Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
File:                     uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json)
Hash identifier:          lv5w0zW2nAh30mFFAMKAXEVvg3zrfwoYMokZ8Y7BgAk=
Subject key identifier:   CB:77:44:36:C3:D6:A6:7E:00:CE:92:71:8D:8E:41:1B:DD:4C:F5:0C
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Certificate issuer:       /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial:       01974B1F749564D67A23293D6553C0FAF8DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
Manifest number:          0748
Signing time:             Sat 07 Jun 2025 16:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:42 +0000
Files and hashes:         1: fmD84MKcKNszvegRc78ea5yDEkU.roa (hash: l40Hf3OlT5bsApNDrNH7Y+k7wZYD3XggeWdBVJzjivU=)
                          2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: ZkJfb+HWwaFZZu9IAXhawsQoC+edyDn/8PXGeqPtPHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:74:95:64:d6:7a:23:29:3d:65:53:c0:fa:f8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
        Validity
            Not Before: Jun  7 16:00:42 2025 GMT
            Not After : Jun  8 16:00:42 2025 GMT
        Subject: CN=cb774436c3d6a67e00ce92718d8e411bdd4cf50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:67:18:2f:e2:ed:f4:df:d2:0a:b9:29:52:
                    3f:9a:32:96:08:e7:25:5b:c2:56:04:01:9b:fe:21:
                    24:8f:31:e4:82:7b:81:4b:a6:94:f2:16:b7:4b:59:
                    d4:48:e1:ae:92:64:9d:39:7a:02:0f:37:f7:9d:a6:
                    6e:0a:9b:dc:48:63:fc:f5:ac:5b:e0:27:8b:17:1a:
                    3a:24:36:5b:c0:b7:de:5c:43:91:83:66:c4:28:ee:
                    83:5e:17:5d:fd:8b:46:f1:67:b3:4b:87:73:ee:10:
                    c1:c0:3f:37:cb:e5:56:ce:7b:db:3a:37:55:14:cd:
                    47:7f:f3:55:05:dc:88:08:21:b0:23:55:c1:2c:3d:
                    d1:90:7b:1a:7a:35:63:31:fb:13:0e:30:55:6b:ac:
                    42:ea:f7:00:00:04:94:9e:ac:fb:a8:a5:8c:35:5a:
                    44:0b:e1:c1:f7:d4:ad:1d:ef:fa:52:98:b8:be:57:
                    d5:2b:e4:cf:03:75:5e:6d:8e:70:eb:3f:b9:71:d5:
                    38:92:bd:51:28:42:7e:23:8d:6f:9a:e3:95:d3:cc:
                    51:1b:07:96:59:df:14:46:d2:6d:d2:70:de:00:7a:
                    ab:96:b7:73:d2:50:3d:fd:8a:6e:7c:7f:75:55:9e:
                    f4:13:a8:ab:25:85:64:13:69:96:f3:ee:1f:d3:b9:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:44:36:C3:D6:A6:7E:00:CE:92:71:8D:8E:41:1B:DD:4C:F5:0C
            X509v3 Authority Key Identifier:
                keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:03:ad:81:68:fc:5a:ef:cd:dd:ff:01:47:e0:c3:2b:00:79:
         2f:49:8b:bb:c6:90:78:27:6e:24:55:80:db:f9:03:b9:6a:20:
         c4:8f:e5:44:16:a6:10:84:57:53:73:ac:21:dd:ce:16:97:2d:
         11:57:16:a5:32:ea:79:45:93:a1:a0:e8:8d:8b:0d:2e:cb:b5:
         8f:73:7c:a5:2e:d2:8f:ec:c2:24:7e:0c:47:a8:1b:95:9b:81:
         3f:a6:5a:48:c2:04:8c:25:2d:d6:be:18:ec:07:5e:93:af:23:
         5f:87:5b:5f:a2:97:d5:5f:08:27:fd:d1:8e:d0:c6:3a:0d:5a:
         1d:e6:ac:a9:02:2e:9f:86:00:55:95:1d:73:ec:23:d3:ab:ea:
         12:a6:ca:a7:c1:0f:04:a4:80:b9:19:df:20:1b:5d:f8:84:11:
         ba:cd:1f:52:22:e3:e3:4b:f5:bd:71:30:2b:e0:45:87:03:4d:
         c2:cd:7a:d6:ee:e5:28:e8:aa:db:d1:a5:a3:cb:97:b6:fe:df:
         60:4c:d5:19:bf:7a:e2:b9:0f:e0:17:d3:0b:d1:a7:3f:67:71:
         a0:f3:16:cf:fc:8b:79:bd:4c:41:00:72:17:1d:3b:c9:a2:7f:
         94:59:61:87:40:d8:f0:34:9d:4d:eb:13:1f:9b:de:b3:e9:79:
         6d:d3:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:10 2025 by rpki-client