Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          /nhHATxpi0qdL3X+d3Jlk58Z54tDdyv/CUnBByq2Ydo=
Subject key identifier:   12:0A:28:F2:87:21:E3:60:14:80:B3:4A:CE:3D:DF:DD:1F:13:1F:C5
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       01974BC49BFB9E7C48CF551F0C7F739D7596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0C64
Signing time:             Sat 07 Jun 2025 19:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:05 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: YBVpzdmY90iQabBEXfu5jSZVKwzyqSmSgc2YZl6qIXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:9b:fb:9e:7c:48:cf:55:1f:0c:7f:73:9d:75:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Jun  7 19:01:05 2025 GMT
            Not After : Jun  8 19:01:05 2025 GMT
        Subject: CN=120a28f28721e3601480b34ace3ddfdd1f131fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:e6:e6:87:d6:a1:3d:98:81:ab:e3:e1:41:
                    c6:4f:22:7d:d1:61:5a:f3:7f:c2:95:92:98:e5:9c:
                    52:a7:57:57:9c:52:8c:58:a9:0e:7b:75:a6:08:76:
                    91:15:1b:d8:58:e3:4b:a1:03:f5:14:7e:41:94:de:
                    b9:59:b1:ad:c0:5f:7b:a6:be:06:44:29:15:ad:d1:
                    23:d0:c0:a1:97:67:5e:32:c7:6c:05:96:37:97:93:
                    58:e8:67:5b:9f:69:b3:fb:01:fe:d6:1a:9c:ee:c2:
                    20:22:15:a9:f2:fb:9a:9d:aa:8d:ec:8e:57:31:f2:
                    79:a3:26:9d:34:1d:c5:90:aa:c4:72:3e:87:75:9b:
                    62:49:55:78:77:21:fd:6b:76:4a:f8:e1:00:29:b8:
                    6e:e5:c5:83:5c:71:73:7d:53:9d:64:a9:4c:07:9e:
                    25:d0:0f:99:e5:1f:c8:c9:45:07:2d:4a:cc:b0:39:
                    0c:fc:69:aa:97:75:75:28:aa:4d:56:bc:e6:de:e6:
                    09:a6:7a:c6:ae:7a:2d:35:62:72:f2:05:8e:d9:54:
                    6b:bf:40:c0:06:6c:d5:97:a3:f4:c6:45:9d:2c:23:
                    d3:49:0d:ac:14:2e:e6:aa:b3:21:c7:2b:d0:88:f2:
                    f6:98:9e:db:ea:fd:16:09:5a:29:3e:da:a8:e1:d4:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0A:28:F2:87:21:E3:60:14:80:B3:4A:CE:3D:DF:DD:1F:13:1F:C5
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:03:bd:99:e0:87:2c:79:43:11:ef:5d:a2:48:88:30:4c:
         72:91:f1:cf:69:df:33:2c:a0:39:6f:14:6d:63:4e:ab:42:20:
         23:6c:a7:49:2d:1c:95:75:03:02:0d:19:47:86:c6:d5:9e:84:
         e0:6e:02:dd:c5:6b:ae:f8:6a:82:4c:4f:09:e5:56:22:e8:0c:
         5e:4c:bf:da:70:9c:54:69:12:0d:92:43:6a:16:00:e2:84:b4:
         0f:69:e2:99:52:b8:78:23:7e:13:62:da:25:f4:29:fc:0f:aa:
         b9:7f:9a:25:53:4a:09:4f:fb:bc:7d:b2:e8:a3:6a:3e:40:4e:
         db:c8:b8:51:33:ce:11:ed:fe:c2:6f:d8:ab:a6:a1:23:82:cc:
         e1:42:a4:b9:9d:28:0e:57:74:c8:45:d8:40:25:7f:8c:9a:8c:
         96:d5:1b:59:26:4f:9d:ae:2a:8d:10:41:cf:73:e1:8f:f4:63:
         83:a2:51:9d:83:ac:58:78:aa:a3:fd:1e:1e:8d:ad:65:08:36:
         94:bb:0b:82:4c:db:53:a1:37:0c:90:bd:34:89:45:79:f1:58:
         60:16:2d:1d:bd:8a:60:c0:31:b9:50:45:12:8c:51:93:4e:d7:
         51:ea:c3:46:41:2d:f8:cc:10:80:c8:76:c4:69:e4:b2:c6:5d:
         c1:05:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:49 2025 by rpki-client