Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File:                     uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier:          JxhdR98I8RkTbZv+FhyzQb6DECPTbVzL7PwvswJMiwQ=
Subject key identifier:   5F:8B:BB:1C:AD:D4:54:55:68:5E:F9:6F:76:A1:2C:10:C7:0B:69:A0
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       01964DEC572C9EDB9D76512945EC4FA49F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 12:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:56 +0000
Files and hashes:         1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
                          2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: hjaaJ4umhDXom57WmGaFs/sxIwiCaFmrAvef2B4u7lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:57:2c:9e:db:9d:76:51:29:45:ec:4f:a4:9f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Apr 19 12:00:56 2025 GMT
            Not After : Apr 20 12:00:56 2025 GMT
        Subject: CN=5f8bbb1cadd45455685ef96f76a12c10c70b69a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:a4:03:63:c6:0b:d6:29:63:1b:ae:84:92:
                    35:c9:de:29:a8:3b:e8:52:29:b4:77:aa:fc:bf:fb:
                    30:fc:95:d2:a9:02:60:f6:77:88:19:a3:e8:4b:8f:
                    24:a9:b7:2e:d4:b8:47:c9:2a:4b:54:5d:d3:c7:59:
                    04:1b:6d:83:df:bc:71:17:15:fa:85:36:59:7d:e1:
                    c3:2f:d1:b9:53:26:65:91:be:0e:6f:22:3c:7d:1e:
                    cb:72:f5:10:86:7f:78:28:95:1b:7e:eb:ac:88:22:
                    a6:ef:6f:90:59:50:ee:3f:09:b4:92:36:d9:a6:ac:
                    00:08:81:0f:85:be:2c:04:93:c1:5d:c8:aa:d5:d4:
                    42:4f:77:77:ae:79:3a:42:fd:f0:59:d8:cb:95:20:
                    8d:e3:93:6c:6b:4a:5b:d4:f6:01:09:37:31:cf:41:
                    e3:d2:0e:c1:ad:4b:d6:4a:23:8a:fb:ac:6b:21:63:
                    e4:72:ad:55:e7:3c:38:3a:3a:5a:9b:de:3b:1a:ea:
                    60:d5:81:30:bc:4e:0e:a3:7f:c8:04:32:31:59:e0:
                    6f:bf:d1:16:91:e0:67:46:6c:16:a5:fc:4f:8d:ba:
                    08:41:dd:c2:87:2f:fd:e1:5c:ac:62:9b:f6:7d:37:
                    d1:19:bd:0e:cb:b5:0e:87:b7:00:36:50:02:69:e2:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:BB:1C:AD:D4:54:55:68:5E:F9:6F:76:A1:2C:10:C7:0B:69:A0
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:b5:83:5b:7b:56:87:4c:2d:fc:4b:a9:fc:dd:a4:42:af:
         c1:0e:6b:60:88:a5:6b:d0:37:6f:2f:16:38:63:54:75:3a:01:
         89:75:ad:a3:cc:22:58:1b:89:76:cc:85:04:4b:8d:ee:a8:f8:
         99:67:cf:86:3b:c2:fd:83:6c:3b:fc:86:ad:d0:f1:67:a5:3f:
         ee:3c:f8:f1:9b:22:99:a3:67:77:db:bf:1a:a5:7a:ef:0b:99:
         38:c0:a3:f5:33:b0:14:fd:87:94:31:7a:a8:ca:f6:9d:aa:0e:
         7a:59:3c:1d:e8:c7:61:65:a1:a0:df:ae:6a:9a:a0:8a:ff:d9:
         b2:91:19:03:e5:d3:66:55:da:56:e7:0a:0f:31:24:5a:c6:55:
         a2:af:1c:20:8a:c5:d6:2b:07:35:24:c2:71:10:1b:49:22:b5:
         31:22:45:72:22:6d:e3:30:4f:d5:9e:0c:60:43:7f:a4:8f:18:
         53:43:9f:a4:d3:b4:b3:cb:c4:c9:0a:e2:58:45:6b:f7:0e:15:
         be:a9:f8:98:2f:5a:99:f0:ee:87:6c:db:b7:3e:cd:c1:2b:87:
         ee:a8:32:56:ba:f8:57:d7:e4:95:9b:7f:a7:f3:b9:56:62:ac:
         ed:62:23:3b:2f:61:d4:22:52:00:d3:30:6b:df:21:84:72:76:
         6c:9e:0f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7FcsntuddlEpRexPpJ+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDYzM2ZlNzlhNjI5NjEwOWZkYmY2NDc1ZDRjMmE2NWUy
ZDRmMWMwHhcNMjUwNDE5MTIwMDU2WhcNMjUwNDIwMTIwMDU2WjAzMTEwLwYDVQQD
Eyg1ZjhiYmIxY2FkZDQ1NDU1Njg1ZWY5NmY3NmExMmMxMGM3MGI2OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq6kA2PGC9YpYxuuhJI1yd4pqDvo
Uim0d6r8v/sw/JXSqQJg9neIGaPoS48kqbcu1LhHySpLVF3Tx1kEG22D37xxFxX6
hTZZfeHDL9G5UyZlkb4ObyI8fR7LcvUQhn94KJUbfuusiCKm72+QWVDuPwm0kjbZ
pqwACIEPhb4sBJPBXciq1dRCT3d3rnk6Qv3wWdjLlSCN45Nsa0pb1PYBCTcxz0Hj
0g7BrUvWSiOK+6xrIWPkcq1V5zw4Ojpam947Gupg1YEwvE4Oo3/IBDIxWeBvv9EW
keBnRmwWpfxPjboIQd3Chy/94VysYpv2fTfRGb0Oy7UOh7cANlACaeLlwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+Luxyt1FRVaF75b3ahLBDHC2mgMB8GA1UdIwQY
MBaAFLgGM/55pilhCf2/ZHXUwqZeLU8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTkt
MmEwNmVkMTA0NTUzLzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTktMmEwNmVkMTA0NTUz
LzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcci1g1t7
VodMLfxLqfzdpEKvwQ5rYIila9A3by8WOGNUdToBiXWto8wiWBuJdsyFBEuN7qj4
mWfPhjvC/YNsO/yGrdDxZ6U/7jz48ZsimaNnd9u/GqV67wuZOMCj9TOwFP2HlDF6
qMr2naoOelk8HejHYWWhoN+uapqgiv/ZspEZA+XTZlXaVucKDzEkWsZVoq8cIIrF
1isHNSTCcRAbSSK1MSJFciJt4zBP1Z4MYEN/pI8YU0OfpNO0s8vEyQriWEVr9w4V
vqn4mC9amfDuh2zbtz7NwSuH7qgyVrr4V9fklZt/p/O5VmKs7WIjOy9h1CJSANMw
a98hhHJ2bJ4Pkw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:38:36 2025 by rpki-client