Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File:                     UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier:          7tdY4QVvsvfH30sCwp1TTGd6ffdaySmkrMuHZqqpiUk=
Subject key identifier:   99:59:03:5A:9E:76:D7:D7:46:86:DD:AC:2C:6F:EF:F6:FE:03:E5:B9
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer:       /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial:       0196A1649501A0EE6C2EC4EA9D150D7B635E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number:          0D42
Signing time:             Mon 05 May 2025 17:00:45 +0000
Manifest this update:     Mon 05 May 2025 17:00:45 +0000
Manifest next update:     Tue 06 May 2025 17:00:45 +0000
Files and hashes:         1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: D2a6h6bBI2YyVLTgbyTKKLx3pOgbjNrDXR5GYSyAupU=)
                          2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:95:01:a0:ee:6c:2e:c4:ea:9d:15:0d:7b:63:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
        Validity
            Not Before: May  5 17:00:45 2025 GMT
            Not After : May  6 17:00:45 2025 GMT
        Subject: CN=9959035a9e76d7d74686ddac2c6feff6fe03e5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:80:bf:b6:04:d8:72:fb:14:f7:92:fa:cf:
                    55:f3:45:ec:2a:a9:67:1e:e3:7a:be:0a:8a:1d:60:
                    d5:ca:9a:87:57:67:13:b6:7e:67:85:4f:13:6b:99:
                    be:0c:e9:6c:d7:94:b6:2c:f0:f3:5d:d0:92:5e:4e:
                    1f:12:ba:39:04:9c:38:4e:2c:cf:ff:c6:aa:b6:8b:
                    22:81:c7:20:31:86:90:17:08:cc:93:49:43:e9:dc:
                    f4:69:7e:d1:e2:93:4a:bb:fe:d0:38:10:ec:41:3c:
                    9b:09:5e:75:14:9f:56:aa:7d:df:97:1c:67:52:c5:
                    88:3d:f3:b4:5f:b1:d9:41:71:bb:2a:df:cc:25:67:
                    a6:ec:0a:ae:57:86:d7:a4:86:c6:08:1b:39:9d:14:
                    1d:bc:4d:7e:39:5f:51:3c:fc:63:d2:c5:81:c1:f9:
                    89:46:fd:44:7b:10:06:c8:5c:0d:af:dc:f5:01:5d:
                    e9:8e:de:d0:bf:ce:03:fb:ec:7b:c2:65:de:f2:60:
                    f6:1f:aa:f6:8a:23:2b:b0:7c:97:32:00:da:65:3e:
                    86:4d:b0:81:a7:97:c9:81:28:d3:c3:b7:14:39:cf:
                    cb:f2:fd:eb:28:18:7d:f8:fc:ae:30:a1:06:59:d1:
                    6f:16:c4:cb:10:6a:57:c1:10:3e:7d:20:e3:6d:db:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:59:03:5A:9E:76:D7:D7:46:86:DD:AC:2C:6F:EF:F6:FE:03:E5:B9
            X509v3 Authority Key Identifier:
                keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5a:db:09:6e:61:aa:ee:c9:f8:33:a3:9a:aa:13:7a:fd:93:
         be:49:03:9b:8f:16:75:13:64:3e:e2:73:fc:65:0d:31:6c:97:
         4b:cd:36:33:ae:d4:bd:5a:3a:c7:95:08:5d:8e:74:22:be:0c:
         e1:1d:52:29:9d:06:49:74:3f:18:6a:86:27:9e:e7:a9:74:24:
         52:83:59:02:b8:22:47:48:b9:14:3a:31:ec:95:56:cb:9d:81:
         3b:b1:0a:4b:1c:f7:89:f5:b4:0b:49:e6:e7:c0:f2:99:b3:1f:
         14:b8:e5:36:6c:a9:4c:a2:fa:49:ae:9e:d3:6d:2e:f0:8e:5a:
         1f:c9:74:33:6d:cb:98:6f:89:1d:2a:65:49:e5:3e:92:92:f6:
         6e:20:a4:25:fd:0f:04:73:36:bc:11:c3:8e:1b:7e:18:71:e0:
         6e:9f:bd:a2:65:2a:a4:41:ee:42:73:61:e5:4b:e8:2d:83:f9:
         7a:50:1b:ec:f5:19:ec:a1:e4:bd:5d:6b:08:5d:5a:11:94:ad:
         d1:6c:e5:78:75:de:d5:7e:f0:b9:e8:ad:5a:e5:fa:c2:6d:91:
         ff:d8:41:ac:17:9b:27:80:43:99:66:0f:41:dc:b3:a2:f8:51:
         9e:7c:ae:36:fe:d8:74:c3:64:47:54:0a:85:bc:b1:fd:13:55:
         09:38:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:20:06 2025 by rpki-client