Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File:                     uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier:          n3sm1QvfngpQSmHZb9vp9ZmSyZp+chFyxrV7LGTlhng=
Subject key identifier:   0F:2E:80:98:A2:46:D9:CD:CF:77:6C:6B:2C:2D:D7:FA:00:26:3A:83
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer:       /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial:       01974B56D8A71478DA7EECDD25315E21BF07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number:          0490
Signing time:             Sat 07 Jun 2025 17:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 17:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 17:01:12 +0000
Files and hashes:         1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
                          2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: 5TeSqsr5bpbK2i9NtfyIeeQby5zPNHP5jHszCowCKgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:d8:a7:14:78:da:7e:ec:dd:25:31:5e:21:bf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
        Validity
            Not Before: Jun  7 17:01:12 2025 GMT
            Not After : Jun  8 17:01:12 2025 GMT
        Subject: CN=0f2e8098a246d9cdcf776c6b2c2dd7fa00263a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:f7:8c:4a:4e:7d:7c:c5:c2:c5:3b:8a:96:
                    5e:f2:d5:fd:18:bf:e2:21:c1:db:ae:3d:9e:d1:5a:
                    ab:10:ef:4e:db:7e:41:02:52:ef:51:0b:df:64:51:
                    a7:b2:0c:9d:15:52:2b:85:cb:86:59:85:ff:dc:ee:
                    de:8f:b8:bc:ee:69:ea:26:53:f0:b4:28:82:a7:40:
                    80:19:2d:a5:23:74:4a:5c:0c:ac:82:8a:61:17:cf:
                    7d:55:59:85:2c:50:8f:5f:e4:06:53:71:eb:59:1e:
                    db:9c:80:cf:03:4d:bf:b6:07:8d:44:ef:31:95:a6:
                    eb:9f:8c:14:09:04:dd:aa:62:cc:8b:bf:db:5d:0f:
                    ac:54:1f:e0:e0:0b:d0:ad:3f:e8:cf:59:ad:d5:03:
                    5d:e6:d0:25:b0:76:39:4c:a1:12:14:ee:14:02:02:
                    db:a6:2d:8b:25:77:c3:8c:52:d8:b4:b6:0a:63:a0:
                    35:2a:6e:69:ec:44:7f:2e:a6:2f:dd:28:67:41:fe:
                    f7:f7:67:7a:75:90:5a:c4:d2:91:88:e5:2c:07:30:
                    6a:8e:48:b0:06:83:cd:04:7d:94:2d:8d:0f:aa:c2:
                    80:9f:79:81:06:b0:9a:96:22:56:a3:18:ba:c7:ac:
                    31:63:bd:bb:c5:1b:b7:bf:02:b7:be:49:41:89:fa:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:80:98:A2:46:D9:CD:CF:77:6C:6B:2C:2D:D7:FA:00:26:3A:83
            X509v3 Authority Key Identifier:
                keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:c1:bf:11:7d:0e:a1:35:3a:00:ea:da:95:d2:09:7c:c3:
         fc:d3:91:33:ae:98:83:b7:8b:dd:ff:11:f9:33:ee:6e:e0:4c:
         a1:23:91:fa:c1:0f:3d:58:cf:93:8c:15:59:53:69:91:a6:69:
         59:5e:be:68:ce:cd:1f:ae:f9:34:18:eb:02:b8:57:42:5f:6e:
         8c:ac:63:2e:d4:2b:b5:0c:e2:da:11:27:3c:7b:20:68:fc:f5:
         4c:ef:7e:9f:81:e0:ce:2e:c6:fc:84:58:84:da:3f:d1:e9:37:
         2f:14:f5:17:1a:6c:52:f7:32:80:44:56:47:e6:9a:0f:18:69:
         bc:77:87:d3:06:1a:47:ea:c3:72:f5:0d:0f:ed:13:93:a5:40:
         e8:85:ef:f6:6c:ae:6b:7c:63:1d:fe:e8:3e:2b:b5:2d:97:b1:
         9b:aa:1e:ac:83:85:8a:86:db:4a:fe:f8:c9:9e:e6:9c:a8:fb:
         d4:6a:dc:f0:7b:15:51:4d:6a:67:be:b2:da:6b:56:55:cd:73:
         80:30:d2:ad:1d:bb:f0:aa:57:af:53:05:24:a2:a0:2e:ff:d1:
         79:df:f3:62:3d:87:4c:dd:be:ed:35:38:c9:bf:9a:a1:ad:80:
         42:1b:86:6c:c2:3a:59:95:af:6f:40:17:1d:1c:56:46:51:4f:
         92:10:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:14 2025 by rpki-client