Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File:                     Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier:          UKq34QmlAy3CqOu5x1XvD6J5VDsSaXh+LTDimoFS+JM=
Subject key identifier:   04:17:1C:9D:90:E3:53:B9:BE:F7:B6:0F:F2:63:3A:27:57:8D:85:41
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer:       /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial:       019750EA83924BBB517AD22A69FB030A5AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 19:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:35 +0000
Files and hashes:         1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: jQ0KTGZzAQM/G8Uko8PNFd0C1kjCQ92UBa/YgqChC4M=)
                          2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:83:92:4b:bb:51:7a:d2:2a:69:fb:03:0a:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
        Validity
            Not Before: Jun  8 19:00:35 2025 GMT
            Not After : Jun  9 19:00:35 2025 GMT
        Subject: CN=04171c9d90e353b9bef7b60ff2633a27578d8541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:55:05:43:3a:87:84:79:43:42:dd:66:f8:
                    ab:14:55:3d:d5:0f:99:27:36:d2:aa:57:13:dd:6f:
                    bb:61:c4:24:5a:d0:b8:c0:ff:47:98:4a:6f:4a:69:
                    f3:b3:e5:6f:b5:58:0a:8c:06:58:a8:32:73:0a:d2:
                    df:4b:fc:77:d5:a2:78:26:8b:e5:f9:87:4b:1d:ae:
                    63:6a:2e:f0:e9:0c:f7:1b:0e:d9:43:fb:c1:db:f6:
                    0b:41:a1:f6:ae:f6:1a:96:7a:ec:cb:6b:a5:b5:fe:
                    f7:56:cc:82:19:1a:1a:d4:f7:25:6b:90:69:e8:46:
                    ff:c5:d5:d5:9c:15:53:ce:88:62:83:f2:c0:a6:4c:
                    95:19:3d:b1:eb:73:f1:46:e3:be:06:a5:73:7f:de:
                    9e:ae:91:1c:c8:24:d7:d0:9d:96:4b:9d:85:9c:73:
                    b2:21:56:90:97:59:b0:3b:9d:f4:0c:60:6d:3a:22:
                    6e:d7:8b:36:13:11:d8:c7:66:5f:7f:2f:b3:a2:ad:
                    90:03:15:04:b3:5c:39:2b:5e:7a:9f:5b:61:5b:4b:
                    8d:dc:38:21:cd:5e:82:56:01:e1:67:f4:34:cb:96:
                    12:81:9d:bb:bf:d1:7a:ec:1a:30:5f:42:07:9a:35:
                    6a:1a:1f:9b:40:1a:b3:15:f3:b4:6e:14:54:d1:55:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:17:1C:9D:90:E3:53:B9:BE:F7:B6:0F:F2:63:3A:27:57:8D:85:41
            X509v3 Authority Key Identifier:
                keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f4:8c:c1:0e:0c:80:7c:71:62:db:40:d0:9a:ba:03:72:ad:
         b1:ad:5c:cf:70:8e:17:49:22:8a:38:e9:07:76:7f:73:19:fb:
         b8:23:38:e4:e4:fd:fc:1e:5f:d9:91:f1:3d:c1:92:31:aa:3d:
         cc:58:25:1e:8f:22:67:62:55:81:e1:ca:d6:f4:25:68:bf:8d:
         d3:6a:27:78:20:fa:b2:06:89:61:d1:3b:59:fa:85:cc:fb:af:
         ae:e3:51:68:16:b7:77:6b:18:3f:17:27:31:d6:60:70:3e:7a:
         0a:de:46:18:46:59:a9:7a:ba:67:e6:2d:c1:d8:0d:17:d9:4e:
         84:52:1a:7d:5c:58:6e:59:8c:0e:24:00:2b:8d:22:ab:79:91:
         91:cc:c2:cb:50:ae:fa:ec:0f:01:0c:b3:8b:5e:7f:74:23:3e:
         95:8a:fa:f5:5f:65:88:31:29:38:68:fd:71:e6:08:32:d9:01:
         1d:76:4c:c1:5e:c5:a6:d8:86:8b:dc:30:e4:06:b2:90:20:2c:
         bf:e6:2b:e6:77:84:0f:d9:bb:08:a8:ff:01:42:a7:fd:b9:39:
         de:ab:b6:ac:71:3a:2c:78:4e:f3:8e:f7:7f:04:6f:19:87:67:
         7d:c7:f4:1d:23:f3:a1:f2:c0:d7:16:cb:70:43:61:92:ba:97:
         9a:09:d1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:05 2025 by rpki-client