Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          kaBM2T34crq0s3OvS/eKKbwy0AA0N9Pmzg67s0mtfwc=
Subject key identifier:   3E:C4:A4:0B:01:F5:48:95:47:67:3F:B2:A9:B0:0E:40:C1:90:02:77
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       019649A13504E7F26498BF7FD66EFEBE3BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          0288
Signing time:             Fri 18 Apr 2025 16:00:23 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:23 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:23 +0000
Files and hashes:         1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
                          2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
                          3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
                          4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: lyGXD/ph5vo7sT3J/8azO0Sh3dkohAyxho721r6XIu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:35:04:e7:f2:64:98:bf:7f:d6:6e:fe:be:3b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Apr 18 16:00:23 2025 GMT
            Not After : Apr 19 16:00:23 2025 GMT
        Subject: CN=3ec4a40b01f5489547673fb2a9b00e40c1900277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:e3:ae:e5:4e:02:a9:68:48:ab:37:fd:ec:
                    5c:ee:e8:99:35:24:01:78:ad:23:d7:72:02:e3:08:
                    88:27:b2:2e:9e:81:40:7e:6e:4c:92:d1:62:df:8f:
                    ae:12:69:03:58:6e:be:8b:08:67:c4:b2:b8:3d:db:
                    f6:4f:54:ba:ea:d5:8c:ad:e1:31:ed:ac:b5:ed:28:
                    b1:26:c1:1b:25:f6:87:d0:93:f0:1f:7c:7b:96:0e:
                    ac:cf:e9:19:1e:d8:26:15:c1:82:08:f7:c7:f6:1f:
                    7b:76:e5:37:8a:d9:37:2a:3f:40:b5:aa:a3:fc:9c:
                    5e:17:30:a3:a4:50:3d:6c:54:3d:b8:f6:fd:ee:c8:
                    a5:7e:22:d7:6e:92:7f:30:4e:5f:e9:df:37:f1:2a:
                    3e:e0:9c:0e:4d:49:94:ea:98:a6:38:65:f7:a8:06:
                    57:55:e4:a8:72:c4:a5:8c:99:94:4c:41:39:07:37:
                    d0:ab:da:9b:98:3f:53:03:07:97:8f:ab:c5:60:27:
                    7a:a8:7d:a1:a0:04:bd:64:81:8f:80:c3:0a:e9:1e:
                    28:df:0d:32:e1:7e:dc:00:e0:fb:94:bf:3f:97:35:
                    ef:c4:f7:c9:5b:fb:a9:d7:e8:2f:60:bb:65:88:b9:
                    19:be:ad:68:9b:79:be:52:20:45:a8:06:c2:f6:6e:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:A4:0B:01:F5:48:95:47:67:3F:B2:A9:B0:0E:40:C1:90:02:77
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:31:03:af:6d:9b:fd:43:26:6d:09:5c:65:25:77:65:04:78:
         e0:41:3a:fe:ac:70:5e:45:2d:78:1c:b1:41:e5:cb:05:77:a6:
         ac:bd:77:80:d8:22:b7:2f:b0:7f:57:66:2a:a7:c3:1a:77:08:
         54:d5:00:20:fd:44:32:95:c9:f9:a9:2a:ac:9b:2b:a7:55:71:
         ba:af:77:bb:94:2d:bc:fd:7b:ea:f7:f2:2e:1d:f6:91:f2:fd:
         e1:b5:34:1d:1b:3b:18:a3:ac:54:12:2a:16:64:88:52:e1:17:
         e0:b8:a4:8e:aa:99:f7:2d:15:39:7e:cf:4a:99:2b:2f:47:8c:
         67:9e:78:51:e7:3c:a9:09:6a:a8:53:c3:4e:b5:39:e0:73:21:
         49:cb:cb:21:c7:75:7d:d2:18:01:eb:14:29:d8:cf:b4:51:11:
         6d:f6:5c:e3:5c:fa:2d:76:72:a0:e1:3c:d8:21:28:07:e6:56:
         27:6f:7b:10:e3:9e:27:fd:7b:00:0e:37:a3:c3:5b:fb:55:be:
         6d:9d:aa:ba:a3:6b:12:ae:8d:69:62:b0:e1:40:12:65:90:8d:
         6f:3d:d9:0e:8c:ed:ea:e7:54:f3:db:bd:ae:f3:71:71:f7:16:
         d9:69:9c:50:ec:29:26:cb:cc:c2:94:71:40:c7:98:df:29:75:
         0e:ab:61:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJoTUE5/JkmL9/1m7+vjvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx
ODMyNDkwHhcNMjUwNDE4MTYwMDIzWhcNMjUwNDE5MTYwMDIzWjAzMTEwLwYDVQQD
EygzZWM0YTQwYjAxZjU0ODk1NDc2NzNmYjJhOWIwMGU0MGMxOTAwMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZnjruVOAqloSKs3/exc7uiZNSQB
eK0j13IC4wiIJ7IunoFAfm5MktFi34+uEmkDWG6+iwhnxLK4Pdv2T1S66tWMreEx
7ay17SixJsEbJfaH0JPwH3x7lg6sz+kZHtgmFcGCCPfH9h97duU3itk3Kj9Ataqj
/JxeFzCjpFA9bFQ9uPb97silfiLXbpJ/ME5f6d838So+4JwOTUmU6pimOGX3qAZX
VeSocsSljJmUTEE5BzfQq9qbmD9TAweXj6vFYCd6qH2hoAS9ZIGPgMMK6R4o3w0y
4X7cAOD7lL8/lzXvxPfJW/up1+gvYLtliLkZvq1om3m+UiBFqAbC9m71lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7EpAsB9UiVR2c/sqmwDkDBkAJ3MB8GA1UdIwQY
MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt
ODdhNjMzM2Q2ZTY0LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0
LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzEDr22b
/UMmbQlcZSV3ZQR44EE6/qxwXkUteByxQeXLBXemrL13gNgity+wf1dmKqfDGncI
VNUAIP1EMpXJ+akqrJsrp1Vxuq93u5QtvP176vfyLh32kfL94bU0HRs7GKOsVBIq
FmSIUuEX4LikjqqZ9y0VOX7PSpkrL0eMZ554Uec8qQlqqFPDTrU54HMhScvLIcd1
fdIYAesUKdjPtFERbfZc41z6LXZyoOE82CEoB+ZWJ297EOOeJ/17AA43o8Nb+1W+
bZ2quqNrEq6NaWKw4UASZZCNbz3ZDozt6udU89u9rvNxcfcW2WmcUOwpJsvMwpRx
QMeY3yl1DqthBg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:29 2025 by rpki-client