Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          sGq8P84JQniK2Z+qcYjvUcugf8HCArtrow+vIrbmV+U=
Subject key identifier:   26:0A:43:43:6F:A0:02:92:56:2C:C9:8B:C7:05:52:B8:44:2E:35:97
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       01974C69A10730296FD265300813F2946040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          12CB
Signing time:             Sat 07 Jun 2025 22:01:20 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:20 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:20 +0000
Files and hashes:         1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: e7GGl7hXE69R/TRaFio1vuacI0WwFHRYIkUHbrYR5cI=)
                          2: lbTglUB_cuWwuUtQ0HuYFd1iErc.roa (hash: SqLRBaYjg0lLeWRsw+zkUvg9dbqxK2qZeJXDb+7pMGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:a1:07:30:29:6f:d2:65:30:08:13:f2:94:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: Jun  7 22:01:20 2025 GMT
            Not After : Jun  8 22:01:20 2025 GMT
        Subject: CN=260a43436fa00292562cc98bc70552b8442e3597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:17:56:72:9c:77:48:77:6c:bd:9a:4b:8c:
                    34:b1:f5:d8:c8:b9:08:21:7f:d0:e2:08:96:60:a6:
                    c3:e4:c9:82:92:03:39:66:c5:8a:41:cd:7f:ad:2d:
                    10:a9:8e:1e:6e:71:cd:b2:e9:5b:d1:c3:a0:e7:71:
                    06:ba:b8:8e:9a:6f:31:9a:40:94:3f:86:71:fd:62:
                    2d:e2:56:db:5a:0e:8f:44:32:5e:2e:b3:58:16:47:
                    f3:4b:06:10:1c:c8:5b:1b:dc:c4:f0:8f:5d:52:cf:
                    84:3b:9d:ec:d6:74:26:96:64:fb:fd:2b:de:37:4a:
                    7c:a9:9b:4b:c3:bd:9f:aa:30:d9:6f:2c:b1:65:3b:
                    bd:70:03:00:51:bb:39:42:95:38:65:11:01:78:c2:
                    f8:bf:09:e2:d5:90:89:eb:49:cd:0b:8a:ce:f1:ab:
                    06:e4:e8:4a:0c:7b:a0:25:db:9e:8c:e2:80:b1:65:
                    a2:37:04:8d:6b:b3:3b:aa:2d:6b:af:e9:56:38:c3:
                    5f:7e:af:b9:16:f5:50:e9:f1:d4:91:58:db:64:c1:
                    fd:df:8f:13:3e:b8:0f:0f:7b:10:c6:27:4d:e6:b0:
                    65:72:29:21:08:5b:73:7d:05:37:ec:fe:6a:ce:6f:
                    d8:bf:be:7c:18:a1:9b:9b:af:68:46:fd:63:f0:09:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:43:43:6F:A0:02:92:56:2C:C9:8B:C7:05:52:B8:44:2E:35:97
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:31:9d:ba:33:ee:75:01:e6:ca:c5:12:e8:0e:19:27:23:77:
         e0:69:4b:71:43:dd:cf:b0:e5:e8:45:0a:87:99:24:2d:74:10:
         d7:1f:f8:5e:e2:de:08:b5:c0:b1:80:ed:66:f7:be:47:25:51:
         15:8a:17:64:9c:e6:26:a8:36:97:a9:7b:7c:4f:16:14:c8:7f:
         92:63:37:50:76:5b:93:63:69:d0:f0:71:ff:88:47:f1:24:cc:
         ef:82:b7:d8:ff:df:ed:62:ed:99:d3:0f:4e:8a:30:37:1f:f7:
         dd:cf:e0:ba:d0:d1:62:00:f2:7d:4e:f7:1b:67:bb:49:ba:bd:
         c2:33:c1:56:9d:d4:24:1d:9f:90:21:5c:20:06:e9:c2:18:ce:
         20:1c:22:14:95:f3:a4:41:bb:8b:90:be:aa:62:da:db:e6:c6:
         e3:30:ee:e2:01:5b:4a:ab:84:74:ae:37:7e:84:0a:5e:ef:9b:
         f3:9e:79:4e:49:d6:a9:f6:b9:73:e3:90:ba:33:14:32:7e:85:
         25:3e:c9:fc:32:de:d1:ef:01:94:9c:58:ec:fb:4f:07:af:aa:
         7c:ea:29:39:f8:95:6d:14:76:dd:c3:fa:10:3c:79:76:3f:6f:
         32:0f:29:56:bb:43:d2:63:68:2c:0b:41:66:e4:71:ca:63:89:
         3b:99:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:17 2025 by rpki-client