Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File:                     uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier:          q175DxFv3RVdnqovqUaFYoF+IQMW3i11c83JlzdObAQ=
Subject key identifier:   C3:68:95:BD:E0:2A:FE:6E:39:94:DE:0A:CF:F7:DC:1A:CA:B6:02:9E
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer:       /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial:       0197499EDB4C3B3C973AEFDB472F6EF1A249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number:          04B4
Signing time:             Sat 07 Jun 2025 09:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:36 +0000
Files and hashes:         1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: FPvmfz9g0/q3Q4kN9VxTHe8ut4yTg3Uh8zm70fL2mDk=)
                          2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:db:4c:3b:3c:97:3a:ef:db:47:2f:6e:f1:a2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
        Validity
            Not Before: Jun  7 09:00:36 2025 GMT
            Not After : Jun  8 09:00:36 2025 GMT
        Subject: CN=c36895bde02afe6e3994de0acff7dc1acab6029e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:95:7d:56:0a:bd:d3:37:66:f7:c3:3f:d6:
                    e3:5d:e2:62:e2:a0:86:5d:f1:16:e8:5d:13:9e:02:
                    aa:7a:3f:4a:d1:ff:78:f0:ba:3f:b2:12:fd:65:60:
                    41:b9:1f:12:0d:ec:c9:81:8a:b0:24:a9:c8:04:48:
                    f8:29:40:8b:94:33:5e:af:c8:c2:42:97:27:f0:0b:
                    3f:c5:49:19:36:55:4e:22:cd:f0:40:f6:c8:d8:94:
                    1f:19:9a:61:2a:f8:13:fa:b0:82:2d:8f:4b:f4:31:
                    ac:ad:cd:87:a3:13:b5:38:b1:d8:ad:ca:a4:f2:74:
                    33:5f:62:60:c4:25:b9:42:b8:4e:4e:b1:81:3d:1f:
                    f6:bf:1e:87:4f:85:7a:8a:e1:c7:aa:ae:53:ab:e7:
                    e8:a5:5d:35:3b:03:c8:73:d9:aa:a9:41:9b:67:a3:
                    71:df:23:83:f0:ec:a4:55:f1:5e:9c:26:e2:16:5b:
                    4c:29:67:cc:01:74:58:dc:9d:57:9d:94:83:e4:73:
                    b5:65:16:b7:9a:f3:f0:a0:20:02:0d:02:c0:aa:a3:
                    fb:9b:7f:af:1a:ff:0f:b4:a2:30:f4:fc:88:4f:eb:
                    6c:dd:92:24:61:dd:2d:f9:c8:69:d5:7f:aa:cf:6a:
                    1e:f5:9b:d0:9c:74:c1:ab:34:32:ad:17:9b:cd:99:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:95:BD:E0:2A:FE:6E:39:94:DE:0A:CF:F7:DC:1A:CA:B6:02:9E
            X509v3 Authority Key Identifier:
                keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:be:89:3b:18:1d:9e:34:70:40:85:dc:51:83:74:d0:6f:d8:
         cc:b8:5f:3f:27:50:dc:17:ba:8c:6b:51:83:35:a4:0b:ef:6a:
         41:83:63:76:b5:7c:5a:a8:23:75:b8:11:a7:c0:95:48:2f:78:
         c5:9a:af:9b:ce:b4:aa:cc:b2:e0:38:31:8d:ac:2b:63:c3:7a:
         9f:ba:a1:fd:74:ac:ba:af:fc:eb:9d:2d:16:7d:16:c5:34:d5:
         b3:61:52:26:21:77:e0:e1:7e:32:80:dd:3f:f7:81:c7:6c:58:
         b5:09:af:72:af:9d:3c:d3:02:7c:b0:3b:fc:61:53:69:ee:13:
         db:5c:cc:7a:49:5f:9a:9e:a3:00:b9:d2:2a:6a:e0:bc:9a:33:
         46:30:f8:b5:71:50:51:dd:8c:5d:3b:72:6a:79:f6:2d:f7:a2:
         b1:09:09:4c:50:ab:67:b1:09:82:9a:8e:7d:20:af:4b:50:58:
         33:bd:14:1d:36:86:b8:97:21:79:31:6a:59:09:23:08:fa:10:
         ec:f5:2d:bf:4e:22:af:32:d1:b4:d8:f3:9a:6e:6f:e1:1f:16:
         c6:2f:fb:c7:11:9a:7d:b6:f1:c3:c1:9c:e3:6e:27:ad:c6:71:
         b2:8d:8f:25:6a:b4:38:a3:f6:51:e6:4b:06:b6:29:23:ea:6c:
         17:4f:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:50:28 2025 by rpki-client