Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File:                     ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier:          2skjjV/26Ub5OwdGQIcxF+ZaSYZd6pYkga8FHHsErIM=
Subject key identifier:   E7:AE:04:FF:36:EF:AE:C9:29:D7:E5:64:28:AE:C4:CD:E0:51:E9:E5
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       01963EE734C988384140ACD673708A4CF602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 14:01:01 +0000
Manifest this update:     Wed 16 Apr 2025 14:01:01 +0000
Manifest next update:     Thu 17 Apr 2025 14:01:01 +0000
Files and hashes:         1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=)
                          2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=)
                          3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=)
                          4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=)
                          5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=)
                          6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=)
                          7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: M8ubf+Su09YNQy/i77NcUPQH/Ccma1Ufvys8audnRAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e7:34:c9:88:38:41:40:ac:d6:73:70:8a:4c:f6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Apr 16 14:01:01 2025 GMT
            Not After : Apr 17 14:01:01 2025 GMT
        Subject: CN=e7ae04ff36efaec929d7e56428aec4cde051e9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:2e:50:b2:60:65:e2:8a:ae:96:e0:fa:c3:
                    a3:ce:34:e6:6c:ed:c1:99:83:e8:6b:f0:61:5f:20:
                    2a:a8:d2:26:04:24:a8:b1:88:b7:16:bc:0f:22:86:
                    50:82:b5:a6:65:05:72:57:5e:4b:6f:ec:dc:ad:2a:
                    f2:9b:9d:7b:22:20:ce:c4:0c:d7:e9:c3:c9:ec:02:
                    96:d8:7f:a0:da:05:5f:26:7c:c6:d4:9a:0b:50:7a:
                    b1:4f:7e:4f:6a:fc:3a:be:89:e7:b1:e0:9c:40:19:
                    7a:4d:f6:d3:14:41:3e:56:53:c9:5c:11:d6:c4:df:
                    d4:ad:c7:0f:ac:b2:db:9d:c7:5a:d9:df:c5:eb:90:
                    a4:68:9d:2c:23:d3:96:9c:bc:26:24:c2:6d:1a:5a:
                    14:e8:48:bd:e3:33:85:d8:60:e7:66:a3:72:f6:f1:
                    31:7c:df:07:e5:b7:9c:a9:b6:c1:7c:7b:06:33:c1:
                    11:cc:0a:a8:b3:18:4d:b4:5b:42:61:2b:48:97:3e:
                    a0:1b:16:12:2b:27:75:47:de:1c:97:8e:5d:75:cb:
                    a3:77:20:68:9e:62:e1:f0:0b:c0:b5:a0:4e:f8:c9:
                    38:d5:77:c8:b2:f3:9d:1e:86:cf:ee:46:4c:63:aa:
                    b3:1e:db:7f:48:5c:0b:47:76:26:92:fd:1a:97:aa:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AE:04:FF:36:EF:AE:C9:29:D7:E5:64:28:AE:C4:CD:E0:51:E9:E5
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:8a:f4:1a:f4:de:1a:17:d4:f6:c2:18:92:18:62:27:35:
         da:d3:95:85:ce:03:ed:41:7d:6f:0b:df:10:ea:0d:58:2a:e2:
         58:65:42:c8:3e:3e:4d:67:89:92:0d:1e:1a:47:38:d7:07:b5:
         99:db:a6:9e:6a:7d:2e:0d:d3:24:9c:b4:9a:60:e1:97:25:23:
         cb:22:77:22:33:ff:34:ce:a0:d2:ce:8a:56:0f:fc:e2:47:4e:
         c2:a7:34:8e:37:ba:4e:64:15:5f:e2:ef:30:a9:13:c4:fc:ac:
         84:48:fb:13:92:60:2f:15:8e:7e:80:9b:24:7e:c5:d5:aa:86:
         1d:83:92:84:a6:74:d6:2a:21:af:0d:76:17:f5:2e:07:f7:9a:
         cd:29:bb:de:a3:7b:0e:3d:0f:bb:de:53:ef:a6:55:33:3a:64:
         ce:eb:db:e1:3f:d7:d9:f4:1d:de:dd:c5:5b:b3:85:a5:9a:09:
         12:22:67:9d:e4:24:d5:b0:4a:73:29:09:c4:7c:89:ac:56:d9:
         9d:00:37:5a:47:09:df:a6:fe:b0:ad:a9:db:62:60:62:80:f0:
         7d:c3:eb:aa:23:dd:a8:9f:66:ed:59:e3:df:b3:4a:a1:fe:85:
         41:71:c5:39:fa:8d:45:97:e2:46:a9:2d:34:cd:40:3c:cd:3c:
         9b:e5:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:18 2025 by rpki-client