Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File:                     ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier:          g/8zdEiBouBV8fX4zZ5igYgk2Jl+oLSzdSAdW5pR+ns=
Subject key identifier:   6D:A2:E4:6E:F5:8E:ED:A2:64:07:50:E7:AF:87:05:E6:94:D0:56:D1
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer:       /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial:       01965237056F4FD4D07495D232B6B887A974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 08:00:59 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:59 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:59 +0000
Files and hashes:         1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
                          2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
                          3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: DOe2f82aktPmuPsNeO00C9lbiGn3iKa7vAKxyzjXLCE=)
                          4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:37:05:6f:4f:d4:d0:74:95:d2:32:b6:b8:87:a9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
        Validity
            Not Before: Apr 20 08:00:59 2025 GMT
            Not After : Apr 21 08:00:59 2025 GMT
        Subject: CN=6da2e46ef58eeda2640750e7af8705e694d056d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:08:cb:5f:52:3e:1b:88:1b:d5:9c:5d:16:
                    49:e2:99:6f:33:c4:47:49:86:ca:5e:f8:0c:eb:d2:
                    73:9e:2d:78:59:78:89:20:08:1e:0f:75:1b:b4:64:
                    77:21:25:ed:30:d9:d4:df:29:03:0d:de:f0:4e:89:
                    db:bf:24:23:52:5a:dc:0f:0f:fa:b9:0e:c6:29:d8:
                    20:0c:24:04:d0:a5:38:34:0a:29:64:3b:92:fb:30:
                    65:d8:56:97:26:c3:54:0e:d8:cf:3d:d4:1c:41:a1:
                    e3:1b:bd:05:41:ee:24:a0:f1:cc:84:47:51:1a:e4:
                    d0:98:de:29:12:05:50:66:56:fc:a1:57:7e:bc:31:
                    79:b8:c9:ce:39:65:93:5c:ed:f3:9f:bd:00:6f:81:
                    61:ff:5c:99:8a:e9:f1:58:e3:50:80:d5:32:3a:ad:
                    d6:87:c4:5e:47:03:5e:64:f4:52:b5:77:74:54:a0:
                    52:c3:ab:cc:93:af:fc:58:b6:c7:cb:16:bd:5a:48:
                    09:ee:be:67:7a:36:ec:36:0c:92:1c:83:8f:a8:aa:
                    d0:8f:9d:bf:87:80:a2:9e:ec:46:0a:12:2e:a4:48:
                    19:06:37:22:34:95:56:b4:12:15:55:65:cb:71:e1:
                    31:66:12:bb:24:44:49:d0:92:4d:2a:66:4f:5a:76:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A2:E4:6E:F5:8E:ED:A2:64:07:50:E7:AF:87:05:E6:94:D0:56:D1
            X509v3 Authority Key Identifier:
                keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:66:25:1e:2c:01:b3:67:e5:a5:d6:a7:c9:11:b5:1d:09:
         6e:d5:ca:72:cb:a1:0b:19:0f:a6:3c:32:0c:2b:10:90:c4:76:
         f8:bf:be:60:2e:f1:3c:84:2c:b7:2e:a7:cf:b0:39:81:8f:ac:
         a4:62:3d:54:52:98:49:52:a6:1c:d2:dd:91:6d:f7:e6:71:49:
         d7:5d:68:56:91:97:10:6f:87:10:e1:55:83:4c:15:75:5a:39:
         72:b5:9a:51:93:5b:99:56:3a:42:f9:ba:1f:d3:ef:00:92:26:
         23:74:ee:53:08:be:6c:c0:1e:0d:48:5b:00:ef:eb:3f:0b:75:
         57:f3:a8:4c:08:08:9c:ae:91:95:3c:d9:f2:70:59:c6:35:2b:
         31:d9:f8:df:b9:75:98:de:2f:34:e1:dd:f6:14:80:ed:4e:d7:
         eb:bb:a1:11:fc:cd:6d:53:76:52:92:19:51:a0:7c:3c:ba:65:
         67:f5:e3:5c:c1:c6:f5:aa:d2:ed:71:63:36:12:aa:5c:97:d3:
         c7:77:f3:67:e9:5e:9d:f5:96:ce:3e:49:84:74:bb:8f:7c:49:
         60:bd:c5:0e:52:9b:54:f5:d4:04:35:b8:37:0f:dd:1b:2d:0a:
         09:ec:bb:eb:b3:f8:fd:3f:68:2e:41:a4:d4:be:ef:11:59:70:
         f0:cf:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:21 2025 by rpki-client