Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          CQHkOtCvJ9Mj4XDBbLPZ2GU0BxlQ4IHBPZZK9KZByjM=
Subject key identifier:   96:66:BC:B4:6F:24:24:21:3D:15:68:5F:44:64:31:4E:BE:27:F7:54
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       019767E0BC23BE31EBDDEF5FD6680FB50AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0805
Signing time:             Fri 13 Jun 2025 06:01:10 +0000
Manifest this update:     Fri 13 Jun 2025 06:01:10 +0000
Manifest next update:     Sat 14 Jun 2025 06:01:10 +0000
Files and hashes:         1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: GEDRRsuIbNZi7vLmwNBPoZVwAki3XzXjKXzmkDmMHBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:e0:bc:23:be:31:eb:dd:ef:5f:d6:68:0f:b5:0a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Jun 13 06:01:10 2025 GMT
            Not After : Jun 14 06:01:10 2025 GMT
        Subject: CN=9666bcb46f2424213d15685f4464314ebe27f754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:c5:41:f3:1f:69:22:50:e1:d7:79:64:a8:
                    0f:9e:73:0d:c2:1d:1d:15:41:83:99:bf:fc:e1:df:
                    ca:7e:9d:51:a2:45:ef:2f:6e:01:6d:49:ee:a8:c8:
                    47:11:a1:00:6e:fb:bc:b2:a2:86:5a:59:40:d4:7d:
                    48:fd:8f:6e:28:5d:6b:ae:b0:19:f7:f5:9d:e6:5c:
                    da:b6:b4:69:46:a3:f6:62:94:40:c2:46:93:06:91:
                    a3:7b:d8:eb:e7:43:05:fd:30:bc:66:81:42:ed:03:
                    c0:50:10:99:9d:67:b5:6f:27:ff:4e:49:5a:7a:4d:
                    09:8b:5f:3b:a6:a5:f4:ce:cc:9f:e4:36:0c:70:23:
                    bc:4b:87:98:07:13:27:53:33:e1:48:23:3d:63:6e:
                    de:26:42:06:12:b6:d6:b0:70:be:83:61:74:5b:71:
                    b3:8b:20:b3:37:06:7f:46:34:de:c4:93:ac:2f:6f:
                    a9:0a:cd:cc:3d:f6:0b:42:19:55:c6:97:3e:04:ca:
                    58:a0:be:4d:44:d3:b0:58:d0:44:c6:62:64:67:5b:
                    a0:d1:ea:b0:27:87:32:a6:23:2a:94:16:16:11:65:
                    fb:d1:01:6c:10:05:b6:fe:ec:6d:ba:18:29:c0:c4:
                    46:8d:a4:ef:d6:c3:ef:8b:b3:0f:7a:fc:60:d0:c2:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:BC:B4:6F:24:24:21:3D:15:68:5F:44:64:31:4E:BE:27:F7:54
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:15:d7:ba:5b:20:b3:5e:d3:75:56:31:8d:dd:12:0e:7a:
         c9:2d:1c:c7:53:df:98:c7:4b:9c:04:29:11:2c:78:12:2a:56:
         c8:59:2f:0a:a8:f8:49:6f:dc:b3:31:66:03:0c:87:45:a4:4b:
         fe:65:dd:35:32:40:42:71:ac:a4:bb:4d:b0:67:5d:19:22:c3:
         fd:04:28:0f:c7:df:54:59:57:fe:68:9f:1b:48:23:b8:01:8d:
         56:ea:05:db:82:b3:10:af:65:9f:a8:a7:2c:89:f2:68:bd:8d:
         08:51:73:78:24:e4:b1:44:71:38:76:ce:dc:7a:ec:91:26:3b:
         d5:f6:cc:61:ed:79:c5:69:15:71:0b:07:6d:03:c6:54:dc:51:
         41:b5:4e:73:ab:96:9f:d7:bc:30:d5:f8:52:a3:79:e8:50:c4:
         1d:53:30:da:cf:83:af:38:ac:23:b8:a1:eb:b9:db:30:a6:d1:
         3a:f5:35:9a:b2:b6:66:65:81:33:52:f9:6e:ee:5d:e1:c0:d1:
         21:2d:d1:92:60:f1:f2:c8:93:4b:52:3f:3e:c1:1e:72:7b:72:
         8c:41:89:f1:8d:24:3c:be:de:61:2b:ec:4f:a9:8c:27:50:e2:
         86:fa:97:70:c4:52:d8:d5:32:3d:d6:10:9a:43:29:de:2a:2f:
         f6:10:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:32:07 2025 by rpki-client