Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File:                     ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier:          QT+S0jWPqJNwpAg/ZHnorIyqE+xPLcfERRmQlCPcvQA=
Subject key identifier:   05:59:4B:A6:75:18:BC:E0:DF:1C:2C:60:BD:1C:17:10:EB:95:DD:B7
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer:       /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial:       01974AB1663F7F7036382E3316D37DED0DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number:          10B8
Signing time:             Sat 07 Jun 2025 14:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:29 +0000
Files and hashes:         1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
                          2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: M0wrFOpm6KSA/v/GbrPA15jg0odnos7r5ev9gu54wh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:66:3f:7f:70:36:38:2e:33:16:d3:7d:ed:0d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
        Validity
            Not Before: Jun  7 14:00:29 2025 GMT
            Not After : Jun  8 14:00:29 2025 GMT
        Subject: CN=05594ba67518bce0df1c2c60bd1c1710eb95ddb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:0e:fd:ee:3d:9d:03:cf:f4:95:57:6c:d3:
                    e3:2a:b5:9b:0c:d8:77:fa:40:71:c8:7c:0c:8c:93:
                    8d:c7:fd:9f:74:90:be:b1:a4:a0:32:86:fa:59:f9:
                    4b:2c:5d:5d:9b:17:af:c4:46:df:41:bb:5d:d0:6b:
                    ef:8c:92:db:49:a2:a0:a4:60:5b:dc:2a:90:64:da:
                    22:a0:cf:c8:5a:c4:86:e3:be:b5:2e:b4:59:ce:15:
                    e6:84:e5:50:09:32:ed:07:b6:aa:62:35:d0:f2:e4:
                    59:bc:54:f5:8a:39:ee:8a:71:6b:4e:01:32:44:85:
                    33:bb:e5:4c:f2:ca:32:24:5d:b7:a8:97:47:e7:87:
                    ba:a1:0b:e9:5c:1a:76:89:e4:72:74:c0:81:21:d5:
                    a5:08:22:93:ed:94:f3:79:f2:44:6d:81:2a:d7:59:
                    3c:80:e6:aa:e2:c9:30:2d:23:55:7d:11:3e:7a:74:
                    e0:4e:99:c6:3f:92:f6:69:44:01:89:be:b6:d7:f2:
                    4d:1f:37:ff:ac:1d:84:5d:20:d5:cc:8f:43:81:ba:
                    e9:3b:78:57:79:d7:b6:07:67:7f:c5:0d:8a:22:60:
                    cc:d2:87:94:dd:f1:d1:3a:50:ca:84:0c:bf:52:e2:
                    24:0f:3b:f0:96:2a:3f:dd:58:5f:ec:40:82:9e:8e:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:59:4B:A6:75:18:BC:E0:DF:1C:2C:60:BD:1C:17:10:EB:95:DD:B7
            X509v3 Authority Key Identifier:
                keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:d3:c8:46:36:9b:81:bf:c0:19:37:65:5d:2a:54:02:d5:
         0c:8b:14:67:eb:c6:3c:d8:93:c1:3d:8d:b4:f4:04:94:cf:b8:
         03:68:36:ac:0d:3d:ab:a3:56:fb:bd:5e:74:35:ad:5c:24:32:
         ba:f8:be:fb:49:2a:d0:e6:a6:e2:7a:ae:e1:d9:c8:9b:9b:cf:
         72:4e:b8:92:31:b2:cd:aa:42:5e:9d:09:28:75:d3:45:06:74:
         99:28:37:bd:e2:e6:b6:0d:2c:12:19:7e:a5:26:de:f9:82:a5:
         57:21:62:f6:c4:9f:5c:86:8b:6e:ab:68:e1:a2:f4:5b:b0:08:
         f1:97:e3:3b:ec:b7:da:29:3e:4b:c6:93:c8:3e:0b:09:2b:dc:
         13:ba:6b:b5:0e:41:de:37:56:08:78:d5:0d:5c:03:13:42:4b:
         40:92:8f:9a:e9:fc:13:d1:41:04:e0:b1:75:cb:48:db:26:3b:
         f1:89:06:4d:0d:a7:05:6e:4e:81:c7:e2:39:bd:3b:8c:27:39:
         4d:94:7f:27:90:af:84:6a:69:d8:02:fe:f3:83:4c:fc:f1:78:
         b6:c1:3f:d6:08:af:a1:8d:5f:e0:7a:e4:aa:33:f8:6d:ce:af:
         3a:a6:96:99:bf:97:19:05:2a:28:35:f8:b4:00:9b:ab:00:75:
         8c:7f:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:43:10 2025 by rpki-client