Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File:                     u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier:          jYM8h/Lu5DmPcf+FgCaG15aIcT7KVWPM+VPasb7Z4YY=
Subject key identifier:   0B:39:D6:89:5A:CE:86:36:02:B4:22:E6:8A:AF:61:95:B2:59:C5:7E
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer:       /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial:       01974779DA7D992084AA994E65961D3AA3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number:          106C
Signing time:             Fri 06 Jun 2025 23:00:57 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:57 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:57 +0000
Files and hashes:         1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=)
                          2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: T6JKHhUQMp2RbVQdVHTFYyjHKO+G0UUijYgIWntCpZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:da:7d:99:20:84:aa:99:4e:65:96:1d:3a:a3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
        Validity
            Not Before: Jun  6 23:00:57 2025 GMT
            Not After : Jun  7 23:00:57 2025 GMT
        Subject: CN=0b39d6895ace863602b422e68aaf6195b259c57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:db:c7:cf:a7:70:b5:b0:ec:0a:38:54:6f:
                    70:c2:34:54:6d:7a:35:f3:70:7b:54:1e:42:3e:58:
                    cc:8d:de:89:b1:c0:43:0c:38:85:92:52:87:1f:a0:
                    7a:09:e3:f3:8b:ce:4a:f0:f0:d1:21:b2:a5:74:9a:
                    9e:3f:87:6b:10:2b:c8:41:a0:77:ad:d6:37:36:02:
                    ac:84:ec:b1:0b:5b:e1:36:e2:e6:f2:79:4a:0e:01:
                    1d:51:51:9f:da:42:d3:72:f9:c0:00:f4:64:21:5d:
                    ea:1b:72:81:a5:b3:5b:ac:50:64:13:72:4a:73:30:
                    6f:f0:02:f5:6a:4a:21:90:8e:26:b8:b9:2e:d2:9f:
                    c9:f0:d5:51:3b:7e:00:ab:eb:8c:f6:eb:15:f4:17:
                    a3:b3:de:56:06:eb:70:16:af:f7:23:8c:85:58:19:
                    fe:c9:2e:eb:ba:08:2e:a0:ff:5c:fa:28:b7:ba:a4:
                    f3:17:d6:de:0a:55:2a:f7:7d:2a:42:07:f8:d6:09:
                    27:a6:87:b6:f7:33:a1:d6:d2:a6:d7:c5:18:3b:19:
                    4b:60:7a:1f:41:fa:83:65:9d:e5:a8:09:35:8f:6c:
                    72:03:ca:5c:2b:9b:81:87:8b:99:a0:9c:c6:c2:10:
                    a5:c3:16:6e:b5:92:2d:45:a5:f6:ac:74:b8:1d:0a:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:39:D6:89:5A:CE:86:36:02:B4:22:E6:8A:AF:61:95:B2:59:C5:7E
            X509v3 Authority Key Identifier:
                keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:a5:a2:b2:f8:f9:4c:57:7d:85:0b:96:7b:32:4c:42:19:
         f6:ee:84:c7:9a:15:3d:0c:4e:9f:20:79:32:01:c7:89:28:0d:
         ae:ee:c1:9c:15:5c:e1:c0:c4:ff:9c:42:aa:62:e8:70:b4:37:
         f8:45:90:28:34:a0:4a:c1:fe:9d:57:5e:62:b7:e3:77:cc:7b:
         5d:63:49:99:04:36:34:15:55:99:54:27:01:55:2c:da:36:a2:
         0e:4d:52:78:2b:e6:87:f6:a8:a1:ba:4d:c9:af:2a:b3:af:ef:
         07:69:e5:b5:ae:62:b3:0d:1d:61:f1:da:ed:fb:e8:e5:d2:81:
         97:35:75:08:d3:81:b2:4c:c8:e9:94:73:5e:78:5f:98:b3:eb:
         fd:8f:01:2c:46:62:d6:ba:df:fe:10:99:91:89:61:74:d5:a2:
         9c:5c:33:48:87:4a:8a:a3:96:3f:82:bc:34:08:3a:b3:14:11:
         9a:64:e4:54:bb:81:de:20:9a:eb:93:25:6b:b0:db:55:f6:b2:
         78:e1:c7:2c:3d:cb:6d:a5:2e:28:e5:6e:3f:40:fa:89:75:77:
         ff:52:5d:d7:ee:af:45:92:b0:56:e4:23:62:7d:c2:fa:e6:c4:
         c0:2d:d2:c1:1b:89:d0:ca:83:91:ca:cd:1d:10:0b:1c:de:fa:
         98:7a:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:39:13 2025 by rpki-client