Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          qcaAlGMxDQMstDV/1hjHNjoNiT6mt1QS0AOU55IX9eU=
Subject key identifier:   FF:A3:91:17:F1:10:E7:87:F2:29:AF:E8:46:58:D1:4E:54:8E:68:52
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       01974AE8EAD316931F50FF0CE3D06593FDF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 15:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:07 +0000
Files and hashes:         1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: l3jicsmGzu/KvEe81e//w7WP8AtwcQG4EBAA9PfWMCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:ea:d3:16:93:1f:50:ff:0c:e3:d0:65:93:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Jun  7 15:01:07 2025 GMT
            Not After : Jun  8 15:01:07 2025 GMT
        Subject: CN=ffa39117f110e787f229afe84658d14e548e6852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:69:44:35:d8:0c:45:a7:5c:e3:3e:0d:4a:
                    3f:8f:26:37:e7:36:b4:26:62:8c:3d:df:f2:59:d8:
                    7c:91:b8:3d:77:4b:dd:0d:dc:10:94:e7:a4:6a:2f:
                    62:1a:15:ce:a7:ab:14:ec:54:88:e4:33:ab:c4:72:
                    92:f6:49:1a:0f:6d:22:e0:46:1a:e9:c8:9c:ef:bd:
                    42:d3:4b:e1:5c:2a:5d:ad:ec:79:ce:03:f3:a3:3d:
                    98:82:ad:ad:cc:b0:fe:17:05:26:c8:b6:f8:52:35:
                    9a:0a:4a:ad:24:44:c2:c3:e7:e1:c5:37:cf:67:ab:
                    d2:77:fc:cf:bd:0a:5f:4b:6e:ca:7a:b9:98:de:9d:
                    ac:b1:e2:3f:d7:9e:a9:b4:ab:26:f0:1c:0f:54:e7:
                    8b:3a:0f:c2:37:bb:c6:6e:36:ef:78:48:4b:5d:08:
                    f8:9c:2e:60:f4:5d:09:a4:1c:f4:71:eb:26:e2:fd:
                    2e:1e:c6:8a:d7:4c:9e:ed:ff:93:46:01:ed:9c:bf:
                    e5:74:62:c8:66:a4:54:ec:47:97:d5:8e:b8:5b:7d:
                    2c:9a:73:b3:17:7a:8f:1c:83:14:76:ad:c5:08:76:
                    8e:9d:1f:2d:05:c2:7c:0d:f4:2a:ee:79:44:82:c6:
                    7a:ed:17:8b:4f:b1:54:4f:f9:03:ae:be:90:ce:e9:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:91:17:F1:10:E7:87:F2:29:AF:E8:46:58:D1:4E:54:8E:68:52
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:32:9d:52:4b:35:d2:83:36:ea:ef:60:66:c9:75:4d:77:e2:
         f0:39:6b:62:86:b3:ed:64:2f:d1:ca:45:14:47:f7:e5:6f:9c:
         e0:13:3a:b8:8d:0f:cc:c6:f0:80:bd:a1:9e:63:65:be:6c:40:
         a5:61:98:54:c4:f2:b8:b2:e7:2d:95:73:e7:13:c7:34:c9:c6:
         d2:0f:0e:15:1d:45:15:67:b6:6c:af:b1:af:d3:c1:4b:9c:c6:
         0a:f2:16:d3:69:d0:be:03:01:3f:e8:c8:75:c4:62:a8:cd:53:
         db:4a:ca:35:fe:0d:d5:3b:53:d8:ac:41:f5:32:02:fc:4a:25:
         78:50:1b:d1:e0:a6:44:6a:88:17:13:58:83:ae:f6:48:52:b4:
         57:cb:50:fb:64:e5:8e:2c:3b:b4:d8:a6:93:5c:8f:72:7f:ee:
         2e:c1:ed:0f:43:2e:b9:d6:df:12:ec:23:45:7e:cf:0b:03:ce:
         39:85:15:d0:2b:97:a8:c8:c9:27:97:92:69:25:d5:f5:26:a7:
         b2:d9:5b:e4:fd:76:1c:1c:70:c2:5f:0a:59:fc:4d:bd:87:83:
         ca:20:81:a5:10:14:64:a3:52:3b:80:02:e2:22:ee:5d:2b:3d:
         2f:8d:a1:bd:07:c3:61:ed:39:3d:46:1e:19:c3:14:a3:19:96:
         09:74:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:31 2025 by rpki-client