Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File:                     UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier:          5I145Wo3ZCEkIzqwPfATkd6kPOiHk3a1qjpk2Be5Tns=
Subject key identifier:   6B:D0:E4:78:3E:97:FE:FC:C9:43:20:D0:1A:B6:E4:EC:09:2F:BF:3F
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer:       /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial:       01974D0DF159064628EE85517DDB94E933CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number:          12C9
Signing time:             Sun 08 Jun 2025 01:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:48 +0000
Files and hashes:         1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
                          2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: YYypYS4sE+y9qaR2rhVpS6metOMRI5qI11s9hD4JNXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:f1:59:06:46:28:ee:85:51:7d:db:94:e9:33:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
        Validity
            Not Before: Jun  8 01:00:48 2025 GMT
            Not After : Jun  9 01:00:48 2025 GMT
        Subject: CN=6bd0e4783e97fefcc94320d01ab6e4ec092fbf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:6a:cc:9e:35:c7:2b:19:91:47:2c:84:81:
                    ae:ba:e3:81:55:21:85:56:c4:d7:13:97:33:3b:26:
                    eb:3c:74:20:4f:7f:3c:f0:3d:c7:4b:32:ec:09:8d:
                    8f:f6:4b:fd:15:14:e6:c8:9a:16:ad:d6:47:d4:de:
                    e1:94:bf:84:cb:e4:bc:cf:f7:27:e6:2e:11:47:39:
                    8e:a6:31:13:36:99:fe:7c:ad:19:66:64:ed:81:f9:
                    fa:d4:ee:03:f7:16:88:98:3f:48:8b:8c:66:42:3c:
                    54:f8:27:73:56:a6:05:e2:bb:d4:4c:b7:84:5d:f6:
                    47:a6:ac:31:f8:bd:cf:18:10:71:0d:a2:6b:65:8a:
                    2e:b8:1b:4d:fa:00:84:f8:71:98:9b:ac:7d:f8:dd:
                    7c:d7:f7:99:a6:ef:90:bc:fa:28:8d:f0:59:6c:63:
                    a1:aa:e7:3e:53:ba:04:24:95:48:5b:14:0f:1a:00:
                    be:89:0d:a1:98:34:10:41:32:db:3b:97:4b:6f:4d:
                    5f:b0:46:d6:3b:55:39:65:8a:e3:cb:3e:9b:4c:c2:
                    6f:2f:c2:2e:fd:95:f8:87:06:0d:63:1e:dc:94:4b:
                    71:88:05:2f:b0:35:af:23:1b:b7:d1:6a:5d:05:91:
                    95:0c:bc:a8:97:7d:d9:6c:b1:30:37:3c:8f:73:ec:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:E4:78:3E:97:FE:FC:C9:43:20:D0:1A:B6:E4:EC:09:2F:BF:3F
            X509v3 Authority Key Identifier:
                keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:96:f1:b1:d5:2d:1d:b0:57:3c:d9:1b:98:2b:9d:32:bf:
         23:2b:5b:0d:4e:37:aa:08:c2:1a:27:19:2d:9a:c8:fc:04:57:
         2f:33:09:43:4a:dd:9c:1c:c7:32:a1:0b:de:e3:46:0c:9c:4a:
         f3:e4:27:e9:b7:bb:a3:7c:e0:7c:4a:7e:e8:05:f7:36:b6:c3:
         68:90:76:9c:c7:47:8c:0d:32:0b:c1:68:63:c3:9c:ea:ba:6e:
         60:52:3b:58:49:20:c5:f9:40:bd:fd:66:e2:cd:e7:11:9c:2d:
         4d:a4:ca:29:ba:12:d8:00:f6:a2:f8:f3:90:bb:8e:40:64:26:
         e5:d4:49:f7:39:30:16:fe:6a:06:17:eb:67:96:97:cf:58:b7:
         f3:84:03:de:ec:19:33:fe:4c:fc:40:86:00:fc:33:61:20:97:
         26:cc:fd:f3:1a:ee:07:50:cc:c8:d0:c5:d1:ef:a0:94:d8:90:
         94:4c:61:ef:4b:5a:81:69:22:31:30:db:a9:68:eb:6f:30:8e:
         c0:86:59:e0:0a:23:f7:6e:31:f3:49:58:b7:16:a8:f0:6c:59:
         82:5b:3e:d2:55:13:a5:d8:f3:f8:da:cc:c9:5d:ca:dd:17:ba:
         c3:09:91:24:4a:43:c9:64:a1:d5:62:06:a5:a9:97:7f:92:9a:
         b3:da:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:01 2025 by rpki-client