Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          mQdNYjDBmLqgeZXwU5QT4708+fNXnMO3pWXoPbca+yE=
Subject key identifier:   59:DD:53:C2:5E:A8:15:68:C3:5E:EF:7A:AA:64:A3:0C:BE:EB:C8:69
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01975BDC066FF6B44F75424D859DD97BF3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0EB1
Signing time:             Tue 10 Jun 2025 22:00:35 +0000
Manifest this update:     Tue 10 Jun 2025 22:00:35 +0000
Manifest next update:     Wed 11 Jun 2025 22:00:35 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: xo+21CP349ODaJUCtWWfTIJ4+BD79ziIBnXe+qdrwYw=)
                          2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:06:6f:f6:b4:4f:75:42:4d:85:9d:d9:7b:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jun 10 22:00:35 2025 GMT
            Not After : Jun 11 22:00:35 2025 GMT
        Subject: CN=59dd53c25ea81568c35eef7aaa64a30cbeebc869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:d9:74:5a:59:d7:7a:8b:f5:91:95:93:66:
                    f6:cc:95:fb:d6:ab:48:a7:62:e6:3c:a4:fe:a6:e7:
                    ee:24:e4:c5:89:6c:12:b3:59:b3:4c:2a:91:93:03:
                    03:98:88:52:97:0b:10:f1:a3:8a:d0:4c:60:90:e4:
                    5f:87:c8:78:19:d5:ee:c6:f8:1e:7f:96:2f:d4:4d:
                    68:41:d3:3c:0e:d8:a8:5f:c8:e0:26:20:a5:9e:56:
                    98:7b:46:d5:df:d5:b9:90:99:12:f6:00:35:09:ba:
                    72:d3:8f:b1:99:de:8e:0d:66:0c:d4:76:ec:80:16:
                    7b:51:6c:4a:25:1d:31:30:b6:dd:61:e5:d2:23:06:
                    30:60:f5:8e:b2:7b:c4:ab:6e:47:d5:64:45:5e:5f:
                    7e:b9:d6:eb:97:eb:f0:17:35:35:14:50:66:2d:ae:
                    29:e7:e4:e5:f1:9b:de:a7:69:00:bf:4e:b5:0f:b1:
                    c8:2b:b7:7b:48:28:d6:85:3a:76:9c:01:7d:fc:3d:
                    de:57:ab:be:79:cc:e3:41:73:fc:30:ea:20:33:c6:
                    ee:73:f4:99:83:37:bd:8a:cb:f7:28:d3:e6:84:8a:
                    f0:2b:df:87:2d:4e:3a:1a:ad:3c:ad:f5:f7:bf:48:
                    d1:5d:f8:91:36:60:ee:21:62:ad:5d:1a:08:7a:35:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:53:C2:5E:A8:15:68:C3:5E:EF:7A:AA:64:A3:0C:BE:EB:C8:69
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:07:e9:cd:f4:d6:2a:01:d8:53:ab:76:a0:49:6a:4f:24:
         77:9f:88:a0:4b:d4:2b:40:fb:9d:ad:70:47:1e:1e:57:a1:49:
         04:ab:d6:d1:d7:ff:a8:4f:19:b6:00:ae:19:63:58:e9:e4:66:
         2e:ed:5c:d6:07:db:48:64:16:e2:80:68:36:6c:c6:f4:bd:15:
         6a:d8:76:c5:f8:6a:70:93:52:ba:6f:0c:85:37:c2:81:29:c9:
         43:20:e5:1f:5c:2f:39:47:e0:74:53:87:ae:b9:7e:f6:8e:eb:
         43:c8:af:3e:42:d0:2a:8e:c3:bf:00:63:1a:d6:16:45:73:e3:
         aa:d8:a1:a4:4e:c8:a8:d7:71:45:34:03:4c:27:3d:a5:be:94:
         05:09:ae:a0:ed:e6:ed:00:5b:e3:94:9d:51:64:ef:cb:ac:65:
         2a:ec:b8:15:43:53:ed:d1:44:ef:94:45:19:51:3a:e0:21:d7:
         01:99:da:fd:55:a4:c9:30:da:29:33:90:f6:8e:79:e8:20:a1:
         0e:e1:61:4a:d7:b6:35:aa:7e:a4:7e:a0:ed:e5:17:c8:7f:d2:
         53:96:00:cc:75:13:5b:79:28:ff:15:57:92:ca:ca:c6:c1:9b:
         5b:e0:a7:e4:4b:26:ff:c7:75:e6:8b:b1:13:50:8b:81:d9:10:
         8f:29:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:35:41 2025 by rpki-client