Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          E64MRcbXP3XC0awAr7itqBNn3CHRgIEQJgFB4EZ2S0o=
Subject key identifier:   EB:B6:38:B4:9D:EE:7F:81:7F:72:72:8C:FD:DE:89:CD:77:38:55:6C
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       0197488C023BB9598B9BA048FF70D0B2FE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          0EA6
Signing time:             Sat 07 Jun 2025 04:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:24 +0000
Files and hashes:         1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: vuypCoL07LkWiEjWbk+6vK8y5w78up2zhZFBI3KNAxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:02:3b:b9:59:8b:9b:a0:48:ff:70:d0:b2:fe:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Jun  7 04:00:24 2025 GMT
            Not After : Jun  8 04:00:24 2025 GMT
        Subject: CN=ebb638b49dee7f817f72728cfdde89cd7738556c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:f6:1d:d4:4c:f8:5c:68:27:57:18:9d:eb:
                    6b:a7:94:e9:ae:c3:48:6c:cc:31:7c:cf:4d:0d:00:
                    3b:af:ee:1b:8c:74:be:a6:f5:4e:33:25:13:07:d0:
                    90:2d:cb:39:7a:2a:e2:b9:15:d2:86:96:8d:11:e5:
                    34:5e:09:3e:ab:1e:f9:21:73:59:2d:c3:c0:3c:0b:
                    25:1d:74:38:16:3b:0d:c5:77:f1:de:76:47:43:a6:
                    86:fb:3c:db:d2:79:e4:a8:f8:0c:fe:ea:37:45:3b:
                    2f:cc:72:02:ce:af:e9:09:9f:46:73:49:f1:f9:cf:
                    8c:c1:5f:c9:3d:a3:15:c1:a3:79:d0:f1:74:b1:88:
                    78:cc:3a:86:28:5c:e5:d3:ba:ad:50:c3:67:b4:5a:
                    e2:92:22:69:05:b8:2f:e8:c3:b3:17:8c:14:dc:71:
                    bb:fa:96:73:26:df:1a:1d:81:75:b6:a8:1a:ec:77:
                    e6:d9:f8:13:6c:0f:2c:a9:69:56:56:a6:04:1d:f5:
                    93:cc:a1:7f:3b:45:2b:41:32:81:f9:1f:01:e1:a4:
                    11:a7:96:d4:a8:ce:98:77:de:77:2a:4b:72:90:01:
                    2e:0b:7a:7b:29:53:04:a8:5a:8f:36:99:3a:e4:dd:
                    63:a0:07:a3:d8:44:f8:9c:f4:64:7e:30:9d:27:47:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B6:38:B4:9D:EE:7F:81:7F:72:72:8C:FD:DE:89:CD:77:38:55:6C
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:39:52:f2:64:a9:97:fc:d8:a1:a2:0b:bc:f6:24:1c:e4:d7:
         88:7d:32:d5:d0:a0:7d:6e:5a:9f:7c:5d:1f:20:c3:ec:e3:12:
         5d:ed:1e:22:b1:29:72:c7:66:fd:9e:40:31:86:61:eb:49:3d:
         a7:28:20:67:2e:c8:f2:1f:3f:f4:17:45:b1:82:85:35:75:4d:
         bd:5d:aa:81:dc:b6:0e:97:d9:6f:32:6f:e2:22:bc:1c:7e:b6:
         82:39:fe:a2:6d:50:56:02:04:02:23:07:3f:b3:8e:50:76:b4:
         2a:30:a2:eb:7a:64:32:db:bd:93:78:15:af:f5:56:84:0d:4c:
         78:d0:aa:c3:f4:70:80:d6:1d:ea:ef:2c:24:87:d7:ef:51:24:
         d3:7b:95:ab:0f:fa:d5:cb:cf:4f:af:3f:f6:fc:70:68:45:86:
         33:da:9b:57:86:81:78:c1:ca:f8:8c:43:71:64:65:a5:7f:72:
         96:9f:b8:db:20:5c:23:58:68:1c:81:d0:93:a6:40:33:1d:2f:
         7f:6d:63:cc:f5:12:05:50:ea:08:59:8c:4a:ce:8d:26:b2:a2:
         3f:ca:16:e5:86:a3:ed:b5:ca:54:92:8c:52:b2:88:66:2c:b1:
         f6:e1:78:34:39:6e:a6:a0:17:5f:95:50:2c:0f:be:a9:f9:78:
         85:bc:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:19:51 2025 by rpki-client