Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File:                     Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier:          B18qZJpNsMUj5Ky8yHkzqmZ+WVYGwrCRxQDSKAc3qxw=
Subject key identifier:   01:9B:04:05:C5:3A:BC:E3:69:FF:69:F5:9A:25:69:0C:AA:28:92:96
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer:       /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial:       0197488D3E0E8351669D0D3BB3936C1D4FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number:          0C61
Signing time:             Sat 07 Jun 2025 04:01:45 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:45 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:45 +0000
Files and hashes:         1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: UnkO+Kwk1meo+vUO9KVQBf2Xssn2na2yjyWtxBF5PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:3e:0e:83:51:66:9d:0d:3b:b3:93:6c:1d:4f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
        Validity
            Not Before: Jun  7 04:01:45 2025 GMT
            Not After : Jun  8 04:01:45 2025 GMT
        Subject: CN=019b0405c53abce369ff69f59a25690caa289296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:6a:95:b0:b5:02:49:16:93:53:2a:e0:b4:
                    62:b4:36:bb:de:bc:1f:6e:eb:71:0f:d9:df:aa:fb:
                    b7:9f:a8:13:18:d9:00:9a:78:45:a0:5c:a3:b3:28:
                    a6:7a:c7:52:70:8c:7f:c3:9d:31:61:0d:4b:9d:11:
                    77:d2:cd:e0:a1:59:e8:06:b6:67:70:43:a8:7a:b9:
                    6a:e3:3e:4d:bd:cf:26:9c:ac:69:d6:5e:a6:46:49:
                    c3:c8:9f:1c:91:42:41:20:c3:39:b1:62:93:a3:77:
                    a0:4b:47:86:a5:c3:c0:74:83:8d:d7:4e:75:54:dd:
                    35:a7:f8:9c:5f:44:27:91:21:62:a8:de:3e:5b:30:
                    93:ac:af:34:50:aa:f1:53:db:be:86:14:cd:63:d7:
                    35:aa:88:8b:3c:86:d3:8d:55:42:32:c5:3a:ed:e6:
                    26:e1:fd:78:52:ba:26:41:2e:1f:33:c6:5f:e1:f9:
                    ef:2f:e0:8f:a2:f0:9f:08:86:3b:82:3e:23:55:bb:
                    2e:f7:a7:73:01:5e:7c:fe:2d:23:56:5d:c5:97:34:
                    70:39:3d:53:3c:86:af:ff:ae:68:59:52:88:92:e7:
                    35:06:67:f3:ca:08:c0:5e:d5:a5:90:e9:4d:9e:5c:
                    8c:c5:ae:28:fd:f0:4c:6c:7d:3a:17:21:aa:58:b4:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9B:04:05:C5:3A:BC:E3:69:FF:69:F5:9A:25:69:0C:AA:28:92:96
            X509v3 Authority Key Identifier:
                keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6f:f5:da:1e:32:ec:38:0b:a7:73:21:42:e2:dc:81:40:62:
         1e:2f:4b:81:40:44:58:db:ed:ab:dc:fe:47:fc:ae:13:a6:c1:
         40:ee:bb:30:ce:22:0e:77:80:d0:04:d6:d2:5b:34:2a:81:c8:
         2d:ec:1d:ea:fa:d4:d0:c1:d0:39:ff:98:aa:6b:88:46:20:29:
         f2:5e:75:90:1d:e4:c6:43:cf:85:a3:ff:4b:fe:6d:5b:e6:a1:
         e6:35:68:fe:f0:7b:2d:0f:cf:f4:65:ea:66:88:d6:ae:53:d5:
         ff:71:cf:da:bd:f1:3f:15:eb:06:e3:5d:86:a5:62:e2:11:b1:
         b6:fd:86:58:9c:bb:2f:51:24:0c:03:66:bf:c1:43:db:6c:35:
         bc:8e:8f:1b:d6:aa:35:91:1f:7d:c9:0a:51:17:d3:81:19:5a:
         06:ab:7d:15:ef:eb:94:66:5e:c9:90:3c:bd:fe:ec:6f:c8:66:
         16:a4:ea:78:6b:5d:51:4c:1a:fb:b8:ba:4d:29:ba:d4:f5:1d:
         cc:88:dd:d0:d2:cb:1b:e4:01:b3:0d:c5:40:3f:09:f4:1e:dc:
         57:2e:e3:20:5d:f8:87:78:22:4c:f8:bf:b9:0f:42:82:fd:e6:
         48:92:78:d7:f7:0c:50:eb:9b:a9:08:66:ed:28:b0:73:35:26:
         e5:76:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:00:45 2025 by rpki-client