Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File:                     UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier:          6lolJ8djd0ievfdAvjLs4BRjmCp4ANaXr11WbNbTuRI=
Subject key identifier:   83:C9:01:2A:78:EC:40:DA:7B:B1:DA:78:F1:98:EA:F9:13:09:83:95
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       019609790C03DA5A0AFF88B1D9F6C6509F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number:          14D5
Signing time:             Sun 06 Apr 2025 05:00:49 +0000
Manifest this update:     Sun 06 Apr 2025 05:00:49 +0000
Manifest next update:     Mon 07 Apr 2025 05:00:49 +0000
Files and hashes:         1: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: XJhY7JiEoNz8AiZ/1aoG15UCBPg7oW/+hqS7NdgBV9c=)
                          2: pRF0g-KmjQVzQy4b6X1bq_CpEUE.roa (hash: fou9eP6aKJvlZgNY8H8VBsOY1ef+bJJW7cLSICuAHvo=)
                          3: qY-nefcH-LOOVfCQihz5CCt5mqI.roa (hash: Dn21UEBAZW+JYaxSGEnZx/UyFGhOmUarhMAoNzBQGQ0=)
                          4: rFlugNGr-3DyDG3Ypn6kJRgihYw.roa (hash: Moz7baZEmGb60gs946/SMPJbRzqsgdeQtjmQD/8Bfj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:79:0c:03:da:5a:0a:ff:88:b1:d9:f6:c6:50:9f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Apr  6 05:00:49 2025 GMT
            Not After : Apr  7 05:00:49 2025 GMT
        Subject: CN=83c9012a78ec40da7bb1da78f198eaf913098395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:c1:8f:fb:e2:73:e6:b0:6a:d9:d8:69:aa:
                    0b:ba:ea:ac:77:7f:4e:b6:15:37:11:cb:a4:46:49:
                    fb:fe:ed:86:f3:35:dc:79:48:17:d0:86:8b:fb:f0:
                    e8:3b:89:0b:4e:1c:08:92:eb:bd:4b:b6:4e:e2:0e:
                    7e:34:a2:77:46:1f:5d:8e:6d:7d:5c:d5:d0:b4:10:
                    0b:36:b3:d0:8e:94:31:e0:de:94:7d:b6:be:41:ce:
                    de:45:b0:75:f2:8c:45:29:2b:30:b9:50:90:eb:2c:
                    79:5f:64:85:94:5c:bc:a8:c9:f8:83:39:21:80:b1:
                    bf:89:9b:b4:4c:23:ec:17:69:be:aa:9a:f4:f3:8d:
                    a4:47:d2:32:00:f5:f4:22:0f:7d:a1:87:7b:53:5f:
                    5e:20:31:8e:e7:eb:39:5e:fe:08:88:3d:7c:c3:ee:
                    78:9f:39:2d:1a:3a:be:27:97:c3:2d:83:c5:7c:aa:
                    eb:76:22:49:3f:4a:fa:cd:a4:81:97:2e:a8:17:06:
                    07:1b:16:9a:99:43:44:1c:10:11:a9:55:67:3c:ce:
                    86:d5:dd:19:6f:5f:bc:76:41:b4:72:5c:e8:38:53:
                    79:ac:7a:05:dc:6f:e4:b6:b5:19:0c:51:53:d5:7a:
                    b6:6d:e6:98:62:f9:71:f9:65:2c:75:36:66:f4:69:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C9:01:2A:78:EC:40:DA:7B:B1:DA:78:F1:98:EA:F9:13:09:83:95
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:83:4f:2d:96:95:91:6b:29:f4:c9:db:ff:6a:bd:7c:60:
         39:f3:af:a4:47:84:a8:4a:80:27:3f:4d:68:c9:d2:bf:7f:78:
         f5:4f:8f:f8:9d:f5:73:0d:d6:49:c2:59:ec:c3:90:55:a1:d6:
         26:1a:8e:3c:57:b1:cc:60:44:02:9e:99:72:5b:c3:60:21:e7:
         3a:34:bf:47:b2:95:e1:95:6e:7b:20:1a:77:ed:67:f6:2f:8e:
         2e:7d:22:46:41:d9:9b:9e:5d:12:4e:90:23:84:18:b4:dc:da:
         ac:3e:58:54:53:13:84:81:c9:ce:3e:e9:ef:ab:b7:be:78:83:
         7d:14:8e:6e:01:d2:dd:e7:cf:c2:66:86:c8:10:e1:55:c8:1c:
         b3:9e:fb:04:de:9e:06:26:6a:dc:ec:ad:39:81:53:dc:8e:c6:
         e6:64:00:ec:48:8c:7d:23:16:53:45:b4:41:bc:ad:c8:51:79:
         ec:ca:a3:d5:e8:3b:a7:a7:09:db:76:da:a2:65:95:66:15:3b:
         fc:26:6a:77:da:df:92:e8:43:97:ad:b6:b2:74:de:a2:cd:f7:
         b0:35:1b:52:49:7d:5a:d0:35:31:03:25:5a:0b:92:f4:f8:f2:
         3c:a6:53:b4:ac:4a:55:0a:25:aa:e2:a0:93:f7:ac:f8:f1:09:
         22:05:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:33 2025 by rpki-client