Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
File:                     UUtNPv-4vQsTNu68uCe3fhKeD28.mft (raw, json)
Hash identifier:          eUWrWE/HNqudl69UUVhdurs7WfcuMoVfqki67v8xtYQ=
Subject key identifier:   ED:AA:86:70:9F:9D:FD:83:2C:F6:42:56:49:FA:76:86:8F:DB:65:AC
Authority key identifier: 51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
Certificate issuer:       /CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Certificate serial:       019746301BB34F2F9FA9961070D89AF50A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
Manifest number:          09E6
Signing time:             Fri 06 Jun 2025 17:00:47 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:47 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:47 +0000
Files and hashes:         1: DkmUUaZoynIEdlR9hMmyYSS3NfA.roa (hash: JaWDKrMwIijsWs6TG8arC0MUQjJ3dz0V76FJO19Gqec=)
                          2: UUtNPv-4vQsTNu68uCe3fhKeD28.crl (hash: 4njMs8j12AY/fUXCtCWOdpypm+9LO8M1/TTTFonS+jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:1b:b3:4f:2f:9f:a9:96:10:70:d8:9a:f5:0a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
        Validity
            Not Before: Jun  6 17:00:47 2025 GMT
            Not After : Jun  7 17:00:47 2025 GMT
        Subject: CN=edaa86709f9dfd832cf6425649fa76868fdb65ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:17:d5:7e:c2:9f:db:04:0a:d9:5c:b2:8b:
                    78:bb:fa:83:8a:a7:42:fe:ec:81:f0:90:ff:eb:47:
                    a5:dc:32:e3:a2:87:a5:6c:f6:5c:d1:ae:8e:b0:74:
                    37:ff:f1:e2:d8:f1:b6:2b:57:ae:2d:6f:e5:f2:ec:
                    a4:3e:7e:d3:12:e7:8f:97:cc:45:dd:18:10:42:80:
                    bb:4b:ac:75:08:03:bd:16:10:b5:85:73:c1:3f:de:
                    d3:5f:dd:34:01:fb:4d:97:d9:55:f4:65:48:d6:f8:
                    e4:8f:b9:29:f1:18:46:e8:67:ca:1c:6e:9b:7a:f4:
                    3e:60:1a:05:26:f0:f7:3f:8f:76:db:95:a3:1b:f4:
                    9f:e1:af:8f:f3:1f:42:cd:73:75:06:70:7f:2c:e2:
                    70:5e:f6:76:52:f6:94:82:a1:4f:63:2d:3e:10:ed:
                    97:8c:64:d5:2d:61:36:f2:89:e4:5a:4f:3a:03:59:
                    e3:36:7f:25:ec:8f:f2:a7:c6:e2:2d:70:89:53:c9:
                    0f:7b:cd:5a:d8:33:09:9e:22:42:25:b3:9c:03:13:
                    a9:2b:d4:90:1b:e1:cc:01:65:4e:e3:93:8c:a0:a7:
                    fd:a9:f5:52:c8:6f:18:46:a4:53:00:54:71:ef:db:
                    1b:e5:2b:c4:30:db:cc:31:21:dd:69:c7:ef:d8:09:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:86:70:9F:9D:FD:83:2C:F6:42:56:49:FA:76:86:8F:DB:65:AC
            X509v3 Authority Key Identifier:
                keyid:51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:c2:d9:e0:4c:f9:79:7c:47:1a:38:5b:08:94:32:01:bd:
         eb:c8:5d:5c:52:79:ba:a3:81:a8:e3:42:49:b0:9a:d2:2f:37:
         29:f1:dd:e4:8a:bd:03:48:9e:58:75:8e:37:6d:9c:5b:cc:f9:
         82:ac:5e:ac:fb:5c:8c:37:7a:2c:83:fa:62:61:89:36:b0:4e:
         1c:a7:23:3d:1d:a0:9b:3f:84:08:0d:d7:e1:20:19:5f:4e:66:
         63:bb:16:d3:70:80:94:b5:46:a7:e5:f3:de:fa:21:49:66:6c:
         48:66:43:bf:3c:98:37:5f:ff:94:55:43:2e:5d:4c:49:d3:15:
         bc:97:bf:6e:11:40:eb:2b:ff:d2:77:f6:5d:b4:8f:99:74:f8:
         82:5f:28:55:fb:b7:9a:6f:97:00:12:d8:9f:86:a4:59:9c:b8:
         a4:98:59:9c:7e:a0:1e:75:3a:74:60:60:31:49:b0:70:46:46:
         52:96:b3:09:52:23:c5:f6:d4:5b:b7:55:9f:1f:b3:d0:81:93:
         3b:52:98:24:5f:2c:32:8d:f7:0a:0c:79:c8:be:03:38:9d:28:
         47:77:0d:39:47:c4:6b:76:5c:a0:b2:18:97:6a:3a:97:8c:72:
         6f:65:bf:66:a3:b4:82:76:a6:28:82:d6:dc:63:a2:94:48:79:
         bc:00:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:03 2025 by rpki-client