Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File:                     ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier:          6leuT0nHuB5hA3UEpVKJWWqTmoUBmKMsj+MB2lF4yhw=
Subject key identifier:   FA:E6:7A:72:F0:64:93:EF:C4:9F:6C:B2:81:82:D3:7F:F5:B5:FB:F7
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer:       /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial:       01975121DB83CB5EA8328B00768D89FFB724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number:          0958
Signing time:             Sun 08 Jun 2025 20:01:02 +0000
Manifest this update:     Sun 08 Jun 2025 20:01:02 +0000
Manifest next update:     Mon 09 Jun 2025 20:01:02 +0000
Files and hashes:         1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
                          2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
                          3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: G1Rz42hLddPd3DMmPcLtfZB+FUj8w3+RgJBnzwr2lG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:db:83:cb:5e:a8:32:8b:00:76:8d:89:ff:b7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
        Validity
            Not Before: Jun  8 20:01:02 2025 GMT
            Not After : Jun  9 20:01:02 2025 GMT
        Subject: CN=fae67a72f06493efc49f6cb28182d37ff5b5fbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:92:34:e2:03:88:d3:43:45:04:af:f1:45:
                    bc:41:a8:5f:e8:ea:39:b5:a9:36:37:b4:ab:51:2a:
                    bc:f3:b8:e7:10:0f:cd:aa:c1:26:f7:46:1d:0d:40:
                    d5:f0:1f:99:88:f2:6b:94:8f:a3:d0:68:95:0a:64:
                    30:01:72:9a:fa:0e:b9:3a:6d:58:11:09:9e:74:69:
                    9f:44:f5:49:87:f5:82:cd:5a:5d:26:0c:74:72:93:
                    dc:e4:fa:bb:9b:47:18:7b:0a:c5:79:06:88:a1:98:
                    f5:99:96:fd:3d:a9:1a:af:f9:01:ed:37:b9:ed:cf:
                    1a:5e:a2:f0:4d:d5:28:da:75:86:e7:22:ac:c7:af:
                    19:05:68:4e:d8:c2:fe:b8:56:bb:57:7d:1e:2c:71:
                    40:08:a1:98:2a:ff:dc:46:47:68:06:20:00:1b:20:
                    3e:2c:44:c6:66:53:5e:69:e4:90:1c:e1:7d:78:2f:
                    9f:92:db:62:62:75:9f:8f:d4:b4:1b:30:b2:ef:79:
                    4f:ec:26:c0:2f:36:07:9a:79:44:25:37:34:4a:f8:
                    20:31:87:11:b4:75:04:04:8b:ab:4e:a1:36:03:dc:
                    62:19:e5:0c:86:06:74:d8:c8:2b:e7:94:e8:c9:c9:
                    90:e9:6a:d8:9d:09:b6:73:81:8f:90:84:a6:4f:8c:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:7A:72:F0:64:93:EF:C4:9F:6C:B2:81:82:D3:7F:F5:B5:FB:F7
            X509v3 Authority Key Identifier:
                keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:da:05:77:d3:05:d5:b6:91:c7:d4:b9:a9:5c:ee:6b:22:9e:
         76:d7:c2:17:8d:27:f2:7a:a7:bb:77:4c:81:5d:4c:0c:ad:e8:
         44:2b:08:bd:39:c9:76:1e:41:5b:3d:59:11:30:a3:2f:58:0d:
         25:fc:50:16:26:2d:ad:ea:2f:3b:e9:c5:a8:68:20:e7:17:55:
         c4:16:42:0a:45:c4:40:c4:b2:c5:c6:3b:6f:86:04:a2:d5:41:
         ea:81:c4:b8:f8:3a:84:4d:a5:f4:fe:c1:43:11:18:4a:b5:0f:
         5b:99:1c:83:7b:36:d6:2d:d4:d6:42:0c:d1:9a:7d:13:43:63:
         4f:4f:01:b0:40:ed:79:dc:7c:cf:86:a1:c0:e1:15:e6:16:a3:
         f5:ed:f5:78:2f:38:57:1e:8d:d5:19:17:58:d0:3c:a4:af:01:
         4b:4b:50:eb:db:e0:24:ed:8f:53:9b:c8:56:00:b2:f5:3c:dd:
         6e:af:82:dc:5c:f3:4f:5d:2d:41:41:43:a4:26:9e:2f:f1:ed:
         b0:f7:62:28:b2:8a:6b:78:0d:fe:88:83:59:69:11:2c:4a:ae:
         a0:e8:b4:6b:e5:08:a3:ca:da:a9:4d:24:0a:54:c6:d8:cc:cb:
         92:18:cd:5e:03:78:0f:b5:56:a4:3b:74:45:e2:fb:cb:37:00:
         e1:43:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:29:00 2025 by rpki-client