Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File:                     uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier:          vJcgGNoekAGrpMY91xWoHlVXJ2p3tz+33PHtp3Jc8Io=
Subject key identifier:   D4:66:B3:09:C5:57:0D:EF:F5:95:BE:7C:6A:BC:CB:E7:93:6A:0C:10
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer:       /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial:       019762836AF659B16F885BEE127E20BA97F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number:          1589
Signing time:             Thu 12 Jun 2025 05:01:09 +0000
Manifest this update:     Thu 12 Jun 2025 05:01:09 +0000
Manifest next update:     Fri 13 Jun 2025 05:01:09 +0000
Files and hashes:         1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
                          2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: w78RCwg//0GipWgDo/HHMuCh/Lmw8x4jCpdzRmh7XOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:6a:f6:59:b1:6f:88:5b:ee:12:7e:20:ba:97:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
        Validity
            Not Before: Jun 12 05:01:09 2025 GMT
            Not After : Jun 13 05:01:09 2025 GMT
        Subject: CN=d466b309c5570deff595be7c6abccbe7936a0c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:43:0d:a3:4b:ea:6c:a6:1e:07:63:85:b5:07:
                    02:ad:33:9f:0c:72:55:4b:8e:eb:71:a7:d4:33:01:
                    71:c7:7c:ad:b6:10:ae:68:07:ef:a8:6f:26:65:17:
                    58:e1:a2:84:0c:5f:ab:a7:e7:60:b2:ce:42:ee:c7:
                    a6:dd:a6:3b:7f:14:2a:76:e6:df:dc:17:bd:22:55:
                    a6:53:77:7e:71:9e:c3:7e:54:3a:c2:37:9e:76:09:
                    b1:ac:a8:68:52:c1:bc:97:d8:46:3f:42:6a:75:64:
                    11:49:d4:df:a3:aa:e1:d0:39:8f:80:f3:d4:8a:f8:
                    c1:9b:18:bf:17:09:b6:2d:29:b1:4c:75:8d:39:15:
                    1f:d3:24:15:8d:d8:80:20:b3:1a:97:62:d4:29:e0:
                    16:40:20:f6:ac:0d:2f:f4:e5:a0:e1:d5:5a:f3:26:
                    7d:a4:d4:f3:21:e6:8d:10:58:f0:bc:4b:27:1d:d0:
                    28:ed:ea:d5:58:01:25:af:15:62:90:66:eb:b0:c3:
                    57:31:2a:ff:f6:4d:1b:14:0e:63:ea:4e:e3:bc:8c:
                    1e:ef:fb:ad:67:9d:65:68:06:fa:62:70:e7:54:60:
                    fe:72:5c:76:1f:64:0f:c5:27:e7:55:c7:87:1c:28:
                    e6:36:66:98:8e:f1:7c:e7:b4:99:a6:cf:46:a1:2e:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:66:B3:09:C5:57:0D:EF:F5:95:BE:7C:6A:BC:CB:E7:93:6A:0C:10
            X509v3 Authority Key Identifier:
                keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:10:0d:e2:d5:b0:2b:e8:70:db:2a:f6:e0:9b:39:c7:68:32:
         f5:8d:05:9f:a9:37:e1:1a:42:40:24:3a:8b:83:7e:35:d6:cc:
         29:3f:8e:5e:a5:c3:28:2c:59:0b:55:99:3d:21:d4:fa:d8:c1:
         c8:70:a1:66:6b:05:20:b4:52:f9:ae:49:00:a3:85:41:06:6a:
         f3:70:d7:30:4a:55:29:8c:71:66:60:95:89:8c:1b:af:83:c9:
         61:70:8d:96:9b:30:ca:5b:4e:be:a5:35:e1:76:fe:ff:d4:b4:
         0f:97:a5:f4:55:4b:0e:7f:d2:a2:bc:02:21:33:2c:21:bd:cb:
         6b:37:f0:f3:df:08:92:97:7e:de:81:73:77:a5:c1:3d:e3:a0:
         72:47:c0:6f:0d:fc:d4:1e:a8:1c:0d:fa:d1:80:b4:d7:f2:9b:
         2f:f4:04:0d:b4:c6:1f:9a:87:38:3d:db:be:33:75:92:86:63:
         08:5c:1d:25:c9:f5:4c:44:df:64:c8:c4:5a:ff:88:62:14:7f:
         95:b8:51:20:46:c2:a5:cd:c1:81:4e:7e:18:f6:9b:97:94:f4:
         cd:6f:b3:f0:90:6f:db:30:7e:24:23:65:f0:fd:67:43:f8:ff:
         be:69:0a:6c:9c:dd:11:b2:07:7b:59:8f:67:40:9f:77:b1:c7:
         87:93:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:55 2025 by rpki-client