Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File:                     uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier:          tOl1wOUt0AtUNspq9BK6rU/nfPpRVDue7g0gCeLHnaM=
Subject key identifier:   01:9B:CA:84:09:12:CD:5A:D6:97:9B:9A:A5:36:C9:A2:23:90:74:42
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer:       /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial:       01974A0C94BBCCB56CBBC141E445408CB904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number:          02A7
Signing time:             Sat 07 Jun 2025 11:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:27 +0000
Files and hashes:         1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
                          2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
                          3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
                          4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
                          5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: lA0tx0gq/VHPfA88tqngQkoVbdF++yTkOTBiP8nDrDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:94:bb:cc:b5:6c:bb:c1:41:e4:45:40:8c:b9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
        Validity
            Not Before: Jun  7 11:00:27 2025 GMT
            Not After : Jun  8 11:00:27 2025 GMT
        Subject: CN=019bca840912cd5ad6979b9aa536c9a223907442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:0f:c7:0e:d0:54:c8:c1:4e:1a:e0:5e:cc:
                    ff:9c:1c:12:ae:2a:11:68:ab:ba:2e:b9:f0:dc:42:
                    ac:9b:36:f5:da:d4:22:8f:da:37:18:19:92:c4:45:
                    e8:08:8d:da:bf:c5:ea:b3:96:fb:29:63:60:90:47:
                    cc:e0:62:5f:08:3e:a8:81:fd:5e:b1:dd:04:c3:17:
                    ce:c1:02:6d:c0:75:91:62:4b:82:0a:a1:f4:53:95:
                    d3:fd:29:1c:a1:6e:91:8d:54:bd:f3:64:e0:f5:3f:
                    05:00:e5:a8:71:69:42:f2:f5:ad:24:d0:8d:bd:5e:
                    24:49:25:4e:5b:ed:16:48:90:6f:8a:65:5a:4f:39:
                    e3:b7:1d:6b:60:e1:3f:e4:21:14:28:ab:b1:5b:61:
                    9a:d1:1a:e6:43:0f:a9:28:97:a2:c6:a1:90:46:d0:
                    6c:3e:5e:26:c3:d1:7f:92:1b:af:c1:1f:db:99:84:
                    4e:97:e4:05:58:6c:54:53:c4:3f:5a:4b:05:de:93:
                    04:49:24:b4:91:b6:09:0c:1f:98:8a:7f:38:6e:ce:
                    72:ee:ef:d8:14:38:02:0d:3f:e3:c3:7b:0e:c7:97:
                    f9:7f:93:05:5c:9c:57:1c:3d:88:e1:a7:74:e9:3e:
                    4d:69:da:3c:ac:80:0b:12:54:1f:48:7d:f2:ea:f3:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9B:CA:84:09:12:CD:5A:D6:97:9B:9A:A5:36:C9:A2:23:90:74:42
            X509v3 Authority Key Identifier:
                keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:eb:f3:c8:db:76:97:59:48:13:8b:1a:c1:b9:60:cc:c8:
         49:64:80:04:35:60:be:55:94:03:14:b1:db:22:2f:35:17:d0:
         57:f8:4a:75:b3:ee:63:3b:67:21:e6:e8:68:c7:a2:cd:c7:9c:
         8b:8e:1f:9d:d3:fb:f6:ec:8d:0e:3a:05:9c:ba:37:75:e2:bd:
         d9:b1:87:46:e7:23:51:c3:bc:d4:b5:11:74:2f:1e:59:ba:80:
         5b:69:35:da:e0:9d:0c:42:35:cb:bb:69:99:a2:c5:11:33:b1:
         23:55:e7:38:ab:31:6c:96:16:59:51:ad:07:c6:30:d8:0e:2f:
         17:bf:e7:85:d5:e0:a4:8c:89:f5:2d:87:8d:57:3f:81:da:bd:
         d8:c5:6e:d5:84:35:3f:df:db:57:97:bc:54:59:9d:79:22:91:
         47:b2:b8:d3:36:1d:b4:e9:78:32:a6:ba:09:a6:93:27:37:0c:
         dc:b1:76:4e:ec:fc:f6:e3:94:6f:b6:27:cd:35:ac:00:fd:23:
         df:55:bb:85:f7:60:81:ee:df:ac:9e:e3:13:de:37:2b:8b:68:
         51:10:1e:e0:6d:53:a6:bc:80:92:b4:45:37:2c:f9:31:0b:3e:
         57:a7:25:a5:5f:23:09:32:52:bd:02:84:66:a3:e9:3d:cf:f5:
         f9:18:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:04:30 2025 by rpki-client