Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          ijin1lRmjs3xTwYpPHCDL7+cBR6jRloq9cugL6oY5B0=
Subject key identifier:   CD:82:C5:16:6C:B7:85:54:36:0D:E4:33:84:22:2F:75:EC:28:8C:78
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01976395AE2A345B6352A269B3242AACC098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0EB5
Signing time:             Thu 12 Jun 2025 10:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 10:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 10:00:43 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: SaUepawSSKcKeg0EGCazrNX8OArO3SrMkdoLn2mtF2Y=)
                          2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:95:ae:2a:34:5b:63:52:a2:69:b3:24:2a:ac:c0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jun 12 10:00:43 2025 GMT
            Not After : Jun 13 10:00:43 2025 GMT
        Subject: CN=cd82c5166cb78554360de43384222f75ec288c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:56:a1:ab:97:dd:cd:b9:c8:f5:a7:70:89:de:
                    6f:ed:52:d4:4c:40:53:8e:53:85:b6:ee:33:2f:4f:
                    b9:69:52:3e:33:b3:7e:7b:66:01:51:97:03:fc:c0:
                    b3:ce:c0:81:6d:97:d1:34:9c:c8:f2:eb:18:dd:17:
                    5d:06:4c:2c:c3:5e:8a:75:4a:d5:0a:df:c8:21:f5:
                    33:71:cb:cc:49:d2:e4:64:b5:88:92:74:57:41:e5:
                    8b:97:0f:67:0b:70:12:43:4f:02:b4:71:40:59:fd:
                    54:3e:76:2e:50:6a:aa:d2:fe:50:61:c8:6e:17:1a:
                    92:a0:d1:29:47:8c:06:31:d2:c5:63:29:0a:4f:a7:
                    44:99:55:03:3c:fe:5b:9a:bc:4e:5d:86:44:55:b2:
                    68:f0:3d:a2:81:ed:19:4e:3c:d2:8b:2a:f4:57:05:
                    79:57:ea:df:a7:21:c4:e4:2c:aa:c6:65:04:ac:54:
                    03:f1:44:b6:f3:0a:e2:54:b2:60:14:d0:83:f3:f8:
                    7e:e9:d5:47:ca:24:6a:42:44:62:c6:f9:5e:9c:15:
                    63:e4:0d:71:e6:cc:28:8b:e7:8c:b7:61:1b:9d:50:
                    8c:a4:81:e7:be:3d:73:ec:05:fe:35:e5:81:c4:61:
                    ac:d0:63:f5:9c:8d:91:cb:75:65:27:28:32:be:c3:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:C5:16:6C:B7:85:54:36:0D:E4:33:84:22:2F:75:EC:28:8C:78
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:c2:01:e3:ce:a8:8f:72:a9:d2:89:d0:71:e2:dd:88:3d:
         66:74:92:ea:52:b5:51:a8:ff:5a:05:42:46:6a:79:31:0b:5d:
         a2:48:e8:cb:a8:fc:60:e8:5f:d3:74:f4:a3:10:86:68:56:85:
         e5:b1:20:ef:23:c1:8d:aa:29:da:fe:ec:23:cd:71:3e:3d:cd:
         32:34:46:27:7f:39:b4:dc:6a:c5:f4:90:1e:d5:6f:a9:35:76:
         e7:80:8a:b7:b5:19:52:22:46:a2:84:48:f7:09:cc:78:e9:82:
         88:33:1d:6d:0b:3f:56:ea:ad:52:c2:60:6e:17:ba:4a:c7:dd:
         fa:ac:aa:83:f5:31:23:07:91:81:73:e4:28:0e:0f:9a:74:f6:
         1c:7f:80:84:b4:0b:10:4f:b9:42:0b:6d:eb:d1:76:3a:41:a9:
         7c:a9:a5:d3:9f:15:2d:fa:b8:1d:2c:5b:c4:f1:21:9f:60:8b:
         9c:23:33:21:91:80:38:cd:1a:f6:73:92:9a:b1:83:43:0d:d5:
         31:19:8e:ea:38:8b:f9:cb:51:4e:69:f3:0d:1f:28:94:ca:51:
         39:0b:9c:ee:a3:a0:f7:74:d6:34:f1:f9:d2:70:86:3f:d3:08:
         9d:e6:36:c9:52:1f:4f:26:4d:b3:ce:a8:5e:43:26:c6:6a:dc:
         42:14:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:07:54 2025 by rpki-client