Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          zxmDVZdUtjMbciBu0wq76XY1D1jaqRJJG7IMo3R4pOg=
Subject key identifier:   8C:5C:51:09:BA:ED:1A:AE:88:C8:59:05:57:B6:8E:B1:6E:09:0C:3B
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       019752A1D4D02907D68B17CD59081F742234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          07FA
Signing time:             Mon 09 Jun 2025 03:00:26 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:26 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:26 +0000
Files and hashes:         1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: RVMmTUEqTCiuzaO7vDPYd2yn7mCoqFe2TYmIiLisFZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a1:d4:d0:29:07:d6:8b:17:cd:59:08:1f:74:22:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Jun  9 03:00:26 2025 GMT
            Not After : Jun 10 03:00:26 2025 GMT
        Subject: CN=8c5c5109baed1aae88c8590557b68eb16e090c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:52:47:00:16:3f:75:38:55:89:38:87:cc:
                    a4:05:b8:7a:5a:f2:44:76:95:64:de:fd:7e:0f:59:
                    7e:92:81:cd:43:9a:2c:8d:8a:69:b4:ca:26:0b:88:
                    44:9f:e5:ab:10:97:80:6c:79:a7:34:ca:b5:ab:13:
                    5d:08:94:a4:3c:76:e5:91:45:b2:a7:03:32:3d:48:
                    d5:35:3c:42:c8:13:6b:cf:61:9d:75:a2:58:bb:aa:
                    92:65:9d:ec:de:61:51:46:48:21:2c:e4:98:9b:e3:
                    31:73:82:cc:ca:2d:ab:d1:1f:56:4b:48:e3:12:9f:
                    43:61:0e:01:da:24:c9:a9:24:3a:c6:0c:70:82:4b:
                    ed:20:c0:b0:c9:c8:9a:f5:a9:1d:eb:c6:87:2d:bc:
                    aa:58:ca:1c:4f:7d:50:8b:1a:6e:60:a9:d0:77:e3:
                    81:75:80:7f:be:8d:2f:02:e3:36:61:e1:cb:b1:a9:
                    5b:0d:ea:25:9c:34:9e:ab:8b:ba:9f:14:b5:b9:35:
                    c7:be:8f:4e:e4:78:17:1b:d6:2a:e0:b4:06:f9:8f:
                    22:dd:22:05:a8:e8:9e:86:33:bf:1f:a1:ee:fd:99:
                    df:c7:f8:40:c7:d8:6d:8b:13:bd:cb:7e:db:f9:6d:
                    73:52:43:4a:57:f5:59:b7:69:09:96:a8:09:f5:4a:
                    81:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:51:09:BA:ED:1A:AE:88:C8:59:05:57:B6:8E:B1:6E:09:0C:3B
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:0c:96:b6:bc:5c:89:07:e6:1d:91:28:89:31:94:9f:68:
         f4:ff:f1:8a:36:b7:84:18:eb:85:eb:f3:e8:2d:42:19:e3:ca:
         39:b2:cd:c5:82:81:6c:a4:8a:fd:5a:36:10:09:11:ec:fb:5b:
         dc:53:cf:59:20:76:c7:ec:8a:51:04:71:de:f7:21:4b:ac:6a:
         ef:fb:3f:eb:41:ad:2b:b6:38:99:e6:5f:1b:83:1b:85:7d:20:
         59:f1:db:60:b0:23:3d:ee:1c:73:cf:da:6f:13:e7:df:8e:1a:
         ba:6c:23:a2:98:46:b8:3f:d5:e0:46:2a:0a:bb:ce:ae:4e:8a:
         f5:eb:d9:0e:46:e7:70:fe:12:ff:2b:c7:cf:67:06:9e:70:03:
         29:5e:11:65:ba:c4:fc:b0:2c:3f:e3:6f:7e:a0:fb:03:45:31:
         a4:7a:de:02:61:ed:b6:14:b5:0a:da:aa:23:b0:97:16:14:d1:
         c6:d5:0a:ad:76:41:f0:f4:ea:64:d9:a0:44:4d:72:3c:61:67:
         f8:30:7c:45:69:35:37:5c:df:b4:03:e9:ea:e6:7d:28:ad:fa:
         e1:40:21:7d:e3:8e:19:d7:2b:4d:5a:6b:a4:fe:65:98:9c:87:
         ed:24:19:02:aa:87:65:69:a5:13:41:3b:a5:80:bc:96:ef:98:
         f4:7d:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:11 2025 by rpki-client