Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File:                     uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier:          d+XU9x9ufdGsyY5NFupFOXlYv7rIxq4zGLvJ6VbjrG0=
Subject key identifier:   02:19:AF:5F:2A:E9:A2:D7:6B:24:D0:39:C4:8D:F1:59:E4:40:72:84
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer:       /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial:       01974931224610C19969033B7A6DA3737252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number:          0738
Signing time:             Sat 07 Jun 2025 07:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:46 +0000
Files and hashes:         1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
                          2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: v18VFrfnq6Hv926BrNP22jrpHuqjT3ekWT2MBZUw7zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:22:46:10:c1:99:69:03:3b:7a:6d:a3:73:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
        Validity
            Not Before: Jun  7 07:00:46 2025 GMT
            Not After : Jun  8 07:00:46 2025 GMT
        Subject: CN=0219af5f2ae9a2d76b24d039c48df159e4407284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:88:c7:07:24:b6:22:48:06:36:60:d0:bc:
                    ce:9c:3b:66:b4:80:45:10:7a:08:36:b8:e2:23:be:
                    f5:6b:10:44:e6:76:99:d4:b2:11:03:a7:6c:02:72:
                    d2:ff:cf:f5:25:6b:a1:56:66:bc:53:60:34:1c:7e:
                    c6:fe:2c:59:56:b0:cf:ac:6d:e2:be:7a:7e:41:62:
                    c7:c1:5c:54:4c:d1:19:ec:dc:24:fc:69:b1:ff:42:
                    36:0a:d6:21:50:e4:6e:d0:21:4c:1d:61:92:74:c4:
                    62:32:c9:45:a9:58:d7:3c:cb:96:b2:3e:5f:39:aa:
                    90:64:fd:c8:01:ba:83:69:16:1a:4b:b8:13:87:e4:
                    f3:99:6f:c2:84:21:ce:34:c7:a2:32:d8:59:d4:84:
                    e7:0d:1d:cb:ef:2f:53:66:07:5d:df:39:00:5f:5d:
                    90:f2:5f:89:cb:47:21:8c:42:b7:f9:28:5b:ee:02:
                    09:cf:2f:17:67:3c:6b:f4:17:d9:d5:9a:10:e0:e3:
                    92:3b:25:91:00:ce:bc:95:83:14:b2:72:2d:35:f7:
                    e0:66:59:1e:26:5a:2b:9d:f3:10:14:04:76:49:cc:
                    e0:db:32:92:ea:f1:88:0a:3e:fe:2d:21:0e:02:9c:
                    e4:cd:6b:1c:f7:a0:d6:73:8f:70:f0:08:20:b5:48:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:AF:5F:2A:E9:A2:D7:6B:24:D0:39:C4:8D:F1:59:E4:40:72:84
            X509v3 Authority Key Identifier:
                keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:f4:72:60:9b:40:f1:dd:77:2a:35:ac:ad:58:dc:b0:21:
         83:fa:ab:46:a6:26:79:97:80:c4:e4:29:e5:3c:35:ce:cd:03:
         bf:d7:71:0d:04:ad:36:44:3f:f9:cf:15:52:a1:cd:46:5a:3d:
         c2:79:c2:6b:77:ea:35:e7:23:56:32:9f:75:6e:0b:f4:05:46:
         78:10:8f:1e:ea:14:af:72:22:74:a5:bd:86:06:9a:94:59:c8:
         ac:16:0d:6e:17:54:85:bf:84:0a:3f:0a:98:32:e3:74:fe:d2:
         50:f4:c4:d0:cc:e6:1e:f3:23:65:3f:6b:d9:ac:74:f9:f8:30:
         52:6d:9d:30:57:a8:2a:0f:c6:15:44:c3:7e:24:d9:60:78:0a:
         8a:5e:e1:5f:cd:cb:8b:ec:3c:3b:f8:e6:56:02:c3:a5:12:27:
         d6:98:a1:c7:fe:20:eb:8f:21:cd:38:b4:d0:a6:0d:3c:74:42:
         8a:ba:55:55:93:d7:11:01:90:9f:0e:58:8a:ee:08:7b:95:27:
         8a:1c:8b:ca:f5:a2:2f:4c:62:fb:52:9b:67:46:36:ed:1c:e1:
         9a:20:c0:2e:73:b6:b9:ad:ff:1a:61:95:9c:59:d8:77:e7:83:
         7f:31:a6:07:f9:d0:52:08:e3:cf:f4:11:06:46:ac:d3:ff:9b:
         5b:1f:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:34 2025 by rpki-client