Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File:                     uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier:          UH12Oqbqf10rLZrVjFsIHB6fYxtd2umZqMP7sBMW/90=
Subject key identifier:   B3:95:65:A1:5A:9C:D1:26:D7:36:71:57:FC:CC:07:56:DC:6C:BD:D7
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer:       /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial:       019748558D59D46A4C80B373A96658D2CC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number:          31
Signing time:             Sat 07 Jun 2025 03:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:55 +0000
Files and hashes:         1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
                          2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: PuPt7vwUbn1iGvKm0qME3/Q26Djc6R9wLab/B+KwrP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:8d:59:d4:6a:4c:80:b3:73:a9:66:58:d2:cc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
        Validity
            Not Before: Jun  7 03:00:55 2025 GMT
            Not After : Jun  8 03:00:55 2025 GMT
        Subject: CN=b39565a15a9cd126d7367157fccc0756dc6cbdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:05:6e:7e:65:09:a8:d2:6f:27:6d:1d:e8:
                    30:7d:74:87:63:08:91:cb:e2:e7:82:2a:f7:24:8b:
                    f2:e0:f1:ed:95:24:05:48:28:19:a1:c2:0f:c0:f7:
                    2f:80:e1:ee:93:2b:fc:c3:52:52:c0:98:8e:9b:01:
                    a0:c5:37:80:cf:ad:b6:10:04:0f:72:a9:b5:bc:37:
                    99:dc:e5:2a:cd:a0:82:18:79:b7:78:ee:30:72:f2:
                    f1:49:49:17:a7:1f:d0:9b:a8:ea:49:97:60:1d:39:
                    15:b7:82:61:ac:94:44:c5:d4:57:ba:89:01:fb:85:
                    64:e5:3b:64:b4:e6:8d:da:3f:37:6c:cc:db:ca:1d:
                    9d:4b:77:b8:bd:fd:52:0d:ba:c1:f9:3c:d8:1b:d1:
                    b2:17:bb:a8:2d:82:88:47:6d:db:9d:f2:f4:5a:f6:
                    7d:2f:5f:c3:c7:3b:34:84:de:72:bf:78:08:11:f5:
                    b0:1a:3b:da:36:ee:47:7c:74:b9:a9:63:5a:72:79:
                    d0:e2:07:44:ef:6d:10:40:ad:a3:09:cc:15:54:f6:
                    31:70:ea:df:3e:bb:19:e6:9e:ef:b7:c2:e1:82:40:
                    81:6c:11:d6:72:89:7c:70:91:ef:22:e0:e1:5e:74:
                    b8:ec:30:d1:80:ad:04:b8:ec:f0:5c:b2:a6:c5:de:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:95:65:A1:5A:9C:D1:26:D7:36:71:57:FC:CC:07:56:DC:6C:BD:D7
            X509v3 Authority Key Identifier:
                keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:75:04:93:da:a3:0a:40:25:75:26:1f:c9:51:31:a2:98:
         6b:58:01:ce:55:8e:58:39:58:73:cd:eb:48:4a:84:2b:57:79:
         40:19:94:30:fc:e5:3d:fc:5a:a5:c4:31:d1:0f:69:63:4b:f3:
         65:00:e3:c0:d3:81:c8:9e:12:b5:92:b1:d0:f3:31:99:31:63:
         4f:a8:71:24:50:5a:c8:74:a5:ea:7e:f2:36:04:c2:13:a7:c8:
         20:ee:3a:45:c0:d2:ee:82:5a:d0:31:e4:2e:04:56:fd:47:4d:
         02:dd:8d:3a:72:8c:ae:5e:69:c8:4a:da:23:de:06:65:33:df:
         35:7b:7f:18:a3:c0:58:5c:ee:e1:12:f8:41:cf:dd:5b:13:b3:
         96:da:6b:c6:7f:93:36:81:6b:95:86:29:9d:b7:43:52:b8:8b:
         e6:dc:34:c5:21:40:a8:44:c5:e1:76:2f:8e:33:6a:b4:17:f5:
         68:fc:f7:83:55:35:62:b4:5f:f3:42:32:cb:63:8d:00:75:cb:
         07:51:20:7e:bd:08:bd:4a:e6:8c:af:a0:06:41:f2:76:fe:24:
         0d:90:31:65:d2:42:b8:4d:c2:ee:07:24:a0:1f:ea:67:f2:28:
         c0:8d:fc:ff:03:9c:6c:20:68:c1:fb:c9:fe:8a:56:9a:a7:b6:
         ec:b4:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:58 2025 by rpki-client