Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File:                     UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier:          si2LYzJ/uJo0WemughyYA7redWA8lLsfJwKoGHwkzng=
Subject key identifier:   54:A0:5F:6B:6F:99:85:93:96:7A:48:1F:14:A7:B0:05:A6:0D:21:61
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer:       /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial:       0196556E4F7B5A0DA4A736D01CBE7151FB31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number:          12A0
Signing time:             Sun 20 Apr 2025 23:00:14 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:14 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:14 +0000
Files and hashes:         1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: EZgI3iHXP39EGrysMoPIjQO6v1Y0CNqet2A5yh9zDyk=)
                          2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:4f:7b:5a:0d:a4:a7:36:d0:1c:be:71:51:fb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
        Validity
            Not Before: Apr 20 23:00:14 2025 GMT
            Not After : Apr 21 23:00:14 2025 GMT
        Subject: CN=54a05f6b6f998593967a481f14a7b005a60d2161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:36:a3:ac:fb:e7:6a:c8:ba:80:df:e7:bb:c9:
                    94:82:31:85:0c:51:06:cb:10:25:fc:c5:77:d6:3c:
                    49:e8:59:9b:e9:64:02:b2:a8:0e:56:28:91:bb:03:
                    f2:4b:51:16:6d:53:38:de:f6:c2:4e:d5:33:d4:f2:
                    a9:f1:53:77:25:13:01:bc:33:14:e3:10:a2:2b:f4:
                    a5:f5:b6:72:38:1c:e9:ba:68:8e:44:d0:90:fa:8d:
                    27:fa:0f:57:87:66:11:19:37:87:b8:eb:58:86:8f:
                    bc:de:1e:fa:c9:06:21:ab:be:65:75:52:8c:83:1c:
                    fb:4e:ad:b7:14:c1:13:af:8c:f6:4b:89:5a:f6:d6:
                    71:0f:91:24:7e:33:09:a5:15:3e:2b:10:8e:50:a1:
                    43:ab:d7:0e:e0:8e:1d:1b:84:f7:fb:36:56:6a:da:
                    39:4d:ab:9c:2c:52:29:ee:11:8a:cf:15:2c:2a:19:
                    f5:a3:72:fc:c8:2a:24:d0:b7:02:0b:d6:de:06:44:
                    71:a7:be:7c:70:42:f7:36:75:2d:e1:8f:76:5e:13:
                    11:b3:2b:3f:8e:d7:4f:26:8a:38:26:9f:65:04:7a:
                    fa:de:06:5c:5e:3e:dc:17:73:38:ce:72:fc:06:42:
                    27:84:64:c6:8b:22:c0:de:57:25:92:f5:e6:0c:51:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A0:5F:6B:6F:99:85:93:96:7A:48:1F:14:A7:B0:05:A6:0D:21:61
            X509v3 Authority Key Identifier:
                keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:f1:d3:8a:1e:63:93:ff:a4:e6:55:9b:d5:04:1d:e4:32:
         e4:23:f4:5f:2e:0a:4e:ea:d1:f4:58:20:f2:66:6f:f7:bd:b5:
         43:7b:83:2a:e8:de:e2:f6:61:c4:53:d6:2e:34:c3:3c:de:29:
         1c:ce:32:6d:49:55:ca:42:59:f8:d4:03:6c:61:63:fe:4a:73:
         49:ba:52:6a:2c:f5:97:39:89:a0:3e:ce:f5:0a:5e:ac:ad:d5:
         d5:89:c7:0f:cd:f2:68:96:32:21:96:2c:8c:cd:0e:03:37:b5:
         d2:a2:69:e3:cd:ea:ac:09:b3:f0:85:54:91:ff:c3:e7:cc:63:
         46:32:c4:de:8d:88:d9:9f:d3:78:1a:48:94:d8:1e:bc:33:94:
         5a:96:4c:96:bb:e7:d3:8d:04:80:03:07:6e:71:17:e2:ae:33:
         32:bf:af:ef:24:cb:6b:96:ba:de:71:48:70:2d:a2:34:10:90:
         c4:1c:bb:84:25:0a:6c:47:d5:5a:f6:bc:32:02:dd:d6:17:fe:
         ee:61:22:ed:7d:f6:87:3d:0f:c9:37:93:b4:0b:95:59:0a:e2:
         c8:fe:97:bb:cd:f7:e7:59:9a:c5:40:00:d5:12:72:04:9c:9e:
         5e:93:96:19:5d:ea:ee:b9:a8:0f:a2:39:06:13:db:01:d5:61:
         bf:c2:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:20 2025 by rpki-client