Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File:                     UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier:          VsNuZPnOjCJ6GyMjHwICPzT3zvNfAEVO5iGDgh7Hewc=
Subject key identifier:   7B:83:E2:80:6F:02:DE:DA:6F:C5:FD:26:29:7E:9D:A6:98:76:87:67
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer:       /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial:       01974E5877061F6455DE7D1E155D271B1C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number:          0E54
Signing time:             Sun 08 Jun 2025 07:01:49 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:49 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:49 +0000
Files and hashes:         1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: jOuG0O/9nlCamoq7PIpjDhteuM7Rfp/rYb9ongS5UCM=)
                          2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:77:06:1f:64:55:de:7d:1e:15:5d:27:1b:1c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
        Validity
            Not Before: Jun  8 07:01:49 2025 GMT
            Not After : Jun  9 07:01:49 2025 GMT
        Subject: CN=7b83e2806f02deda6fc5fd26297e9da698768767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:bb:4d:be:f0:23:80:f3:8a:7f:b6:c0:85:
                    c8:ec:dd:21:65:e6:62:0c:76:84:38:d2:d3:0c:4d:
                    a5:f9:97:84:06:11:99:66:d2:22:9c:09:ef:01:01:
                    30:0d:75:0c:5f:4e:31:a1:f5:79:1f:20:85:40:9b:
                    1d:f0:19:1f:65:26:01:71:9d:95:ec:2a:a4:eb:93:
                    1f:7c:57:20:d0:8d:cc:d9:11:b7:96:e5:10:24:de:
                    f9:68:e7:5a:e2:e6:bd:67:42:cc:bd:03:a6:e0:41:
                    5b:a7:a9:3d:3b:9b:c8:a2:fc:f9:4b:7d:e6:6a:66:
                    1c:0b:77:af:e5:ac:27:54:4c:02:1c:05:7b:3d:43:
                    44:b3:55:83:5b:fc:53:fe:75:a0:13:bc:06:50:83:
                    04:33:9f:27:99:0d:d4:91:d3:29:a0:87:0e:29:7d:
                    7b:82:b5:7b:e2:ef:41:ed:ab:4a:21:89:7e:23:7b:
                    83:db:3a:95:7e:1b:96:af:b8:84:a9:f2:aa:ea:8c:
                    a2:ac:1f:7e:cb:1e:18:8d:80:f7:16:31:1f:a5:f5:
                    8d:1e:7f:16:b2:57:8b:c9:f4:ee:6f:b7:d1:71:3c:
                    fa:48:a4:66:a7:94:72:1e:e7:75:62:36:5b:be:39:
                    6a:88:f3:1c:4e:66:41:de:19:13:87:b3:15:2b:6e:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:83:E2:80:6F:02:DE:DA:6F:C5:FD:26:29:7E:9D:A6:98:76:87:67
            X509v3 Authority Key Identifier:
                keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:2f:d3:ca:c2:4e:ff:47:1b:10:0b:37:c0:20:0f:66:4d:
         74:6b:2d:87:b5:88:f3:24:6c:e7:54:f3:9e:a8:d3:d0:65:16:
         85:59:12:d3:1f:6b:e7:48:03:a5:54:55:68:e7:4d:3d:4a:04:
         bd:57:cf:fc:f2:f1:02:25:39:a7:84:5d:d1:79:70:33:2b:42:
         47:6f:4e:6b:88:c5:d7:9e:35:d0:9d:24:23:7f:02:17:71:a4:
         ee:07:83:c2:8a:a4:ac:dc:48:76:a1:65:d2:eb:c9:e5:a5:98:
         79:ef:bf:3d:0f:c8:a8:48:a1:a3:43:14:ea:92:9d:95:c5:2f:
         26:af:d6:17:7e:b7:4d:c6:f4:14:7e:06:5b:1e:eb:94:ac:c1:
         a6:0d:1d:68:dd:57:4b:66:c8:d4:4e:e0:63:18:ab:0c:b4:3f:
         a4:0f:8b:8b:af:cf:03:16:ab:3f:16:d9:4e:7a:2e:a6:07:3f:
         41:78:35:20:43:8a:3c:f4:24:e0:7e:20:ce:ce:6a:c1:a1:5b:
         fd:8b:99:c4:52:a4:dd:c0:08:3b:07:ee:dd:3b:2c:19:45:18:
         b3:15:36:e3:5c:d8:bd:aa:20:c6:43:ad:1f:39:7b:5c:5d:4a:
         ee:ea:f9:32:70:57:16:e7:e5:8e:fd:eb:09:83:fd:c4:53:d2:
         bb:b4:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:29 2025 by rpki-client