Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
File:                     uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft (raw, json)
Hash identifier:          7f2MT5iSLhxgvXIjY+ipuPFVf57zuxNCTAv0MaFs9Ss=
Subject key identifier:   B0:01:69:AB:E9:4C:FA:DC:A6:36:D6:38:D8:91:29:BC:3D:DB:2F:DB
Authority key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27
Certificate issuer:       /CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
Certificate serial:       019748C2F22B234E5362332BC3EEEAA118B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
Manifest number:          04D6
Signing time:             Sat 07 Jun 2025 05:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:24 +0000
Files and hashes:         1: uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl (hash: pImqWviypBz9k/HYhqduj6tFWdAjiWQSzXbgAV1ri7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:f2:2b:23:4e:53:62:33:2b:c3:ee:ea:a1:18:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
        Validity
            Not Before: Jun  7 05:00:24 2025 GMT
            Not After : Jun  8 05:00:24 2025 GMT
        Subject: CN=b00169abe94cfadca636d638d89129bc3ddb2fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:6a:22:29:0b:27:55:be:5f:90:9e:40:ec:
                    56:63:ac:31:17:32:77:d4:9e:6c:bd:88:06:ba:5c:
                    08:f3:d2:1d:da:c7:74:64:99:22:d7:f9:51:6a:b7:
                    48:3d:bf:3a:9d:e0:3d:eb:ee:09:d4:49:58:0e:e2:
                    8e:4c:8a:1d:43:b4:b7:a1:5a:8e:b2:22:b2:a3:1e:
                    af:c8:bd:e8:2d:ee:63:1c:f6:bb:05:52:be:46:96:
                    ac:e5:e4:b4:b4:a7:66:e4:b3:46:66:1b:f5:f7:a7:
                    f5:d5:43:74:dd:fe:0b:df:c7:20:a2:c4:e5:24:64:
                    6c:1a:32:d4:78:be:6a:1b:d5:a7:a0:e5:a7:9a:da:
                    89:6c:67:ba:d1:8a:50:a3:1e:61:f1:cd:42:51:50:
                    68:d0:ec:6e:13:37:44:d5:0d:a9:c2:4b:00:14:ab:
                    80:59:ea:a5:cb:ca:a8:3c:c0:0d:49:80:7b:56:00:
                    ae:74:00:2a:6c:ab:d1:f9:0d:57:51:ed:c6:09:87:
                    ce:d0:b8:18:68:4d:da:60:2d:90:81:9a:6c:24:a0:
                    4c:0f:0c:9c:ff:da:cb:11:a4:51:00:44:6a:f8:c3:
                    a9:51:36:66:24:a3:f1:0d:9f:15:b4:1a:da:6f:fe:
                    b3:74:c1:1a:39:17:4d:7c:09:00:7d:6b:c4:c3:d8:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:69:AB:E9:4C:FA:DC:A6:36:D6:38:D8:91:29:BC:3D:DB:2F:DB
            X509v3 Authority Key Identifier:
                keyid:B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:41:7f:5d:d4:5f:88:3b:ea:9b:f1:42:72:b6:5b:63:31:
         86:9c:50:1f:f0:74:08:cc:ec:c7:9c:28:6c:9b:34:a6:e1:8e:
         a1:bb:c6:55:33:1a:ad:0e:7b:42:cf:15:23:c8:35:b1:31:87:
         e0:59:67:89:c6:57:63:de:96:b5:84:58:6e:a4:ce:35:f0:aa:
         36:59:26:83:ee:1a:68:b9:43:cd:d0:83:ca:3b:7c:56:b3:ba:
         35:d1:03:76:0c:cd:9d:cf:f2:ee:63:67:bd:60:9f:1c:7b:ff:
         c7:42:28:03:5e:d3:a9:f9:82:56:6a:91:f8:21:ee:56:d8:e0:
         7e:04:fd:ff:07:f4:86:19:9b:d9:3c:ca:50:12:2b:c9:02:f3:
         6d:b8:85:94:77:4a:c4:41:9d:9c:93:8b:e1:52:e4:de:2a:fb:
         9f:18:85:ee:5d:ce:73:4e:aa:a4:0c:77:12:13:1a:76:7c:e4:
         0a:54:b8:ef:f3:da:b3:f8:23:63:42:f1:fa:7f:58:47:fc:2d:
         3d:c9:f8:0f:b3:fe:6e:21:22:a9:14:f1:fb:e7:73:f4:90:59:
         9f:8a:23:2e:05:ea:ff:16:e0:f2:1b:3f:b5:2b:94:35:52:35:
         e7:5f:00:fb:cc:4a:50:08:e2:34:ea:9a:37:ef:06:bc:d5:47:
         1d:1e:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:10:10 2025 by rpki-client