Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File:                     Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier:          poERdCoqb57v8aLbFD0LEW1b34cMVlyCZGnIUIyVhJc=
Subject key identifier:   34:23:5A:E8:A9:AB:CF:3C:AD:83:8F:85:CA:66:D7:51:B6:6D:D3:48
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer:       /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial:       019747427AFF261F313262490A04749E7DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number:          0838
Signing time:             Fri 06 Jun 2025 22:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:28 +0000
Files and hashes:         1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: 9MENzu6YlyGUgkdqOGWHMPO+OUk2OQleF7hVN+m7/D8=)
                          2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:7a:ff:26:1f:31:32:62:49:0a:04:74:9e:7d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
        Validity
            Not Before: Jun  6 22:00:28 2025 GMT
            Not After : Jun  7 22:00:28 2025 GMT
        Subject: CN=34235ae8a9abcf3cad838f85ca66d751b66dd348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:5f:70:de:76:65:8e:1e:70:75:71:19:95:
                    08:42:64:1a:15:0d:69:d0:d0:0a:bd:cc:31:d3:98:
                    bd:06:9d:29:cb:3d:0d:d2:4e:2d:ac:4d:65:23:5c:
                    b5:f6:39:62:2c:d0:7f:d3:eb:d9:95:b6:45:e9:21:
                    d8:4b:89:6b:96:d9:a2:16:a4:ab:ca:22:f2:a0:da:
                    05:f8:4b:c3:ca:25:84:5e:2b:b5:60:38:b4:3a:aa:
                    ca:c8:0f:47:4c:7c:44:b6:51:5a:69:4f:84:52:f2:
                    f1:95:e9:7b:de:04:6a:a1:bc:25:32:0a:76:ec:98:
                    d3:86:8b:16:88:10:b5:61:87:98:fe:dc:cb:65:c3:
                    89:a3:aa:98:a3:f4:ca:ee:9e:3c:2a:79:ae:56:12:
                    b1:57:25:f7:68:c6:8c:39:b5:0b:34:70:61:77:4e:
                    d9:3b:9b:90:11:7a:ae:67:b8:2c:fc:a9:0d:bb:f3:
                    50:8d:35:da:0d:22:98:86:e3:a1:5e:74:a1:56:4d:
                    6a:75:18:fc:3c:46:c9:78:81:22:95:5a:24:64:e4:
                    a7:bc:cb:73:50:16:3f:3b:8b:89:88:c5:14:96:9a:
                    74:25:84:50:45:38:8c:5d:d3:ab:fc:ab:36:0d:14:
                    3b:0e:02:25:44:be:a3:3b:ac:7b:bb:eb:c1:1f:1d:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:5A:E8:A9:AB:CF:3C:AD:83:8F:85:CA:66:D7:51:B6:6D:D3:48
            X509v3 Authority Key Identifier:
                keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:03:ad:8c:0f:1c:9d:ce:f8:e6:1b:42:16:27:04:72:bc:06:
         ff:ae:5f:71:b1:92:74:f5:3b:e0:23:0d:e0:86:d2:96:f9:60:
         f1:0d:1a:a2:49:c7:30:5f:85:cc:a1:d2:25:28:07:34:18:e6:
         7d:00:8f:c6:7d:b6:b5:e6:4b:b4:83:23:e6:9c:a0:af:f4:cd:
         07:67:1c:f9:81:a8:d3:0a:c8:74:3a:66:c9:d5:4f:69:58:86:
         8f:fb:c4:eb:b0:bd:b8:f7:ff:fc:66:f4:04:85:17:c7:33:07:
         55:c5:2c:b6:04:81:6f:fe:04:ed:e1:b1:a1:1c:fa:04:02:01:
         b7:f3:cd:8c:83:23:b4:99:06:68:80:d4:2f:2b:21:30:c6:a7:
         40:2b:8a:a5:4b:88:2e:44:37:fc:f8:5b:f7:c8:d8:19:6e:4f:
         62:b2:e0:07:43:a3:44:9c:a5:13:b3:67:d1:93:d0:46:c4:d5:
         c8:2b:00:0f:9e:f3:56:fb:31:c7:ba:32:83:e4:6f:12:a9:c6:
         63:cd:b3:73:96:cd:20:7e:4f:77:33:4c:e1:ca:d5:d1:3e:39:
         1f:8d:d8:5a:84:6c:f3:19:6d:5e:b2:f8:75:97:49:a0:56:17:
         e3:80:db:20:27:2d:07:82:c0:5f:ef:f0:d0:04:1b:29:c4:ce:
         a6:91:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:12:58 2025 by rpki-client