Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File:                     g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier:          FuIgkNo4RT/iJkWBvxyvSKt8SeARuczxvk58uL2FMlw=
Subject key identifier:   4B:8E:DA:08:66:84:03:7C:56:B5:49:C6:68:C7:EB:98:8F:6F:F1:7B
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer:       /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial:       01974967F889A8FD466E6F8F64A28B55D342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number:          0896
Signing time:             Sat 07 Jun 2025 08:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:39 +0000
Files and hashes:         1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
                          2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: jU02LsnPD7HHW2EmcjRuy4Ay6+On8cqzw6TRXUe7iY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f8:89:a8:fd:46:6e:6f:8f:64:a2:8b:55:d3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
        Validity
            Not Before: Jun  7 08:00:39 2025 GMT
            Not After : Jun  8 08:00:39 2025 GMT
        Subject: CN=4b8eda086684037c56b549c668c7eb988f6ff17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:93:97:87:c6:48:b5:99:4c:3c:a0:2e:7d:
                    4d:7a:85:24:11:9a:84:89:10:71:c2:4b:a2:43:87:
                    20:5f:fe:82:44:24:50:79:2f:01:40:da:d5:3c:50:
                    ad:62:0f:18:b3:6b:ae:57:fc:c8:39:d2:c8:fb:b6:
                    f2:15:63:cd:ab:3d:96:59:4a:00:9d:f2:66:cb:69:
                    da:8c:6c:1d:65:59:dd:bd:0f:d2:7a:6c:45:67:32:
                    cb:cf:84:c0:48:41:8a:0f:ba:7d:53:1a:8c:4e:50:
                    5f:9a:74:fb:5a:7d:03:62:85:bf:e7:38:a7:f8:18:
                    b0:16:bc:35:e1:5b:f3:86:16:10:01:4e:3e:02:cc:
                    21:db:f9:b2:77:46:f0:43:d0:b9:6f:ed:ae:57:86:
                    51:d7:3f:a8:fc:d3:3b:d8:3b:dc:74:da:b1:59:d9:
                    20:51:c4:15:65:5d:1c:e6:10:35:b8:4c:d9:5c:2b:
                    71:5a:1f:fe:01:92:7e:7d:07:0f:95:c5:77:cb:be:
                    12:85:5b:cc:2c:c1:bd:13:88:95:8c:f4:d9:6d:12:
                    f5:eb:f6:8b:2b:f4:bd:eb:4e:7a:bb:eb:d8:d8:90:
                    c0:38:00:50:11:ac:ee:03:6c:3a:e0:0c:13:33:cc:
                    ff:eb:3c:2b:35:64:1c:62:d2:82:d6:7d:9f:24:76:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8E:DA:08:66:84:03:7C:56:B5:49:C6:68:C7:EB:98:8F:6F:F1:7B
            X509v3 Authority Key Identifier:
                keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:40:7a:17:8f:81:2b:99:2d:f4:27:0c:38:a4:31:85:d0:d1:
         65:5c:22:35:2f:cc:26:b2:fc:2e:d2:2f:f7:43:64:2b:f1:10:
         aa:77:7b:76:6f:e4:e9:81:a6:4b:62:f3:f7:99:06:e5:2f:d1:
         31:ef:68:9a:3c:68:5f:56:a2:58:9c:de:3c:ae:c1:f0:33:91:
         a3:90:c8:7c:61:a1:e7:ca:c7:25:11:98:67:38:10:66:6b:e4:
         99:9c:ca:8c:f5:76:68:21:88:bf:21:7e:3c:1a:6f:ff:bf:06:
         6e:19:60:22:6b:5a:90:38:b8:57:19:31:74:3e:54:f4:95:72:
         38:92:5b:43:5b:b7:7e:74:e2:67:7d:8e:fe:26:5e:c1:2f:73:
         0c:57:b5:63:69:27:44:b5:34:48:7a:fc:30:67:2e:28:aa:a6:
         d3:22:6c:5c:b7:de:6e:49:fa:69:3c:91:d7:a2:13:8b:81:f6:
         43:d6:ce:ee:e1:e8:a8:d1:4e:58:bc:e5:54:1c:d3:28:d5:1d:
         49:4c:35:fa:bf:25:69:48:44:15:48:68:91:81:0c:e6:44:2e:
         13:f3:5a:b1:66:51:fb:dc:60:7f:cf:84:9b:cb:ca:4f:82:5a:
         25:30:dd:50:41:c4:ce:18:ee:60:b5:86:c9:fe:b0:bf:09:1c:
         7b:7d:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:02 2025 by rpki-client