Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          RyD3TQKJwcSUPTJ0/GdRzKYGdJiDIfzkloOFIX/e9Qk=
Subject key identifier:   FB:56:53:EF:CA:CD:E1:E4:A9:36:1A:7C:0A:49:8A:FD:6A:15:DF:3C
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       019642FA89C81DF9B13BEC4B6849E774C264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          14B1
Signing time:             Thu 17 Apr 2025 09:00:37 +0000
Manifest this update:     Thu 17 Apr 2025 09:00:37 +0000
Manifest next update:     Fri 18 Apr 2025 09:00:37 +0000
Files and hashes:         1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: 0BMd2SwsfD1oqcUlmUdSf8j7RNxcQDHdLqxH+w3aSuI=)
                          2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
                          3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:fa:89:c8:1d:f9:b1:3b:ec:4b:68:49:e7:74:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Apr 17 09:00:37 2025 GMT
            Not After : Apr 18 09:00:37 2025 GMT
        Subject: CN=fb5653efcacde1e4a9361a7c0a498afd6a15df3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:11:05:b7:4d:7f:d3:05:20:c4:a5:77:59:
                    05:4e:d6:38:50:b5:4c:d9:cb:70:75:3b:02:1d:60:
                    4c:b3:2c:3f:cf:15:83:87:2f:37:b8:55:0d:6a:f1:
                    40:0a:f4:56:ae:a3:00:7f:64:12:82:d9:7e:25:6f:
                    64:44:70:a3:61:c8:91:9a:2e:9b:5b:0e:9e:ba:a8:
                    75:3e:b9:96:de:5a:0e:94:56:2d:ec:66:3a:99:cc:
                    9c:92:58:b9:cf:e5:6d:ab:e1:5f:7c:42:de:ab:4b:
                    16:9a:4e:00:2d:05:a6:fe:fb:f8:b9:63:44:cc:da:
                    6f:65:d9:11:39:ca:f1:03:39:fe:46:36:91:98:82:
                    cb:84:d2:40:79:3b:30:66:2c:67:a9:9c:53:88:f9:
                    01:0f:d2:61:f0:4d:b1:f5:48:d0:6a:14:2c:d2:20:
                    b1:49:61:dc:d8:35:90:ac:13:52:50:4f:92:cc:7d:
                    a7:98:0a:69:1b:a4:a8:cd:ee:08:f1:31:b4:e2:f2:
                    63:27:77:37:60:5a:d9:04:d3:e6:d5:72:65:cb:3d:
                    2f:b9:69:a8:40:fc:f1:a6:a3:3e:62:3f:17:c1:ca:
                    4b:9c:4b:fa:6d:8b:b1:73:b5:ee:5d:9f:3e:ec:f8:
                    69:5b:61:42:1d:16:d0:2f:91:88:ac:5f:c7:38:3f:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:56:53:EF:CA:CD:E1:E4:A9:36:1A:7C:0A:49:8A:FD:6A:15:DF:3C
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:2f:16:25:b4:31:cf:5a:dd:7f:c1:16:9f:9c:79:0f:1c:
         fa:7b:8b:a2:fa:07:e3:c1:61:f8:b0:57:1d:c2:27:53:5a:1a:
         96:19:f9:d3:ac:95:df:42:ff:a6:ed:3f:d2:b9:65:b1:15:7f:
         45:a3:84:c6:7b:57:fd:d1:37:7c:f2:96:7e:8d:cd:60:aa:ad:
         33:93:d1:63:53:d6:e2:43:21:50:27:1e:be:b2:bb:9c:09:d8:
         1b:5a:b3:b0:4d:3b:6e:8d:fb:1e:4b:51:b2:23:2e:40:ce:13:
         85:34:5f:41:5d:de:d5:0c:73:9a:ed:4e:f9:af:cf:c0:52:ce:
         51:a9:2d:b3:3a:e1:85:f2:6c:34:b2:69:c0:3d:a2:0f:82:36:
         47:f1:f4:ae:66:cd:e4:ea:e6:a3:a7:36:76:4a:e9:b9:92:33:
         53:17:59:f9:25:20:a1:9f:eb:a9:00:e1:2c:94:5c:32:08:1c:
         94:12:da:04:7c:74:43:fd:8e:fa:35:f8:14:80:a4:42:fd:3a:
         00:22:18:43:fa:a2:49:99:41:f4:6f:6c:3d:17:2e:47:b8:ab:
         e8:2e:7c:c7:29:13:c8:f9:9d:4b:2b:0c:bb:2a:74:e7:ec:0f:
         84:a7:1c:06:e6:96:36:e9:3a:01:ac:c7:81:3e:9e:45:41:66:
         e8:fb:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:07:15 2025 by rpki-client