Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          5+LBi237hlp+OcFwnmsJJ6uR2vNCMUYN4vfigm186Qo=
Subject key identifier:   D6:C3:26:7F:2E:2D:2C:5F:A6:C4:03:60:75:1A:56:D7:6A:51:2D:49
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       01974FD7BE86CBFD8D8166A648DA07483B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 14:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:28 +0000
Files and hashes:         1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
                          2: Lmvz7UtyX1lXwrZFQxyw10f965g.roa (hash: vCjTy8e/EOIM+a9VJ+a62nLt4xZsnuTV5eHITh46LzI=)
                          3: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
                          4: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
                          5: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: 1aHw2suTNMLdwLFViT7aUWbLOFvigrF0ZLhBKzLaTBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:be:86:cb:fd:8d:81:66:a6:48:da:07:48:3b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jun  8 14:00:28 2025 GMT
            Not After : Jun  9 14:00:28 2025 GMT
        Subject: CN=d6c3267f2e2d2c5fa6c40360751a56d76a512d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:74:19:f4:14:34:9f:25:32:e8:5e:ca:97:
                    29:96:58:a1:26:7d:05:9e:bb:c2:ca:6e:e2:44:05:
                    5c:af:ca:a9:53:37:8f:1e:78:bd:c9:e3:7b:d1:9a:
                    28:93:af:e0:a8:1d:04:ca:c9:01:80:a3:07:be:c2:
                    8a:6b:b5:59:82:b3:df:6b:11:dc:cd:67:63:9a:76:
                    18:5e:95:41:20:2d:a1:48:19:ec:fb:1c:54:15:c6:
                    ce:d6:49:7d:8b:f2:9d:0d:00:da:d0:93:8a:11:41:
                    e3:cc:e0:3d:19:b3:27:a9:0f:39:62:13:ac:49:e2:
                    46:1b:ca:b3:c4:b1:76:46:a5:ec:9f:09:3b:fe:ae:
                    20:54:e6:8d:1f:ce:60:98:20:f2:39:c2:a8:73:bf:
                    44:f9:98:5c:bb:1a:72:7e:49:29:34:0e:dd:a9:f0:
                    3c:3f:50:48:84:be:89:b4:64:49:7a:2d:a9:dc:9f:
                    60:d8:eb:11:17:dd:4f:bb:76:e0:5a:a8:36:59:7b:
                    06:dc:5b:d2:27:46:f3:74:c8:5d:dd:38:18:d3:8b:
                    e9:9e:b5:fd:a7:4b:e0:f6:8c:09:1d:6a:7d:d0:12:
                    00:a6:78:d6:9a:16:66:de:0b:81:0c:ac:86:89:96:
                    f2:a9:a6:97:e5:ae:d1:61:47:e3:34:cc:ec:f3:45:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:26:7F:2E:2D:2C:5F:A6:C4:03:60:75:1A:56:D7:6A:51:2D:49
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:31:46:b2:28:65:24:0b:3a:81:77:18:b3:91:e7:22:47:a0:
         1e:36:f0:a8:02:28:57:6d:48:2d:15:96:eb:14:3d:c8:f8:e3:
         0d:09:72:aa:f4:66:7c:47:97:29:ab:28:a5:8b:37:82:d7:71:
         9e:77:be:e0:45:7d:f7:02:cf:10:20:36:b0:88:cc:8d:f6:02:
         c9:11:9e:ca:14:91:e4:66:a9:41:49:01:82:8c:d8:51:d1:65:
         45:0f:36:10:f9:22:9e:56:d0:51:ca:88:78:f7:54:7f:f3:dc:
         bf:67:01:16:e9:99:83:40:d5:59:62:54:5d:d2:e4:aa:8a:26:
         bc:b7:ce:4f:a5:14:94:88:e5:22:6c:70:9b:16:e0:6b:5f:16:
         a2:83:a8:74:de:48:91:e0:71:b3:ab:02:1d:65:3e:fa:9a:76:
         76:55:15:7d:4f:f9:9f:55:e9:37:6f:26:94:fc:29:96:57:f8:
         e4:f7:d7:38:e6:2e:c6:bf:0a:38:b6:43:8c:07:81:e3:c3:43:
         23:2d:31:cf:4e:55:8f:d4:5e:e9:b6:68:83:b3:f8:32:03:fd:
         60:3d:4f:9f:41:a5:ac:a1:ba:c3:25:33:4b:be:f4:e5:c0:88:
         95:5a:c8:6e:94:44:f7:85:22:64:e7:81:e0:49:06:ab:e7:96:
         67:25:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:47:06 2025 by rpki-client