Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
File:                     uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json)
Hash identifier:          5i0y+r+YWMtQpzxbJSbcwFXBrv2yHegB2PbT8X9cOKQ=
Subject key identifier:   4C:92:17:E5:29:F1:C0:84:9E:06:C7:1E:CF:DE:AC:23:69:CB:9E:38
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Certificate issuer:       /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial:       019657CB8B175E7CB20EC1DA1D8742AB19E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
Manifest number:          06CA
Signing time:             Mon 21 Apr 2025 10:01:19 +0000
Manifest this update:     Mon 21 Apr 2025 10:01:19 +0000
Manifest next update:     Tue 22 Apr 2025 10:01:19 +0000
Files and hashes:         1: fmD84MKcKNszvegRc78ea5yDEkU.roa (hash: l40Hf3OlT5bsApNDrNH7Y+k7wZYD3XggeWdBVJzjivU=)
                          2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: UQsN6dISspb6uohFThJYZwDtBBc5IdWw5UbTd3LmRHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:cb:8b:17:5e:7c:b2:0e:c1:da:1d:87:42:ab:19:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
        Validity
            Not Before: Apr 21 10:01:19 2025 GMT
            Not After : Apr 22 10:01:19 2025 GMT
        Subject: CN=4c9217e529f1c0849e06c71ecfdeac2369cb9e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:43:25:82:4b:5f:1b:e7:90:a8:36:16:28:
                    12:d5:2e:6b:c1:22:98:12:99:a7:73:72:11:1a:3e:
                    1c:39:9a:17:e7:6a:8a:84:f9:0b:35:1d:ce:5f:e9:
                    c9:c3:b3:f0:ac:1e:00:b6:c1:00:37:43:1e:fb:a5:
                    80:03:07:d0:ae:4d:c4:e6:78:e5:38:cc:9e:94:a4:
                    d6:39:56:8d:bb:f8:93:e5:3d:18:a6:2f:71:b4:a8:
                    4e:2b:47:c8:74:61:3d:d1:b3:01:35:4e:80:3f:e3:
                    8a:9b:24:bd:ef:ae:de:66:af:eb:05:08:0e:5d:3a:
                    7b:04:13:35:e6:86:d8:5c:e2:37:c6:88:eb:45:1b:
                    a0:49:cd:b8:4b:7f:a3:33:9d:09:b6:9a:8c:00:1d:
                    57:d7:e0:8e:c5:15:7d:e9:40:67:59:f1:f5:33:07:
                    65:99:3e:eb:c7:7e:f8:a0:d6:1a:e3:a5:51:d2:14:
                    8a:06:39:8f:76:0c:3a:64:82:0e:8f:53:d4:fd:7a:
                    36:7d:58:bf:37:5a:7d:ac:2d:db:84:12:fd:37:1a:
                    47:26:02:1c:ab:75:f7:2f:78:9e:00:ab:96:95:08:
                    a4:4d:9b:3c:bd:1e:de:15:2d:a5:8b:16:b8:b4:ad:
                    06:66:a9:c2:6e:f6:be:79:0b:ab:97:4c:b6:f0:62:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:17:E5:29:F1:C0:84:9E:06:C7:1E:CF:DE:AC:23:69:CB:9E:38
            X509v3 Authority Key Identifier:
                keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a2:87:10:81:42:eb:61:41:a1:0d:ad:ce:f0:6d:a5:b5:d7:
         83:6f:42:34:00:39:2b:10:53:46:f8:46:59:e6:69:8e:5d:ac:
         5e:61:08:83:16:0e:d2:e8:de:a0:92:09:68:95:6f:c3:1c:b8:
         44:d7:4c:45:32:3e:e7:93:35:73:3c:9b:63:73:e9:1d:7e:50:
         93:36:f5:33:b0:e5:e0:c2:a3:52:29:c0:21:de:47:bd:4a:07:
         7a:21:be:3e:a7:65:08:52:f5:5b:b7:43:77:b1:e0:14:aa:41:
         38:d2:75:4d:04:5b:88:9d:b1:3a:c4:a4:0c:5e:80:b0:f5:c1:
         eb:11:06:8f:08:dd:0d:ad:b8:16:50:2f:4f:fd:35:18:41:96:
         cf:a2:93:44:03:0a:84:f6:8d:85:30:4f:b4:fb:4f:0f:b8:c6:
         6b:37:e0:ee:c7:3e:8a:87:b6:5d:d2:39:a7:1a:5e:1e:8f:06:
         92:58:58:c7:7b:bd:2e:ac:9e:10:f5:16:de:fb:c3:d1:c1:58:
         64:c1:5e:4b:92:16:b5:2e:fb:ca:90:91:2d:0d:5a:4a:a0:a5:
         02:8a:04:0a:5e:4e:64:9d:b5:90:a0:30:ce:04:50:29:21:de:
         c9:20:8f:80:84:3f:9f:ff:09:fc:9e:fb:3b:5c:14:a3:09:54:
         57:e6:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:14 2025 by rpki-client