Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File:                     UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier:          CBCw0sG1ua3ODwJqWzFqGJpmJ70OxXibYWi6bEa2Zl0=
Subject key identifier:   EE:CB:FC:80:6C:C8:A9:1D:A4:AD:14:00:BC:90:4C:F9:69:B6:02:3D
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer:       /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial:       01975A5C47CEA48CED6E98328112E930DB2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 15:01:26 +0000
Manifest this update:     Tue 10 Jun 2025 15:01:26 +0000
Manifest next update:     Wed 11 Jun 2025 15:01:26 +0000
Files and hashes:         1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
                          2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: TrzZfBs3x3GuLd323y8ZYZNQ+k+cEAFGj7sFtF1R1Es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5c:47:ce:a4:8c:ed:6e:98:32:81:12:e9:30:db:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
        Validity
            Not Before: Jun 10 15:01:26 2025 GMT
            Not After : Jun 11 15:01:26 2025 GMT
        Subject: CN=eecbfc806cc8a91da4ad1400bc904cf969b6023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:c2:ff:56:88:9f:7a:6c:0b:2e:ff:4b:98:
                    17:f3:62:2d:43:f0:da:b7:4a:a4:e0:80:22:56:df:
                    29:6a:e6:4e:60:44:03:75:98:e8:be:d7:d2:94:e3:
                    2b:82:7d:e9:e2:7d:99:af:0e:69:c1:e1:34:25:ef:
                    fa:f4:82:97:c8:58:3e:e1:dd:27:4c:8c:d4:14:d5:
                    5b:2b:93:17:23:65:dd:22:bd:9d:4f:49:0e:8a:30:
                    6d:6e:bf:0f:56:77:07:45:e6:74:2a:05:4e:91:11:
                    9c:d2:72:9b:80:8e:26:26:2c:73:5f:a0:6c:42:11:
                    81:9c:50:54:4d:67:0d:b1:51:8f:14:3a:cd:28:d6:
                    4f:cf:5d:cd:a0:d0:6f:0f:55:c9:4a:d6:b7:b8:1e:
                    c1:52:64:49:3b:55:72:dc:f9:7c:b2:3e:b7:88:6d:
                    e4:46:df:f4:84:5d:e5:e4:12:69:01:d3:15:b3:01:
                    b6:69:3b:c1:82:f7:37:cc:79:63:8b:8d:02:69:dc:
                    20:54:ae:81:ac:96:02:42:a7:3f:5f:e0:12:4f:18:
                    55:07:af:1f:67:f8:5e:19:71:1d:37:ac:bd:31:8a:
                    14:7c:5a:e8:c0:64:04:20:b4:21:7a:3c:e3:27:82:
                    85:a9:99:a0:be:66:e8:d9:3b:b2:53:16:72:77:8e:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:FC:80:6C:C8:A9:1D:A4:AD:14:00:BC:90:4C:F9:69:B6:02:3D
            X509v3 Authority Key Identifier:
                keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:61:99:77:ce:d8:da:91:10:f6:90:22:05:4e:91:a5:7f:1d:
         51:da:f2:4e:90:a1:4c:ee:9d:70:a7:fd:43:3f:24:96:d0:11:
         55:53:27:c3:de:50:51:3a:9a:1e:db:45:a2:85:36:7e:d7:e5:
         77:fd:1e:65:de:06:37:bd:50:6c:04:95:b9:e7:f3:12:bc:de:
         b1:ac:3b:fb:05:7f:8f:b0:30:8d:d5:9d:ca:89:ad:c3:db:ef:
         0c:e4:25:8f:40:5c:4d:08:d4:1b:10:33:c3:8d:9a:b7:ee:08:
         08:53:1a:86:b4:e5:71:bb:bc:35:2f:3b:a4:96:de:2a:f2:f8:
         6c:ae:d7:4c:74:66:14:09:c6:12:12:d2:0b:6f:89:0e:cb:3c:
         52:65:2b:15:91:f0:cc:97:92:eb:64:33:91:c8:2b:c5:4c:18:
         ee:59:e9:b4:e9:ee:9b:9c:f1:3b:46:e6:49:61:74:b2:8b:9c:
         47:dd:14:e5:55:68:2c:71:fe:de:c5:a1:b6:24:5f:88:fa:78:
         c9:b0:c2:a4:fb:1c:cb:c5:f9:45:d0:2e:97:da:2a:88:71:65:
         de:01:f3:aa:e6:f0:02:17:5f:14:63:d3:f8:03:44:6f:6d:54:
         61:38:d2:eb:54:a9:c3:8e:43:b9:79:ec:f1:81:20:89:4d:f4:
         e0:1c:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:28 2025 by rpki-client