Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File:                     Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier:          GyhvXUIsEM0A7wzb0heIX+lZcJ30HcRERJAjR+PF0ms=
Subject key identifier:   12:99:17:2C:72:4B:1E:B7:E7:F3:26:6F:D1:02:37:02:38:BB:6E:7D
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer:       /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial:       0197684E9F63EE4FF3C0C3B29D4AA9675F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number:          03EB
Signing time:             Fri 13 Jun 2025 08:01:12 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:12 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:12 +0000
Files and hashes:         1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
                          2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: N5aJSK28r7Sa93u8Yq3EBj+ROGTJgob1iEiiEYZaCXw=)
                          3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:9f:63:ee:4f:f3:c0:c3:b2:9d:4a:a9:67:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
        Validity
            Not Before: Jun 13 08:01:12 2025 GMT
            Not After : Jun 14 08:01:12 2025 GMT
        Subject: CN=1299172c724b1eb7e7f3266fd102370238bb6e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:cf:b5:a7:6a:ee:32:c5:f8:1c:83:3d:b6:
                    85:8b:db:66:19:43:13:9b:00:d1:0d:2e:f8:66:75:
                    c5:ea:c7:67:a7:86:d9:d6:95:80:84:f3:2a:78:ac:
                    b2:01:c8:4e:21:e8:ba:ee:da:15:dd:8e:bf:2e:7e:
                    8a:87:11:3b:8e:95:99:77:a0:6f:86:01:92:4f:33:
                    4c:34:76:92:4d:5a:fc:26:3b:61:16:a1:6a:71:bd:
                    cc:1e:67:14:4d:1c:80:0a:39:42:94:e7:4d:10:11:
                    cc:a7:b8:a4:ba:54:e6:7f:94:49:f9:a0:81:0d:2a:
                    6e:84:30:59:d2:81:78:78:81:dc:ce:0e:d9:df:e4:
                    9d:a2:cf:06:38:86:da:3c:09:a9:c5:87:90:90:8c:
                    54:5a:33:d7:ea:ee:fb:ae:48:fa:74:82:64:8c:47:
                    82:8c:4b:1f:4a:1b:a1:c2:70:36:4b:94:0c:e2:84:
                    4a:c1:80:ee:90:fe:83:97:dd:13:f2:37:04:43:f3:
                    b3:78:92:08:af:00:f3:c4:21:a8:ad:b0:ec:0a:1b:
                    ee:c6:32:0b:7d:00:c6:d5:16:e1:22:88:39:13:f4:
                    01:65:79:82:f7:2e:bb:1a:9b:68:cd:0d:cf:08:34:
                    c5:1f:c7:3c:01:7e:59:01:7f:c3:df:e8:e1:1b:36:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:99:17:2C:72:4B:1E:B7:E7:F3:26:6F:D1:02:37:02:38:BB:6E:7D
            X509v3 Authority Key Identifier:
                keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7c:45:05:38:48:92:8b:be:02:3a:ff:87:21:b1:e3:18:50:
         70:02:eb:7f:72:8c:bf:bc:85:2e:fc:ba:98:52:43:51:d8:5f:
         be:8d:da:2b:97:86:fc:2e:ad:7c:b0:22:96:7c:4d:7f:fe:74:
         9e:01:c2:3d:e8:6b:31:58:24:0d:d0:35:1d:5a:f8:6d:46:4d:
         47:39:04:0c:b0:3b:a4:6f:33:77:51:44:26:71:32:81:d3:2a:
         03:77:00:de:46:2d:bd:82:7e:48:ee:14:92:08:2e:48:d9:1f:
         0d:ac:24:fa:95:20:04:e9:d4:b6:d2:ad:de:90:97:aa:46:11:
         a0:83:42:be:81:78:43:92:04:8a:44:2a:91:4a:ed:6f:54:05:
         7d:b2:26:99:b5:14:05:42:90:05:d0:ff:c9:32:0e:d7:05:fe:
         61:3c:87:85:55:01:f3:c1:5b:c0:67:10:f4:de:fe:a1:f2:c3:
         b5:50:7d:cc:af:ab:b8:f5:2c:c2:45:13:ef:e7:f8:36:95:2c:
         d8:00:7b:2f:53:a4:0d:7a:e9:b8:09:b9:b9:ee:e5:bd:41:87:
         11:d1:b6:69:88:bb:f5:81:e2:b1:62:9d:63:49:94:d4:23:d1:
         78:e3:1f:dd:9b:14:d4:b9:9d:05:53:61:92:b5:82:4e:0f:c1:
         a8:be:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:19:48 2025 by rpki-client