Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          fD1SHwccIa+Br/I7NmleZDvMU+X2FgMuc4UhzD39BI8=
Subject key identifier:   9A:6D:5C:55:A8:6C:48:C5:F2:32:88:30:4D:A3:79:68:CA:1E:EB:0C
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       0196440D05A06040EB298EAFEC66091E1CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          049B
Signing time:             Thu 17 Apr 2025 14:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 14:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 14:00:26 +0000
Files and hashes:         1: P3Ofhmz_sNehdh6r-5A9aHRvTwk.roa (hash: uFbK3pUhyEcyxB8HRUYhk8hEyAiHRXkZFNHVkwu5yUA=)
                          2: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: /ID1z370sTcgQbXUUMe/dswW/JC+wZGbMICKzTU/sZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:0d:05:a0:60:40:eb:29:8e:af:ec:66:09:1e:1c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Apr 17 14:00:26 2025 GMT
            Not After : Apr 18 14:00:26 2025 GMT
        Subject: CN=9a6d5c55a86c48c5f23288304da37968ca1eeb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f9:95:b6:65:f5:35:11:62:e9:6f:96:5c:ab:
                    f6:a9:c9:b1:e9:0f:73:a5:77:1d:91:55:b8:59:36:
                    df:45:2a:e5:53:ee:c7:93:37:ae:c7:eb:82:bd:c9:
                    e3:04:7d:a0:7a:ab:23:fa:9d:82:72:29:f5:f7:89:
                    f0:28:e4:08:93:60:8a:9a:95:08:b8:f3:17:32:34:
                    f1:3a:16:a5:58:e9:6c:28:e3:9c:d9:71:12:61:53:
                    c9:52:77:f0:95:ae:2a:59:0a:b1:93:22:31:ec:f8:
                    8b:a1:43:44:e7:11:62:54:f4:63:a1:94:85:92:9a:
                    35:59:ae:30:fe:05:ef:af:d9:e5:4f:c0:cd:a3:6e:
                    e3:01:7a:f4:1a:22:7f:df:1f:54:6f:60:bb:5a:94:
                    87:71:83:f9:fe:95:4a:b6:20:87:3a:0e:22:10:a1:
                    60:9d:7b:9e:f3:be:ef:22:c6:7d:c0:74:ca:80:b3:
                    bc:0e:4b:70:17:01:dd:6f:a3:3a:e4:e1:ee:f1:f8:
                    c1:05:1f:26:fd:04:fd:38:77:1f:4a:30:a2:a4:19:
                    e2:a3:1c:41:68:14:43:0d:7a:a8:fe:20:1a:ff:27:
                    1b:bc:73:b2:29:a7:e4:77:8c:d6:a4:8d:1d:fb:8c:
                    4a:fe:b5:1d:c3:03:ad:c9:cc:f5:fa:f6:79:5c:02:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:5C:55:A8:6C:48:C5:F2:32:88:30:4D:A3:79:68:CA:1E:EB:0C
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d1:a1:9e:fe:9d:3b:bf:c3:71:af:ae:93:a6:cd:7d:b8:d4:
         41:ba:5c:1d:28:40:46:fe:36:97:4f:f0:df:c3:a3:37:a6:a8:
         84:bf:73:d8:68:b7:cc:d3:b3:43:2e:cd:88:ef:33:f6:0d:e1:
         6e:10:a5:ac:5f:79:aa:ac:97:f9:8d:4a:28:59:fb:fd:be:59:
         bb:bf:69:32:b2:f1:c5:f5:f6:93:d6:55:de:c1:eb:0a:85:b7:
         d6:5b:bc:4d:ee:70:99:7b:a2:dd:f0:4b:8b:7f:b7:fb:c9:5c:
         09:d0:0a:ae:d5:51:5f:56:5f:9b:8e:7d:04:b7:21:e0:13:69:
         d5:6b:c6:1b:a9:06:ae:62:50:64:65:c3:e5:9d:30:42:f8:4c:
         95:ca:89:bd:ea:90:8f:d9:f6:c3:c6:28:32:b3:3a:2d:6e:61:
         bc:07:c3:58:5d:68:a7:7f:85:54:d7:f5:10:3b:9e:e3:70:9b:
         6e:c4:2c:f1:64:6c:95:f1:94:2e:69:08:66:b6:4b:31:af:fe:
         b6:ab:fb:21:fb:e6:d2:e1:a1:e3:7d:e4:84:57:94:f1:1c:1b:
         3b:d7:2a:52:5a:b8:c1:c5:a8:6f:84:48:4c:d3:3d:71:3e:b7:
         32:b2:75:fb:51:85:43:41:86:b2:63:34:83:1a:39:18:f2:ed:
         67:bd:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:15 2025 by rpki-client