Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File:                     UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier:          HxUs6n2MI7uvdgb/tIOe7n2+lFDKA0jp/aPB/zAaNV4=
Subject key identifier:   E8:76:5E:6F:56:12:14:07:63:E5:7D:D0:BA:E0:26:86:88:8B:7D:15
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer:       /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial:       0197D1AAC62590CB8B0FD95F3B34B13B788A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number:          15C5
Signing time:             Thu 03 Jul 2025 19:01:59 +0000
Manifest this update:     Thu 03 Jul 2025 19:01:59 +0000
Manifest next update:     Fri 04 Jul 2025 19:01:59 +0000
Files and hashes:         1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
                          2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: Fe1Re/2DMBz0wFUd7K3roE+izlCuu2qhYGZ9JFWB+Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d1:aa:c6:25:90:cb:8b:0f:d9:5f:3b:34:b1:3b:78:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
        Validity
            Not Before: Jul  3 19:01:59 2025 GMT
            Not After : Jul  4 19:01:59 2025 GMT
        Subject: CN=e8765e6f5612140763e57dd0bae02686888b7d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:89:92:02:df:c6:ed:37:d4:5b:6f:54:8d:
                    88:bc:e9:ce:d2:ae:86:f9:a0:4b:81:68:e2:99:65:
                    72:f3:02:23:de:66:b5:46:c7:9c:5b:df:e0:b2:ce:
                    1c:ea:1d:aa:f5:25:02:16:e5:0a:94:9b:ac:89:db:
                    c6:0d:0b:26:90:bc:cf:86:a8:35:cf:d5:07:38:d7:
                    9c:7c:39:f2:e2:0e:e3:b1:8d:72:cd:b2:48:f5:c5:
                    89:91:7a:aa:b5:ad:bf:68:35:04:82:fe:33:48:6a:
                    3f:79:39:3f:45:c0:ed:3c:2e:82:af:c8:80:a9:7b:
                    8f:26:f7:f4:ed:36:bc:68:ec:de:e6:60:84:6e:f7:
                    d4:6e:fd:b9:c1:9d:14:0f:d9:52:36:c4:06:9a:3c:
                    ea:78:04:d6:da:b3:92:f2:fa:dd:a8:c9:0e:a7:14:
                    ac:e7:ff:53:2a:33:df:04:f2:59:5d:7d:5b:99:06:
                    99:62:ba:33:bf:bf:24:f1:ef:d5:2d:bd:30:63:86:
                    b1:6c:16:2c:7d:45:95:17:5c:03:0e:e7:c7:9f:57:
                    1b:1d:68:75:0e:7c:a1:10:b8:bd:25:3f:be:cf:7e:
                    74:e0:7f:12:f4:d1:74:e9:02:1a:27:72:a4:3c:0e:
                    ab:15:d8:eb:55:0f:04:2f:bf:45:4d:f7:d9:06:39:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:76:5E:6F:56:12:14:07:63:E5:7D:D0:BA:E0:26:86:88:8B:7D:15
            X509v3 Authority Key Identifier:
                keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:22:92:34:dd:8a:7e:b4:13:d5:55:74:2b:51:f7:30:d0:4a:
         3f:53:cb:f8:6a:b8:a8:75:3e:e8:03:67:d5:d9:4e:f8:49:64:
         2e:4c:c3:89:34:46:07:06:79:7c:cb:82:ac:1f:a6:db:72:ec:
         00:dd:85:f0:70:c0:30:5e:87:a5:de:25:c9:19:b2:b1:5a:be:
         0c:e5:c7:10:32:97:65:b5:49:66:5e:ea:b2:b4:9c:6e:8b:13:
         9a:f1:93:9d:45:9b:d2:07:b7:63:9a:b1:5c:0a:01:43:95:9b:
         e6:fd:0b:a5:bb:64:76:d4:1b:29:38:76:19:63:0b:a0:95:0a:
         3e:31:c6:25:38:29:5a:1f:90:36:39:da:11:db:ff:ef:00:2e:
         8f:00:47:e6:bf:ef:87:84:85:a5:5b:42:0f:de:56:07:e5:3f:
         f2:9d:fd:12:67:17:ab:02:47:77:c1:a1:f5:52:68:b9:36:34:
         97:35:17:e7:2b:70:ec:11:77:9e:bb:8a:c1:f6:f9:16:33:99:
         6c:83:01:e0:bc:62:b3:cf:31:15:4d:ca:a8:0a:ac:a7:f0:dd:
         9a:5e:6c:7f:85:ba:43:ce:57:33:bd:0c:40:58:3d:06:a5:ac:
         6d:1d:6e:44:a6:b1:03:62:99:f2:57:1a:6e:43:95:fb:e5:48:
         6c:c2:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:19:25 2025 by rpki-client