Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          EnDq5pMm/7uexuOVQDF3XHAf+0s1wHMMKQsolMfN4wk=
Subject key identifier:   A2:68:24:F9:B8:52:85:30:78:43:1B:04:20:CF:20:CD:94:74:65:2C
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       01974C31CDEB11C91267E3559B89124E4E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          0EA6
Signing time:             Sat 07 Jun 2025 21:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:21 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: GUZWJxd48audHfATa3OqlHrOSBNNSQUZXZiwOyvKO6o=)
                          2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:cd:eb:11:c9:12:67:e3:55:9b:89:12:4e:4e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: Jun  7 21:00:21 2025 GMT
            Not After : Jun  8 21:00:21 2025 GMT
        Subject: CN=a26824f9b852853078431b0420cf20cd9474652c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:93:5e:0a:04:ba:e4:86:3c:58:c6:79:15:
                    6a:34:df:1e:94:06:97:39:2e:65:f5:9d:a2:0f:1d:
                    98:2f:1e:e3:d3:c2:bc:bb:de:6c:84:16:72:8b:30:
                    cb:e6:b7:67:8f:d7:75:38:86:4e:c0:2b:76:4f:dd:
                    ea:64:cc:a8:1e:52:56:b3:41:20:3f:c3:a8:98:c9:
                    87:6e:78:06:0c:80:d4:af:8f:cd:b4:c1:33:be:13:
                    ce:5c:2a:e1:51:03:65:57:65:2b:d6:32:ed:57:4d:
                    d3:51:c5:5e:8c:d1:68:b7:6a:21:50:3f:3e:01:b2:
                    ac:5f:97:04:5b:8b:0a:0a:6c:68:eb:47:c9:4b:05:
                    7b:65:6b:3c:5b:4f:b6:bf:ff:98:92:83:af:5a:ad:
                    a7:56:49:2e:27:9a:ac:fd:62:dd:dd:69:9f:aa:45:
                    a0:62:00:38:56:a3:10:ef:44:cf:5e:6b:89:db:92:
                    1f:90:37:8e:1a:aa:79:54:a6:9a:5d:9f:0f:50:b0:
                    11:97:d4:1b:78:89:58:85:7a:56:e9:e1:0a:dc:bd:
                    8b:e1:c3:41:ba:41:00:a4:e0:f6:0e:5f:6c:85:6f:
                    9d:f4:d3:ef:98:c2:17:e1:4f:3a:2c:73:79:bf:54:
                    c0:df:22:42:7a:60:d8:ea:83:06:34:53:04:bf:c8:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:68:24:F9:B8:52:85:30:78:43:1B:04:20:CF:20:CD:94:74:65:2C
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:de:fe:fa:11:fe:78:53:9b:65:a3:2a:6f:a5:ac:f0:0f:
         28:76:57:52:97:9a:aa:13:c5:3c:9a:58:f3:8c:09:5c:d3:39:
         df:06:ff:01:fa:b9:9c:1c:4c:e0:e1:5b:c5:6e:d3:2d:36:7e:
         97:9d:f5:63:20:8d:fb:8c:19:99:71:1b:8a:29:3d:17:5b:d5:
         71:bb:4f:cb:99:af:c1:3f:4f:a6:ec:6f:c2:bc:75:a5:67:f5:
         43:20:23:83:94:ad:9f:2c:46:e9:47:67:a2:0e:3f:ad:53:fe:
         ee:51:f3:a1:5c:f4:29:25:ec:1f:d8:4e:1e:8d:f2:c9:45:5c:
         25:6f:a1:e3:b5:7e:88:5f:cf:6b:6b:12:85:fd:51:ff:f2:91:
         1e:b9:3b:8d:2f:76:49:4c:e7:f5:b9:9c:2d:4e:60:74:4a:3e:
         9b:ac:0c:07:db:08:71:63:bd:32:97:76:c6:52:75:3a:44:18:
         f1:4d:db:31:bb:bf:95:1e:7e:d0:24:79:60:e3:59:b6:5a:e6:
         5b:d2:9f:45:88:93:32:58:da:94:ba:0b:0f:b1:a6:c4:28:ea:
         c2:c4:b5:cf:30:79:19:29:77:84:59:d1:6a:85:28:cd:a3:f3:
         68:e4:58:79:8d:6d:4b:28:df:1b:02:6c:e1:fb:7c:d7:8f:02:
         bd:a7:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:07 2025 by rpki-client