
                    27:a0:6c:c6:9f:1b:f3:3d:53:72:ee:21:8e:47:15:
                    59:8f:9a:eb:16:07:9f:2b:52:6f:15:12:0c:62:50:
                    83:c3:2c:3d:77:a5:41:89:95:80:52:80:79:f0:14:
                    c7:62:52:98:43:78:ad:f0:bf:48:a2:8f:a9:97:d6:
                    c0:ae:db:a5:3a:e5:11:ec:7d:e4:77:c2:e5:1f:aa:
                    83:f2:c2:33:93:1c:50:1d:48:cd:c0:55:12:9d:b0:
                    4b:57:55:9e:2c:31:6b:0e:14:e2:8a:37:2e:1a:c8:
                    7c:d6:eb:81:91:52:65:ab:4c:ae:ac:15:6a:32:d8:
                    1e:74:f0:a3:b5:4f:b1:89:ff:9a:c8:68:06:d9:35:
                    25:cb:b5:fb:e8:31:1e:66:32:3f:a6:35:1d:d4:c5:
                    ac:78:db:21:a5:5e:84:69:e6:a9:9b:c8:a1:fd:b1:
                    d1:f5:12:38:bd:b5:a6:97:9c:65:56:10:9d:69:ae:
                    e0:95:3b:9b:18:ab:00:0b:dc:3b:54:40:82:ae:58:
                    3c:7e:ff:66:1e:5f:47:f0:b6:93:5c:2b:32:9d:6b:
                    af:9b:f3:09:f0:9c:65:f9:8b:8c:c0:d7:ad:f9:21:
                    17:ea:eb:5c:d6:cc:81:22:6f:22:80:60:7c:0d:d8:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:CE:B3:5F:CC:6E:8D:89:D8:FE:96:CE:86:C0:7B:F6:28:90:C2
            X509v3 Authority Key Identifier:
                keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:cd:cd:9d:60:f4:cc:7d:91:f9:b7:63:52:2c:f1:8d:01:
         d1:c5:4a:72:a5:dd:9f:39:ce:d2:22:a6:7b:6e:25:62:9e:1f:
         ad:ac:4f:b9:d0:28:2c:f8:d6:2d:29:de:c0:1e:61:22:6c:e6:
         c7:cc:b0:c3:c5:d5:08:0e:81:6c:f2:34:13:d7:1f:ec:f0:ab:
         2f:05:91:c5:a0:23:07:c1:79:18:8c:12:78:1b:c3:73:82:be:
         ed:58:4b:82:f2:24:30:16:96:8a:97:61:12:f9:16:d0:87:32:
         5a:86:79:a6:63:7a:f2:6b:9e:8c:f0:e8:34:06:92:13:d4:0b:
         20:dc:13:1c:ad:b5:77:f0:38:90:26:13:52:a3:da:ac:a4:36:
         94:c6:11:5a:88:93:44:c4:d1:49:3b:ff:4a:d8:7a:c1:8e:1d:
         a3:51:e8:0b:aa:33:83:97:77:15:ba:cd:26:e5:5b:56:76:5f:
         78:15:c2:68:e9:31:31:eb:a6:97:b9:a3:13:5e:72:2a:4f:e5:
         81:da:c1:bb:66:c2:1e:37:db:e0:02:27:1a:8a:24:94:0c:93:
         ce:54:69:98:d2:be:93:06:7c:4e:bd:45:91:c7:67:63:7a:9d:
         f4:42:af:83:4e:fb:c2:57:98:ca:0e:ff:6f:f8:ad:1d:e9:8b:
         9b:85:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:07:23 2025 by rpki-client