Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          gJ9/NytiUSKliG3lHoARYcDXgTLDsqvLNaEwPwRgrZ8=
Subject key identifier:   1B:2D:10:FB:13:31:CC:EB:B8:1B:3D:BA:BB:34:A9:0F:F2:5D:7C:D1
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       01974967C3676FE81ECD0B30EA78E216F3F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          1260
Signing time:             Sat 07 Jun 2025 08:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:26 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: 2wPkzs2web8Ub/9O2wHSwK0xV81Xm2ALi+DZIC8dWTQ=)
                          2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:c3:67:6f:e8:1e:cd:0b:30:ea:78:e2:16:f3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Jun  7 08:00:26 2025 GMT
            Not After : Jun  8 08:00:26 2025 GMT
        Subject: CN=1b2d10fb1331ccebb81b3dbabb34a90ff25d7cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:96:a3:94:f2:ae:e0:9b:2e:b1:f1:5f:37:
                    ec:68:d4:12:44:69:50:2a:41:3a:9c:a2:2e:87:5b:
                    93:c0:09:9f:54:e6:75:ce:93:81:ef:8b:e3:6d:a5:
                    7d:e5:82:00:ae:0b:ff:db:9e:46:b8:19:90:7f:a8:
                    16:d2:90:c9:1d:d3:6b:fa:05:3b:ae:36:37:df:4c:
                    69:1a:fa:59:32:31:0a:cb:94:05:0d:b0:e9:0c:86:
                    e1:06:a3:c4:bb:c5:c0:04:dd:9d:c9:b0:33:44:ac:
                    21:cb:13:29:f7:89:8a:8a:08:ed:fc:b2:b7:d6:e5:
                    30:a5:f1:ff:5c:fc:40:0c:91:7d:c0:30:60:cc:7d:
                    f1:70:5a:b6:53:c7:5e:d3:5f:2f:0e:44:3b:dc:19:
                    ba:79:1e:3a:9a:c3:2c:5e:1a:6c:6e:39:c4:1a:62:
                    35:f9:18:9a:6f:cd:78:03:7b:93:b6:ee:a8:5a:bb:
                    10:ac:18:2d:7f:a4:89:1b:cb:42:ef:56:57:83:ab:
                    f3:b1:78:05:0e:8f:82:ac:23:6d:ab:14:50:f7:9f:
                    60:d5:9a:81:97:73:76:af:9b:dc:7f:ec:48:7f:42:
                    15:2f:ca:ec:3c:ad:13:52:40:f8:5c:86:ae:c2:79:
                    dd:b5:6e:d7:48:8d:a4:21:30:58:ac:40:81:d0:1d:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2D:10:FB:13:31:CC:EB:B8:1B:3D:BA:BB:34:A9:0F:F2:5D:7C:D1
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:9a:f8:76:f6:fc:9b:7a:fa:4a:55:e4:38:94:cf:f6:ab:
         e2:2e:2a:29:a0:dd:01:10:0e:3b:8a:e7:70:57:b6:f6:03:50:
         37:3b:eb:a5:9e:26:67:c1:ef:e2:63:ec:a5:8c:c4:96:4a:01:
         05:6b:2c:97:5c:d6:08:1a:2d:69:c0:cb:fe:65:89:e6:fc:94:
         02:9d:c2:3e:ca:44:b8:21:02:4e:3d:91:22:31:6e:8e:84:0b:
         8d:54:ce:c9:ff:df:b9:aa:1d:cd:78:4d:5e:86:d0:b0:b9:a2:
         47:65:d0:d5:7a:f9:65:60:f8:2c:81:eb:de:5c:fd:98:d5:66:
         92:f9:b8:76:03:05:0d:b7:4d:23:ca:4e:00:50:32:ea:ef:73:
         fb:6e:20:6d:9a:e3:fc:00:ef:62:fa:cc:36:c2:ec:c8:3c:de:
         0a:fa:cb:34:7f:e9:ec:8d:61:d6:51:12:88:bc:13:bf:45:a0:
         aa:9d:62:ad:b7:65:06:64:6c:ba:fe:cb:95:d2:2f:0d:00:e2:
         3a:06:1d:db:1c:ce:bd:ca:fb:53:da:35:09:78:a0:d7:64:21:
         95:17:40:cb:2d:e4:6d:84:9b:67:44:25:e5:d8:a5:cb:93:66:
         a4:33:58:a1:1c:2d:49:6c:60:4e:4c:c2:b3:7f:b2:1d:1c:d6:
         2b:65:e6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ8Nnb+gezQsw6njiFvPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw
MjUzMTYwHhcNMjUwNjA3MDgwMDI2WhcNMjUwNjA4MDgwMDI2WjAzMTEwLwYDVQQD
EygxYjJkMTBmYjEzMzFjY2ViYjgxYjNkYmFiYjM0YTkwZmYyNWQ3Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHuWo5TyruCbLrHxXzfsaNQSRGlQ
KkE6nKIuh1uTwAmfVOZ1zpOB74vjbaV95YIArgv/255GuBmQf6gW0pDJHdNr+gU7
rjY330xpGvpZMjEKy5QFDbDpDIbhBqPEu8XABN2dybAzRKwhyxMp94mKigjt/LK3
1uUwpfH/XPxADJF9wDBgzH3xcFq2U8de018vDkQ73Bm6eR46msMsXhpsbjnEGmI1
+Riab814A3uTtu6oWrsQrBgtf6SJG8tC71ZXg6vzsXgFDo+CrCNtqxRQ959g1ZqB
l3N2r5vcf+xIf0IVL8rsPK0TUkD4XIauwnndtW7XSI2kITBYrECB0B0NywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBstEPsTMczruBs9urs0qQ/yXXzRMB8GA1UdIwQY
MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt
NmZiYTZhMWUwZWU3LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3
LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHU6a+Hb2
/Jt6+kpV5DiUz/ar4i4qKaDdARAOO4rncFe29gNQNzvrpZ4mZ8Hv4mPspYzElkoB
BWssl1zWCBotacDL/mWJ5vyUAp3CPspEuCECTj2RIjFujoQLjVTOyf/fuaodzXhN
XobQsLmiR2XQ1Xr5ZWD4LIHr3lz9mNVmkvm4dgMFDbdNI8pOAFAy6u9z+24gbZrj
/ADvYvrMNsLsyDzeCvrLNH/p7I1h1lESiLwTv0Wgqp1irbdlBmRsuv7LldIvDQDi
OgYd2xzOvcr7U9o1CXig12QhlRdAyy3kbYSbZ0Ql5dily5NmpDNYoRwtSWxgTkzC
s3+yHRzWK2XmMg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:27 2025 by rpki-client