Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File:                     UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier:          c6WwYnZRYxqOz0ub5YjxfeUhiyHI6cJJENOR1yY9ZtQ=
Subject key identifier:   2E:D5:35:CE:82:E3:26:AB:82:98:43:9D:0B:FC:D0:CA:8B:E0:22:BF
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer:       /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial:       01974C9FD62191D75D55068F7E256DB2BE1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number:          126F
Signing time:             Sat 07 Jun 2025 23:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:32 +0000
Files and hashes:         1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: VhZp5YY+/Vn+AGr9NJv5nea9+AvlDlUCSQCJMaxHT5M=)
                          2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:d6:21:91:d7:5d:55:06:8f:7e:25:6d:b2:be:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
        Validity
            Not Before: Jun  7 23:00:32 2025 GMT
            Not After : Jun  8 23:00:32 2025 GMT
        Subject: CN=2ed535ce82e326ab8298439d0bfcd0ca8be022bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:9b:df:a0:8e:b0:61:ab:e1:fd:8d:84:04:
                    1b:69:00:c3:96:79:0a:67:9f:b1:c0:33:8a:f8:f4:
                    45:8b:e4:0b:cf:9a:c0:c1:4f:a0:cb:67:8e:3f:a4:
                    0a:1b:67:87:98:15:d7:2b:db:4b:c5:09:52:8a:3b:
                    e8:f6:42:83:5a:8a:00:7a:f9:01:5a:b3:52:50:4a:
                    1c:c5:a8:59:4d:8b:83:f2:23:30:d1:ee:14:30:1f:
                    f8:7f:00:57:17:82:07:21:82:d2:7c:96:27:ae:72:
                    b3:d2:c4:99:ec:5a:c4:0a:f4:bf:61:e3:8f:b0:51:
                    e0:9e:00:28:ce:65:e8:c9:f5:cc:41:ba:f1:1f:8e:
                    72:2e:b0:e1:91:07:21:bf:61:f8:4b:be:ab:75:65:
                    7b:a3:22:5f:9d:ca:1d:c7:99:53:52:56:96:a1:98:
                    f0:1f:2f:03:07:09:60:c3:34:7a:cb:48:d2:85:ad:
                    a2:82:0e:ad:2b:a2:a3:db:2d:09:a5:e2:86:1a:31:
                    27:95:50:67:4d:13:17:28:3d:4f:8f:13:e9:18:6d:
                    8b:48:c0:ec:53:fa:1d:36:b5:de:ac:ec:e3:56:54:
                    bd:c8:fe:a0:34:b6:40:6e:6b:40:94:cb:40:20:e5:
                    2a:c4:b5:66:7f:1b:f3:9b:63:a6:ea:48:ac:fa:97:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D5:35:CE:82:E3:26:AB:82:98:43:9D:0B:FC:D0:CA:8B:E0:22:BF
            X509v3 Authority Key Identifier:
                keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:85:3e:17:96:56:1b:13:f9:db:08:40:c9:26:f8:da:e5:
         77:7e:6b:b2:6a:a9:1d:60:19:d3:2e:5e:4d:f7:6b:87:69:2f:
         d2:07:ae:ad:e8:95:c9:41:91:ec:8c:04:a5:ec:65:86:f0:c1:
         80:f1:34:03:b7:5e:05:2a:39:77:fe:c9:f0:73:3e:81:93:8c:
         b9:42:8e:7d:14:7a:0f:67:e8:95:32:7e:f5:6a:fc:43:b5:51:
         9b:6c:0c:62:5e:c3:d0:ef:ce:94:a5:2f:39:3a:34:78:5e:a5:
         45:2a:f6:0e:d1:57:03:2e:fb:69:fb:a6:99:b7:0f:37:c1:a3:
         dc:ff:0d:28:dd:fc:45:56:7d:9e:67:a2:a9:61:0b:77:1d:e1:
         85:5e:c7:e2:44:a9:df:24:f5:f5:56:f1:8f:b1:72:8b:35:5b:
         f1:2a:c8:8c:68:a2:61:7b:be:b1:f6:62:0d:94:f5:ea:87:a8:
         1b:21:3f:55:fc:74:d2:aa:4e:42:16:fb:d7:0c:f1:a5:aa:46:
         c3:e9:ec:62:ee:2e:7f:4f:13:81:2c:1b:b9:fc:76:e5:db:d9:
         43:41:a0:d1:b5:cc:20:eb:1c:6a:c1:09:46:bb:fa:2a:11:56:
         4d:7c:c7:3c:3f:62:8c:7f:5d:e5:d5:ed:61:85:fa:a2:57:e8:
         88:3a:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:16:28 2025 by rpki-client