Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File:                     Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier:          qvyF95p8V93a360WuvFPX5Dro9n1MUnR4lg68fYtWOY=
Subject key identifier:   C1:0F:F0:95:73:EC:1B:9D:83:E1:CA:10:E2:7E:16:85:C2:D1:8D:46
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer:       /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial:       01974B56130A580F6D910670C2D2EB0D5AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number:          1480
Signing time:             Sat 07 Jun 2025 17:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:21 +0000
Files and hashes:         1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
                          2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: cwsK5e9m8ylsvQLIuXkBK3VwypzIel6UyiW56XgSiwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:13:0a:58:0f:6d:91:06:70:c2:d2:eb:0d:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
        Validity
            Not Before: Jun  7 17:00:21 2025 GMT
            Not After : Jun  8 17:00:21 2025 GMT
        Subject: CN=c10ff09573ec1b9d83e1ca10e27e1685c2d18d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:7a:2e:15:29:f4:99:b8:26:66:0b:4a:8b:
                    37:3a:fd:9d:9e:64:94:9c:d0:b5:13:82:a4:5b:51:
                    16:99:5c:aa:a6:3b:16:e3:05:9d:b0:f2:09:14:81:
                    32:c6:76:e2:2b:83:30:73:92:d5:85:e2:17:4c:44:
                    6c:83:06:ae:eb:70:e3:23:eb:57:80:de:eb:d5:0a:
                    47:9c:bb:0b:a9:69:f6:fa:a8:2b:9f:45:55:e9:15:
                    48:7a:cb:39:78:98:d8:5e:cf:29:6a:fa:7f:b3:81:
                    0b:34:6c:2b:a5:12:32:ce:80:b6:05:d6:e2:8b:ea:
                    f2:1e:1a:d0:f7:0b:84:e8:69:62:53:6b:ac:16:c5:
                    2c:d6:b1:da:5d:3e:91:f9:69:2b:f6:ad:0a:54:a1:
                    35:d3:e4:d8:ce:a0:2d:eb:3a:62:68:8b:e1:4f:f8:
                    7d:28:91:3f:6f:ef:cd:3c:13:4f:bb:2c:c5:fe:a7:
                    e2:aa:7e:3f:58:32:d5:4a:33:f4:f2:f0:21:86:e1:
                    29:4c:dc:f2:86:53:53:ac:09:cb:14:33:aa:86:42:
                    9e:cc:7f:48:18:8e:83:c5:e7:3e:b1:00:f1:a6:38:
                    32:a5:e2:3f:c4:3e:23:5c:26:e3:7f:ca:e0:aa:e9:
                    28:34:4c:85:b7:fd:13:ca:c8:80:a2:40:8d:a9:06:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:F0:95:73:EC:1B:9D:83:E1:CA:10:E2:7E:16:85:C2:D1:8D:46
            X509v3 Authority Key Identifier:
                keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:91:bf:3d:ca:9b:c2:86:22:86:15:f5:6c:e6:a5:8a:e0:3d:
         4c:01:4a:a6:a3:1e:47:79:5e:30:61:5a:ce:11:3b:89:1f:31:
         74:f9:bf:c4:6f:2b:5a:6e:e3:4b:64:53:f6:6a:96:cd:e2:a0:
         5c:31:17:0b:06:d0:48:c0:1e:36:ba:98:b7:ba:d3:07:21:7c:
         61:59:2e:7f:7d:e8:7b:5c:7b:0e:42:37:6f:7e:b6:77:c9:14:
         73:d4:28:6a:f4:6d:1a:b0:ee:2c:01:ad:27:5a:81:ca:29:95:
         36:2b:af:d9:81:41:ff:d0:bd:77:2f:e3:73:b2:dc:68:74:b8:
         34:05:b3:3e:b3:7f:d4:ee:e8:71:39:e2:d7:1a:c4:f6:c6:15:
         d5:7e:69:2a:b9:90:81:4e:e3:63:61:2f:b4:0f:84:2c:16:d7:
         1e:0a:5b:a7:56:97:dc:0a:ce:a3:66:e8:a2:52:1c:51:6b:e6:
         59:36:82:04:85:8a:4e:d9:64:0f:57:ed:50:ec:b0:81:3a:6b:
         1b:a9:b6:32:c8:94:8c:97:41:47:6e:a2:0e:41:6e:16:6a:2e:
         cf:e3:a8:46:03:d0:d3:93:eb:3a:1b:70:fb:31:cb:af:b4:de:
         77:af:f0:81:28:2a:2b:ce:a9:ae:d5:9a:70:97:4e:fd:db:20:
         39:86:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:38 2025 by rpki-client