Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File:                     UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier:          jlTyawvhTRt318dIwo4389Zy6AHjLhE6dfv2l26xHpo=
Subject key identifier:   C3:06:26:BD:AA:BB:FD:F6:B2:35:A0:46:71:50:11:34:7F:CA:BF:B0
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer:       /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial:       01973986E2C9D8505231C30D3D3A08681D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number:          0ED8
Signing time:             Wed 04 Jun 2025 06:00:30 +0000
Manifest this update:     Wed 04 Jun 2025 06:00:30 +0000
Manifest next update:     Thu 05 Jun 2025 06:00:30 +0000
Files and hashes:         1: 3r_ETONky6E0ht04dT8KlE05aWA.roa (hash: 5YqtEwAOo33bp6YyDMyktpU2orZ8oIMLNsWxsJ5Pw74=)
                          2: 6czTDwgbw_hG3rtX5EbRgdxWDCg.roa (hash: O6dY+2pnFwnKeeBFsLsl5BJ8l9rfKrvyLFI9YgpRmUc=)
                          3: QpAJ4vf1qXK5jaYvVWmL5jIF3Pw.roa (hash: cvXwgvPz8qfjcC7GpIKDqE7c3dlSczcrBaKQqZloC5A=)
                          4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: Ws4Z9XGTB87e+wDWULjWBVFDW0/Nl+daCZdvh+BjI9k=)
                          5: hXvKA5uXq9fHfGbQP3jsD3XVrgo.roa (hash: kSmYrg/l/aoXGp6g2rsqAnZqsn/T1RMfjN3KJX086Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:86:e2:c9:d8:50:52:31:c3:0d:3d:3a:08:68:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
        Validity
            Not Before: Jun  4 06:00:30 2025 GMT
            Not After : Jun  5 06:00:30 2025 GMT
        Subject: CN=c30626bdaabbfdf6b235a046715011347fcabfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:6f:bb:4e:12:3c:ce:57:72:64:fd:09:e8:
                    24:1f:bc:43:10:bb:44:47:40:1b:f9:b2:e6:6c:cd:
                    ba:10:de:8a:a7:b7:3c:b3:5c:d0:b4:78:94:fc:8e:
                    20:e7:1c:5a:ba:96:b1:b1:ea:a3:6c:7b:8c:3d:02:
                    03:82:db:ba:6b:fc:20:17:fd:08:c1:da:f4:1e:8c:
                    10:50:75:77:51:f0:70:b3:c9:7b:da:f1:0b:5c:f1:
                    20:62:90:05:68:e0:86:fb:68:61:af:55:7a:19:de:
                    af:cf:52:c8:be:c7:d8:a3:cd:a1:24:5a:75:a0:59:
                    c6:9b:16:0c:24:71:27:2c:fa:91:64:54:0e:71:56:
                    86:49:10:94:3a:03:9a:fd:ad:73:6e:0c:ed:91:71:
                    7a:8a:72:44:cd:b5:83:66:90:da:1e:30:1d:39:f9:
                    a6:98:0a:72:ce:58:95:1b:ef:80:ac:23:7b:29:fb:
                    26:14:e0:a6:6d:01:70:75:b9:ab:e6:ab:f3:c9:d0:
                    e5:1c:86:5e:7e:a2:03:53:63:0c:4f:b3:ef:4b:7b:
                    ae:44:e1:c7:25:1a:23:85:1d:80:80:68:cc:31:33:
                    37:8a:d4:45:2b:b1:89:07:99:07:0a:b6:0a:fe:c4:
                    c5:3a:42:e3:11:9a:dc:42:f4:eb:1d:68:65:09:9c:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:06:26:BD:AA:BB:FD:F6:B2:35:A0:46:71:50:11:34:7F:CA:BF:B0
            X509v3 Authority Key Identifier:
                keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:3e:6e:52:a7:ab:4b:1b:f9:63:74:09:60:ec:0e:b9:8e:
         73:94:38:57:31:ee:98:a7:1b:c6:5e:5f:7b:86:30:27:f4:9f:
         e1:d2:39:18:20:c6:b7:f2:63:04:ed:2d:b1:65:38:84:bd:50:
         b8:e4:ef:6c:11:b4:d9:2b:f0:7b:b1:05:93:ba:44:ce:0c:80:
         df:f0:9f:db:d8:8c:05:3b:6c:19:7f:9b:d0:a5:ee:0f:66:e4:
         79:71:60:bd:8d:8f:af:e5:ac:f3:08:b6:fa:38:f6:2c:84:68:
         95:1e:58:d0:2e:ca:32:07:32:44:51:9e:d8:ce:63:23:65:31:
         7a:57:17:0c:9f:14:2e:28:f7:9e:fc:38:a2:d7:07:f0:84:df:
         b3:d8:3e:10:94:29:fe:df:ef:d2:61:23:32:af:f0:8e:1d:cb:
         f2:e7:ac:e1:26:2f:f1:ec:80:4c:33:23:cb:80:76:78:f7:14:
         8e:ae:5f:1a:cd:65:7f:eb:72:57:4c:9b:0b:28:a2:d3:92:b1:
         9b:18:45:29:bf:67:12:f5:81:e9:ae:8a:a4:82:21:e1:16:76:
         5c:d0:d4:b9:6f:cc:3e:a1:0e:c3:7e:82:80:f2:31:41:a8:2b:
         0f:bd:32:5b:09:71:b8:8f:11:44:e7:6b:e9:0d:7b:83:e7:b7:
         34:bd:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:37:09 2025 by rpki-client