Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File:                     uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier:          ZG10td+Ud+x9rONCcoIZUDIzY71fS8TW8f1cIL0Ruts=
Subject key identifier:   32:B2:B9:75:E0:85:9A:EE:F4:64:77:85:F1:8E:4F:74:3B:9B:25:93
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer:       /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial:       0197518F9061622BD7F661412E6F68759FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number:          0836
Signing time:             Sun 08 Jun 2025 22:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 22:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 22:00:52 +0000
Files and hashes:         1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
                          2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: G6X7GzOBp8IZNkV4ajmn824pBprry4WAjj8/bX+E/rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:90:61:62:2b:d7:f6:61:41:2e:6f:68:75:9f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
        Validity
            Not Before: Jun  8 22:00:52 2025 GMT
            Not After : Jun  9 22:00:52 2025 GMT
        Subject: CN=32b2b975e0859aeef4647785f18e4f743b9b2593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:4b:27:f5:cb:9e:c5:c8:1f:53:6a:07:0c:
                    ac:9e:6d:48:db:c9:0a:04:43:9b:2d:80:50:e6:a5:
                    a3:f3:bc:89:d8:33:7f:9d:a5:95:56:a8:19:9d:15:
                    c5:4f:98:c0:46:08:29:31:d0:2b:ad:6e:a4:df:bd:
                    f4:3d:ad:9b:f1:f4:e6:da:0f:6d:63:03:bf:11:36:
                    48:dc:47:7f:70:bc:c5:55:b3:f4:ab:52:fe:54:69:
                    0e:33:3f:0e:ec:17:56:0a:8a:d0:42:2e:67:0e:35:
                    88:b3:07:de:8a:79:45:68:5e:12:77:6c:3b:c3:22:
                    99:7a:64:7d:f1:11:8a:fa:5b:02:95:89:02:75:52:
                    42:28:94:3a:fc:34:ed:90:96:a4:42:dc:19:17:b3:
                    b4:39:8c:a6:c1:8b:d8:f8:af:f7:81:64:c4:8c:f3:
                    02:70:50:41:e2:a9:a9:33:a9:71:dc:7d:ec:31:13:
                    3d:0b:d0:44:97:d4:f0:d5:20:a6:91:d2:b2:82:83:
                    41:02:90:0f:2a:ca:1b:52:41:11:11:98:d4:03:a4:
                    b1:27:dc:d3:b5:74:ae:00:f3:bb:be:e4:8c:d4:e3:
                    73:64:b7:cb:93:82:50:68:3e:64:ed:05:f7:a6:38:
                    d6:44:65:2a:b8:49:cc:e2:d0:68:af:03:5b:a0:ce:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B2:B9:75:E0:85:9A:EE:F4:64:77:85:F1:8E:4F:74:3B:9B:25:93
            X509v3 Authority Key Identifier:
                keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:76:93:16:2b:e8:c5:ae:69:74:95:91:a1:c4:65:a5:61:8a:
         37:aa:59:58:83:26:ac:7f:8a:a4:7d:ed:27:8a:8c:6a:2a:95:
         d0:02:aa:4c:cf:31:6c:fb:25:b9:19:a6:49:ba:99:83:ce:d1:
         f0:18:df:b4:e2:a2:12:c9:15:50:06:f2:70:08:c4:9d:fc:0c:
         10:b1:45:9d:f9:92:27:aa:0d:45:e3:48:9f:ce:37:a1:44:e1:
         32:cd:7a:f3:b1:41:44:1d:82:99:cf:cd:fa:b5:86:f4:d6:ba:
         48:7a:03:c8:98:d7:10:5a:6f:b8:f6:fc:c0:23:83:a9:8b:5c:
         e0:b8:b9:df:3e:e2:5e:7d:8a:bc:3a:57:da:6f:d4:3e:54:87:
         63:c1:24:a1:1a:75:02:ce:46:24:a2:5e:5f:0b:c1:3c:86:da:
         a8:0c:5a:af:e5:6d:12:12:cf:88:de:5e:c5:5e:49:a6:d7:7f:
         ff:b8:93:b4:cb:69:01:fa:8e:f7:6b:93:2c:06:f7:9d:55:bb:
         29:63:5e:b0:35:80:08:1a:97:17:48:07:50:93:d4:fd:90:8a:
         96:db:8a:3f:15:ae:79:1f:fd:42:14:80:ea:ba:d1:7c:59:27:
         2f:74:a5:4b:a8:b0:3f:a3:22:68:ec:42:ce:fc:59:ef:dd:b9:
         f1:99:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:48 2025 by rpki-client