Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File:                     UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier:          37/DbhWv03VPlyO5Vn6bofSn36+xvrd8hUMTb640Jug=
Subject key identifier:   86:AA:3F:18:36:E4:B4:76:26:4E:05:55:89:0C:9D:A5:59:4E:B9:44
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       0197470C13553DF308C8A32C5F69B113E0F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number:          0C5E
Signing time:             Fri 06 Jun 2025 21:01:03 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:03 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:03 +0000
Files and hashes:         1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=)
                          2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: vG3G7cQe0RVLKYtBM9gOtgfQGXB3U3VJoDBZ8ABY0I8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:13:55:3d:f3:08:c8:a3:2c:5f:69:b1:13:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: Jun  6 21:01:03 2025 GMT
            Not After : Jun  7 21:01:03 2025 GMT
        Subject: CN=86aa3f1836e4b476264e0555890c9da5594eb944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:53:6e:eb:b2:79:05:89:00:70:ac:20:8f:
                    b5:62:f4:14:f5:21:e6:a8:bc:a3:56:a6:f3:0c:de:
                    fd:bb:a0:87:bd:1d:ac:04:15:d4:b9:66:ac:4b:34:
                    cb:44:fa:c3:3a:fd:46:82:56:e7:9e:2e:33:bf:aa:
                    9f:4c:06:2a:a1:18:5e:db:52:4c:99:77:96:f1:32:
                    92:b3:ab:e9:62:00:a9:2b:d1:ef:a2:9f:7e:08:4e:
                    10:32:84:d7:0c:24:70:fc:33:5b:1b:08:5e:b3:f1:
                    ba:95:22:05:08:07:6c:54:ef:ad:ae:1a:c4:2b:24:
                    d1:94:23:9a:db:f9:2f:84:51:ba:e3:fd:8d:bc:d7:
                    4b:75:cc:e5:ea:a3:f3:00:90:6d:18:13:85:38:b7:
                    32:5c:09:01:76:c0:a0:60:da:2d:13:ff:55:b8:aa:
                    b3:c7:55:56:14:b5:d1:66:f8:dc:6b:cd:e5:06:11:
                    40:04:63:96:78:dd:af:14:44:7f:3d:fc:b1:fb:63:
                    08:6c:64:88:b6:f9:1f:51:fe:c6:2a:e8:8e:21:c2:
                    ca:9e:58:77:47:71:93:38:05:cc:01:6c:51:5b:ce:
                    e7:4a:2d:92:40:d4:41:be:5e:3e:cc:b0:74:f5:a1:
                    c7:95:a1:c0:02:a4:8f:92:92:19:be:6e:a9:ca:ac:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:3F:18:36:E4:B4:76:26:4E:05:55:89:0C:9D:A5:59:4E:B9:44
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:1b:83:6b:50:15:99:08:bd:10:4f:67:c9:44:d8:a7:f0:
         76:61:95:a2:c5:f4:d6:8f:b2:0b:94:ba:a8:a2:a9:d8:55:5c:
         8d:ad:ed:37:24:8a:d6:57:a8:f4:9b:cf:d4:56:43:d2:e5:cb:
         17:0e:cb:6e:fd:be:88:40:c7:dc:5b:75:3d:2d:ea:64:62:2c:
         c6:4a:a4:c1:10:49:51:7f:62:31:7a:d4:cb:93:50:26:0a:96:
         5f:97:c0:8e:01:93:5b:54:ee:9e:0f:b1:81:dd:72:01:c8:35:
         ac:74:03:a6:0f:46:1a:46:96:8a:8f:f6:a6:69:68:44:95:f8:
         ee:5f:80:bd:7f:29:cf:1a:81:50:07:58:43:a9:ad:56:b8:9a:
         4c:3b:e6:26:ce:69:33:1e:62:80:8d:28:f2:de:b5:6e:a7:85:
         67:3d:58:ae:8b:da:0f:8a:2f:cb:82:3c:92:ba:8e:b9:b1:92:
         30:4d:81:d3:12:8d:cc:a2:0b:bf:ea:c8:5f:ff:99:f3:a2:eb:
         24:80:ad:fb:2f:52:ea:f2:1e:2f:41:a0:78:8b:b3:60:5e:bc:
         8a:d6:c3:b8:13:df:c7:42:72:8d:13:27:03:47:df:c6:81:fd:
         ae:f6:55:61:f6:29:1d:9d:da:b0:eb:b5:cc:c9:03:7c:7a:d0:
         a9:51:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:04 2025 by rpki-client