Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          0fNT4i9wZ7+XXj3ypt9gHZlfg/A30ZwgezIawwvylUk=
Subject key identifier:   81:6A:0D:15:43:63:E9:1A:A1:E6:9A:8F:40:14:06:EB:C2:3A:CE:D8
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       019761A76D6BEF43C8CDC46CC29D0399D4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0EB4
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
Manifest this update:     Thu 12 Jun 2025 01:00:51 +0000
Manifest next update:     Fri 13 Jun 2025 01:00:51 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: sBpECZo+VelGAo5y2c5uifP2s4zzR0RbSfU7blYtQEg=)
                          2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:6d:6b:ef:43:c8:cd:c4:6c:c2:9d:03:99:d4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Jun 13 01:00:51 2025 GMT
        Subject: CN=816a0d154363e91aa1e69a8f401406ebc23aced8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:34:4e:44:95:0c:af:ef:2b:91:05:27:ae:
                    be:51:7b:a6:ed:5d:4d:72:83:94:0c:e2:a2:92:6b:
                    48:41:6c:e8:3a:dd:38:7e:b6:19:ca:13:8a:d8:a3:
                    58:15:ed:f6:63:0a:35:e7:31:86:68:cd:50:18:00:
                    11:b0:46:56:3d:3f:71:86:20:bd:9a:ba:a9:de:01:
                    6b:66:f3:d7:96:ec:6a:05:ac:c1:f8:a5:6a:4b:02:
                    54:22:fa:0e:3a:8d:92:d8:f8:ac:43:62:9e:6c:6f:
                    09:b7:52:72:3c:7e:89:35:ed:17:0c:9c:28:40:ee:
                    b8:b6:67:a3:4d:54:96:54:36:47:ad:b1:0e:7d:38:
                    67:ca:0e:22:21:5e:e8:ae:51:e9:b4:5e:0d:bb:6f:
                    c2:b4:08:f7:37:29:fa:1f:24:2d:1c:24:d1:fa:7b:
                    cb:d0:86:95:e0:d5:aa:82:fb:a8:77:f3:40:30:fc:
                    ad:b4:73:d9:1a:b4:84:fa:e4:2d:5f:86:cf:33:cf:
                    8b:37:d1:f4:2f:ee:cf:0d:5a:11:08:fd:c8:9e:1f:
                    4a:36:85:6a:48:4b:cc:05:e2:da:da:2c:33:0a:98:
                    5c:12:c8:b2:4c:f3:d1:67:44:c3:35:4e:01:3b:14:
                    b4:0c:24:1f:4c:1b:24:e1:b1:a5:c4:79:eb:68:e1:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:0D:15:43:63:E9:1A:A1:E6:9A:8F:40:14:06:EB:C2:3A:CE:D8
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:10:5d:da:b8:84:dd:5f:67:b9:58:0a:f3:bc:b2:92:12:
         7d:3e:63:85:b9:8b:af:6f:4c:2c:67:25:14:09:d7:7a:2f:d1:
         6f:97:f4:90:05:0f:d5:07:bc:01:85:c6:40:81:16:29:d5:cf:
         3e:22:8e:29:f3:71:4f:b8:a5:c2:e9:29:df:51:9f:f4:7a:0e:
         25:4b:23:4b:90:25:ad:b7:57:47:28:0f:55:e5:ae:93:08:89:
         1d:fa:3f:93:18:0b:8a:fe:22:ec:41:35:f5:df:a5:47:58:42:
         b8:c5:56:5e:62:48:1b:e9:0d:5b:37:0a:f0:70:83:25:b2:d9:
         63:82:97:78:e8:ed:10:9d:16:41:1a:88:10:72:76:eb:c7:f7:
         c3:b4:ad:45:d5:d4:1e:76:a4:7c:25:4f:f6:b2:9f:b4:8a:b4:
         40:89:c5:c4:f4:c6:19:7c:bf:04:33:c0:50:c3:ec:f4:72:64:
         fa:ff:84:a0:a8:2b:fd:59:02:4e:30:ad:1e:d8:45:06:81:91:
         b4:76:0e:ff:83:bb:69:8e:83:7f:65:4f:7f:93:94:6a:0f:64:
         40:60:2b:97:4c:f4:7f:f5:10:31:94:4c:69:78:f0:b6:f7:9a:
         61:55:6d:34:ed:0b:5c:2f:38:cb:15:f1:d8:04:cc:ef:bb:b3:
         03:b1:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:30:13 2025 by rpki-client