Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          0Htjqza0VRzb3ItO59rY7IPCo1+LKLVGynd3NcC2Un4=
Subject key identifier:   F5:45:38:A8:82:F2:A0:16:EE:9D:B0:6E:9C:FE:5C:FC:6B:CD:DC:72
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01975E6F65C3D064213CA7477598C20221CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          015C
Signing time:             Wed 11 Jun 2025 10:00:48 +0000
Manifest this update:     Wed 11 Jun 2025 10:00:48 +0000
Manifest next update:     Thu 12 Jun 2025 10:00:48 +0000
Files and hashes:         1: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          2: C4Up61Dgu__WghpkGF8FKpQY398.roa (hash: b8S8SJqeFu8XgJiMJ0Lra7MgR4ZTRQMgjWTkGpevN2k=)
                          3: W_QbYX9ZTefRSwKnL72ps23YkbU.roa (hash: O+yO4y0kWUxUwS+WjWuH503NMuQYxW5RzvY5stzKpfg=)
                          4: _fQHDe_QsKzj39wSIbj-uT5L7fw.roa (hash: z8zH4/OhWjUk6gre54FhJk9W2UZF11eYo2fYY4nmoyM=)
                          5: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (hash: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=)
                          6: ikaCSqXI6xfl5qVDi3yr58aTFuA.roa (hash: N8S/41ybeOjv/UdOqBCbTzj0r4lou4Hpt/IYlvQhpik=)
                          7: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: wrfo83/tahUJpd9WgbDAYRiDmeE+r8hqO6P+ptGOKSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:6f:65:c3:d0:64:21:3c:a7:47:75:98:c2:02:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Jun 11 10:00:48 2025 GMT
            Not After : Jun 12 10:00:48 2025 GMT
        Subject: CN=f54538a882f2a016ee9db06e9cfe5cfc6bcddc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:a1:74:a7:fb:f6:c7:a4:18:f5:2b:c8:50:
                    19:28:d5:90:4a:dd:86:fc:11:71:73:63:14:c3:04:
                    75:31:69:d0:8f:cf:62:98:2d:32:38:36:32:a1:19:
                    5e:9d:48:d4:5c:f6:3b:63:0e:dc:d7:bf:ad:85:a1:
                    6a:54:56:4a:f0:2b:eb:06:56:97:3e:8e:39:89:5e:
                    65:19:8b:7b:7e:57:73:67:f4:e7:cb:3d:52:a1:0f:
                    88:89:ce:06:53:47:87:a9:c2:ee:e1:2f:37:d0:e3:
                    d3:18:d7:6c:ee:db:a8:56:1c:d3:3f:11:05:de:f2:
                    a3:5d:9f:70:b8:c3:f8:8a:38:ab:e3:43:e2:dc:27:
                    0e:24:85:89:c7:eb:9b:ff:97:6f:f9:f6:47:37:12:
                    e2:67:6b:22:63:2f:f2:d9:c4:a4:01:ea:f5:40:b4:
                    d8:3c:58:6a:1b:18:45:cf:26:0e:17:b4:68:f4:61:
                    72:73:ec:d1:d7:eb:31:af:2c:8d:eb:09:02:8d:f2:
                    4e:b4:c4:dc:5d:a9:5b:3a:26:ce:45:e9:c4:81:60:
                    23:a6:9e:e9:44:a6:ae:9a:22:98:66:0f:99:6f:ab:
                    03:8c:07:7e:be:85:e2:96:7d:b5:76:f8:72:de:f4:
                    11:9a:ff:40:02:c8:e9:90:d4:3e:49:e4:53:19:b3:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:45:38:A8:82:F2:A0:16:EE:9D:B0:6E:9C:FE:5C:FC:6B:CD:DC:72
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:48:04:2a:0e:b0:e3:5e:b0:9d:f9:1e:01:59:75:26:a5:7d:
         a9:9d:9e:4f:d3:88:84:41:f2:4a:8c:6f:5d:7f:85:a1:3a:c7:
         b3:b3:9e:63:fa:8a:ea:4b:05:e2:91:48:91:60:c3:68:f3:f9:
         32:f0:a1:4c:81:7a:0b:c0:f6:ab:43:01:b7:3a:1f:4d:c5:4a:
         96:fe:f9:5a:5f:de:29:14:e0:c0:03:bf:f0:78:9c:bd:88:9e:
         7c:58:5a:e3:76:ae:26:c1:27:2f:01:fc:47:51:05:4d:76:7c:
         8f:c2:71:0d:9d:d1:19:9e:dc:72:b3:7f:d9:b0:a2:29:e2:74:
         44:47:46:25:f8:2a:b5:11:04:7b:5a:0a:7f:97:e7:92:f4:66:
         86:95:c9:a2:f5:5e:4a:ac:85:41:93:70:49:f4:ad:ac:5e:fe:
         15:2a:ec:fd:25:0a:fe:c6:51:4a:9d:33:bb:ab:fa:83:3e:78:
         5b:ab:58:a9:9b:b0:0c:1f:1b:93:ff:a2:7c:9b:62:cf:a9:c8:
         06:6d:43:f0:6c:0c:e1:f0:ef:21:66:51:b7:7b:3a:21:b8:20:
         da:55:3e:f3:ed:c6:99:5f:27:60:62:47:a9:d2:de:05:3a:0d:
         3d:96:de:89:38:9d:24:a3:cb:0e:ae:cf:f8:ad:51:b3:07:eb:
         37:cd:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:20 2025 by rpki-client