Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File:                     UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier:          GPqJxHXrKU+oloTsIKDWEdTMCnc7bSYjPP6mQdXCx8s=
Subject key identifier:   82:DD:C6:2F:62:BF:EC:31:6F:A9:D8:3E:22:81:00:0A:39:BE:DC:24
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer:       /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial:       01974D7BF687882063A95936D5397A927D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 03:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:59 +0000
Files and hashes:         1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: R5uYPuPvygqhOJCNrDTWuK7p1FkxJWqzY1sf0MjzjY8=)
                          2: kPDeBF3aCTfbB5EVHHC2Wq-wohY.roa (hash: 6WAkgf1xAugeYb/22h6PavosEJNmU15Yes0foRMGr3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:f6:87:88:20:63:a9:59:36:d5:39:7a:92:7d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
        Validity
            Not Before: Jun  8 03:00:59 2025 GMT
            Not After : Jun  9 03:00:59 2025 GMT
        Subject: CN=82ddc62f62bfec316fa9d83e2281000a39bedc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:6a:78:a0:24:4f:32:c0:36:a1:dd:72:1f:
                    d7:a1:91:af:7c:45:cf:b0:a5:9f:c3:4e:8f:1f:61:
                    01:06:db:66:ec:1b:47:2d:b8:ce:76:f3:7c:6f:76:
                    44:ba:b3:21:5f:27:17:92:fc:bb:d0:5c:5c:5e:f5:
                    9f:fc:a4:1b:ab:73:3a:12:f6:ef:20:2c:a1:cc:1c:
                    8b:2b:0d:1c:38:70:62:f3:da:9b:ba:6d:4c:7d:be:
                    f9:0a:71:e9:ef:e3:5e:f6:f6:af:a7:f7:85:c1:6d:
                    0b:fd:23:51:3f:cc:f8:f2:ea:55:e5:71:3e:26:1b:
                    56:55:82:e9:54:de:8f:eb:f8:c7:9a:24:8a:67:3b:
                    88:fc:ee:29:6e:4b:76:af:bb:cd:60:8a:f2:3f:b9:
                    d8:df:e2:c4:5e:36:2b:98:45:7f:02:68:95:70:bb:
                    05:a4:5a:4c:22:d8:af:92:7a:b5:f0:20:31:a3:83:
                    d9:d3:ae:13:3e:4e:b2:7f:33:55:7a:f8:77:d0:24:
                    5b:8f:3f:ec:51:14:d2:a1:24:19:25:10:6a:a6:34:
                    e7:93:69:af:cc:7f:25:44:f9:92:72:a7:19:e1:a1:
                    2d:fd:5e:c4:c4:58:f5:c5:68:d5:a9:07:2c:dc:6c:
                    b7:8b:97:1d:b7:d8:b4:71:b8:41:09:3c:7c:d1:06:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DD:C6:2F:62:BF:EC:31:6F:A9:D8:3E:22:81:00:0A:39:BE:DC:24
            X509v3 Authority Key Identifier:
                keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6e:89:73:a2:f2:a2:40:4c:80:86:fb:91:4e:b1:3e:fd:c1:
         f2:24:5e:ca:c1:20:be:90:00:9c:42:a3:61:ca:3e:3a:cf:98:
         af:d9:4e:56:90:7f:d1:5c:5c:ee:59:33:bf:62:6f:57:ae:ad:
         6b:0f:19:52:85:ba:2c:47:30:f0:8d:8c:49:28:00:41:15:e9:
         2d:07:08:49:c3:a2:20:af:dc:8d:16:9e:ed:af:f8:07:81:20:
         c9:60:70:34:61:22:e3:75:1d:e6:67:fa:b0:25:19:12:24:60:
         f5:8a:30:0e:21:14:3f:95:e1:2f:b1:97:b3:f6:b6:1d:35:b1:
         82:e6:14:62:36:76:ba:8d:87:9f:26:87:96:70:26:f2:eb:cd:
         8f:0e:6c:9a:fa:ef:ec:f1:fb:ad:62:23:41:a9:98:4d:6d:fa:
         4a:d4:8c:c4:b7:e8:1a:22:62:bb:43:35:ea:f3:05:46:76:bc:
         5e:ab:a3:4d:ae:06:7e:1b:be:fe:98:7b:ad:e0:e3:7a:69:91:
         90:bd:db:66:a7:e9:53:ef:d1:f1:b7:11:24:37:7e:a5:fe:42:
         84:f6:af:c0:a7:5e:83:6e:27:8a:b8:6a:30:a5:e8:f7:b5:7a:
         73:67:5d:9a:4b:49:92:49:97:3d:b1:93:29:61:e4:82:fb:27:
         a1:b2:1e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe/aHiCBjqVk21Tl6kn1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMTVmZTgzOTQ4Y2ZjN2QzZTAwNzI4NzBjNzAzZmEzMTM1
MDJjYmMwHhcNMjUwNjA4MDMwMDU5WhcNMjUwNjA5MDMwMDU5WjAzMTEwLwYDVQQD
Eyg4MmRkYzYyZjYyYmZlYzMxNmZhOWQ4M2UyMjgxMDAwYTM5YmVkYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWFqeKAkTzLANqHdch/XoZGvfEXP
sKWfw06PH2EBBttm7BtHLbjOdvN8b3ZEurMhXycXkvy70FxcXvWf/KQbq3M6Evbv
ICyhzByLKw0cOHBi89qbum1Mfb75CnHp7+Ne9vavp/eFwW0L/SNRP8z48upV5XE+
JhtWVYLpVN6P6/jHmiSKZzuI/O4pbkt2r7vNYIryP7nY3+LEXjYrmEV/AmiVcLsF
pFpMItivknq18CAxo4PZ064TPk6yfzNVevh30CRbjz/sURTSoSQZJRBqpjTnk2mv
zH8lRPmScqcZ4aEt/V7ExFj1xWjVqQcs3Gy3i5cdt9i0cbhBCTx80Qbh4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILdxi9iv+wxb6nYPiKBAAo5vtwkMB8GA1UdIwQY
MBaAFFIV/oOUjPx9PgByhwxwP6MTUCy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYt
ZWY5ODE0Y2ZmMmI4LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYtZWY5ODE0Y2ZmMmI4
LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUW6Jc6Ly
okBMgIb7kU6xPv3B8iReysEgvpAAnEKjYco+Os+Yr9lOVpB/0Vxc7lkzv2JvV66t
aw8ZUoW6LEcw8I2MSSgAQRXpLQcIScOiIK/cjRae7a/4B4EgyWBwNGEi43Ud5mf6
sCUZEiRg9YowDiEUP5XhL7GXs/a2HTWxguYUYjZ2uo2HnyaHlnAm8uvNjw5smvrv
7PH7rWIjQamYTW36StSMxLfoGiJiu0M16vMFRna8XqujTa4Gfhu+/ph7reDjemmR
kL3bZqfpU+/R8bcRJDd+pf5ChPavwKdeg24nirhqMKXo97V6c2ddmktJkkmXPbGT
KWHkgvsnobIezQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:55:33 2025 by rpki-client