Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File:                     ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier:          Gt+B/Z+OVy/cwH34N+fKjnnXli87zTTKEB/sEeRQW24=
Subject key identifier:   93:7E:7C:FE:1E:FC:58:CF:B8:27:B7:ED:2F:73:BB:67:E0:8B:74:7E
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer:       /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial:       0197684DFBECB762B516C093DE0E1422041F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 08:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:30 +0000
Files and hashes:         1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
                          2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: RBxzYY8QYLX06lFy5S4VFBI9EwQrQTQlc/mDJaG3stY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:fb:ec:b7:62:b5:16:c0:93:de:0e:14:22:04:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
        Validity
            Not Before: Jun 13 08:00:30 2025 GMT
            Not After : Jun 14 08:00:30 2025 GMT
        Subject: CN=937e7cfe1efc58cfb827b7ed2f73bb67e08b747e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:ff:99:73:4a:57:56:46:90:21:a5:85:cd:
                    a0:72:73:57:67:67:d5:c5:35:e5:c4:02:c0:a2:4b:
                    e6:a1:8d:03:c5:a0:da:9e:7e:23:1f:3f:42:ba:75:
                    31:90:d5:4b:ff:77:7a:92:60:28:3d:9d:fe:2c:55:
                    0c:1d:fc:5a:b9:a6:31:1a:de:42:c0:af:06:9d:cb:
                    41:4c:72:3e:69:96:16:13:8c:e2:cb:99:29:ca:a8:
                    54:96:fb:69:58:70:26:cb:73:d4:64:10:78:05:9f:
                    32:32:11:4f:1f:d8:a8:b7:81:a7:07:13:44:7d:d3:
                    f3:f7:4b:71:f5:3f:78:83:f5:9a:0b:f2:e0:ba:f5:
                    fc:55:d2:45:47:95:17:23:da:7d:e2:cd:27:9e:d5:
                    26:9f:d6:07:02:d1:ce:c7:1a:d6:28:87:60:0a:3f:
                    ea:53:37:6c:30:70:2d:6c:c9:60:e3:bd:67:d3:64:
                    4c:95:8e:77:08:50:db:82:78:b5:c5:fb:49:ab:13:
                    dc:ec:9a:c0:70:42:01:1e:9b:6a:4e:b7:42:e8:45:
                    6d:fc:b1:7a:ec:10:76:dd:4d:09:fe:8c:3d:68:d9:
                    e4:4a:9d:79:c7:56:b9:2c:ef:ee:b8:db:65:52:e3:
                    59:55:cc:ba:1c:de:13:0c:f9:3e:c6:44:f3:6c:31:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:7C:FE:1E:FC:58:CF:B8:27:B7:ED:2F:73:BB:67:E0:8B:74:7E
            X509v3 Authority Key Identifier:
                keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:ad:f7:06:ee:a2:40:37:97:48:c9:2a:be:99:02:3f:50:
         eb:b3:89:10:b9:8a:b6:19:39:45:7c:f2:e1:94:59:a4:14:95:
         06:2f:c3:ab:83:87:22:47:9b:47:b6:d7:56:bf:a1:53:ea:57:
         51:54:ce:f8:bf:09:12:a2:2e:cc:03:78:da:97:32:81:b8:ab:
         db:f2:ab:49:76:6d:23:75:1f:a7:71:7a:bb:22:eb:d0:77:23:
         7c:69:57:51:38:1b:7b:02:f1:29:ed:8f:46:cf:38:db:bf:ff:
         a8:6c:d8:61:e4:4e:3e:79:71:32:6e:cc:bf:06:e5:33:4b:bc:
         b1:18:6f:7a:d1:0c:bd:e9:cb:5d:7d:35:59:d7:01:90:e8:14:
         3f:ca:56:7d:13:e2:04:64:b4:04:98:e8:bb:79:a0:56:9e:84:
         53:af:3b:90:9a:2a:4d:5c:6b:b3:a1:02:06:13:ce:60:89:6d:
         d2:bc:39:27:99:cd:32:52:13:a8:7e:0c:d1:c8:eb:32:01:bb:
         6b:1f:f3:d8:f0:57:e5:49:61:85:c4:e9:b7:6e:21:3b:12:9e:
         cf:19:96:8e:a1:e1:fb:c8:81:c0:21:47:31:44:95:a6:64:06:
         2c:47:27:c2:0e:6f:be:00:f0:cb:26:2c:29:5c:72:50:97:73:
         4e:10:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:19:42 2025 by rpki-client