Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          gL1NFhqbcr8WWzuFkPlLEmElu/XRA+3Mm2g7lwgMl/k=
Subject key identifier:   21:D9:89:23:E4:FA:1F:8E:CB:64:C3:73:34:C2:2C:8C:28:3E:46:62
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       0196444402608985CB1D3D83214F8D8BEA96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 15:00:29 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:29 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:29 +0000
Files and hashes:         1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: JqemnqzF8G3JCKwXtMb1R3hlEjqw4A43swQncLhUaIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:02:60:89:85:cb:1d:3d:83:21:4f:8d:8b:ea:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Apr 17 15:00:29 2025 GMT
            Not After : Apr 18 15:00:29 2025 GMT
        Subject: CN=21d98923e4fa1f8ecb64c37334c22c8c283e4662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c8:f4:1f:79:09:9d:07:06:3d:00:8d:9f:4c:
                    31:f5:01:bd:d1:1e:28:68:63:dc:c2:d4:2c:6d:8b:
                    71:05:dd:20:f4:3b:a0:9f:6c:5d:56:c3:52:b5:84:
                    e7:f7:d7:0a:00:1b:60:71:80:1a:67:b3:da:5d:13:
                    c9:8f:8f:ba:a2:7f:39:36:0d:59:11:18:56:bd:e8:
                    43:bd:1b:c4:49:dc:22:4b:53:82:07:a1:46:ca:06:
                    0a:25:ec:35:1c:6b:06:7a:82:49:74:ce:67:46:32:
                    5c:e7:f9:d5:1c:b7:3e:6a:ee:04:2c:0d:c3:a0:ed:
                    c9:f4:ea:64:ab:50:d9:b6:06:93:11:f0:4f:28:6c:
                    8f:7b:01:92:37:07:67:2d:53:f0:c7:78:8e:5f:27:
                    e3:91:a0:8e:33:2a:52:f3:d8:2a:c4:56:ef:f4:81:
                    3b:7e:f0:c8:db:97:db:2e:73:32:eb:29:21:ba:5d:
                    62:b5:8b:81:8f:87:6e:84:cb:e2:a8:78:2a:ea:54:
                    8b:34:4f:d5:a5:70:bb:c8:66:aa:02:19:8b:eb:b9:
                    3a:36:6b:e8:d7:99:a9:5e:12:e8:fd:36:7d:d0:0e:
                    8e:17:2d:1e:d8:30:7e:86:11:46:5b:82:10:ec:b3:
                    2d:09:80:ec:a4:9c:ff:80:00:43:2d:69:f1:93:ba:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:89:23:E4:FA:1F:8E:CB:64:C3:73:34:C2:2C:8C:28:3E:46:62
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2c:be:a5:97:9d:d7:fb:d5:72:de:d5:b7:54:29:73:1c:aa:
         d7:21:d9:0a:70:5e:ed:7c:de:4a:36:c2:db:c7:9f:c7:31:91:
         14:c7:4e:fa:40:ca:f7:2c:ec:84:e3:aa:b4:97:88:52:14:04:
         0c:05:3e:bb:8c:ca:e6:aa:4f:6d:57:5a:89:f3:ca:df:d5:40:
         e1:46:3a:82:e8:1e:63:a1:68:68:c3:63:77:b1:b9:6b:d9:1c:
         31:1c:f8:fa:39:0a:84:9f:87:33:74:fd:a2:e0:ac:f4:04:57:
         6e:8c:69:e3:c7:b7:a7:46:fd:97:4f:50:14:da:a0:c1:a2:db:
         9c:0f:24:5a:91:9c:c2:5b:94:2b:52:96:b9:11:ff:f3:b9:a8:
         82:e5:58:ff:a6:17:76:a8:98:5f:84:7c:56:a0:ea:54:00:b2:
         6d:f5:8e:e8:b1:0f:45:eb:83:5d:81:8d:0d:de:e0:28:d2:97:
         47:0f:04:af:76:c1:3e:cf:c5:1a:cb:23:96:40:98:d2:dd:57:
         bb:ae:34:72:ff:74:06:03:d7:f6:1d:e6:8c:9f:b3:2d:5d:64:
         be:c8:53:b2:44:33:60:a2:be:43:88:66:38:45:2f:19:21:34:
         f0:26:09:c6:d0:a2:5d:89:a7:83:64:04:41:b7:91:4c:9e:fa:
         62:c9:ad:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERAJgiYXLHT2DIU+Ni+qWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDU1ZWJjM2QxYzUyZjE3YWU2NWFjMjkyZWJlMDk5MzEw
MDljZjYwHhcNMjUwNDE3MTUwMDI5WhcNMjUwNDE4MTUwMDI5WjAzMTEwLwYDVQQD
EygyMWQ5ODkyM2U0ZmExZjhlY2I2NGMzNzMzNGMyMmM4YzI4M2U0NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcj0H3kJnQcGPQCNn0wx9QG90R4o
aGPcwtQsbYtxBd0g9Dugn2xdVsNStYTn99cKABtgcYAaZ7PaXRPJj4+6on85Ng1Z
ERhWvehDvRvESdwiS1OCB6FGygYKJew1HGsGeoJJdM5nRjJc5/nVHLc+au4ELA3D
oO3J9Opkq1DZtgaTEfBPKGyPewGSNwdnLVPwx3iOXyfjkaCOMypS89gqxFbv9IE7
fvDI25fbLnMy6ykhul1itYuBj4duhMviqHgq6lSLNE/VpXC7yGaqAhmL67k6Nmvo
15mpXhLo/TZ90A6OFy0e2DB+hhFGW4IQ7LMtCYDspJz/gABDLWnxk7qpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHZiSPk+h+Oy2TDczTCLIwoPkZiMB8GA1UdIwQY
MBaAFFAFXrw9HFLxeuZawpLr4JkxAJz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQt
Yzc4MTMyNGI3OTc5LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZTJhZTItOWIzZS00ZWI4LTgzZDQtYzc4MTMyNGI3OTc5
LzEvVUFWZXZEMGNVdkY2NWxyQ2t1dmdtVEVBblBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiy+pZed
1/vVct7Vt1Qpcxyq1yHZCnBe7XzeSjbC28efxzGRFMdO+kDK9yzshOOqtJeIUhQE
DAU+u4zK5qpPbVdaifPK39VA4UY6gugeY6FoaMNjd7G5a9kcMRz4+jkKhJ+HM3T9
ouCs9ARXboxp48e3p0b9l09QFNqgwaLbnA8kWpGcwluUK1KWuRH/87moguVY/6YX
dqiYX4R8VqDqVACybfWO6LEPReuDXYGNDd7gKNKXRw8Er3bBPs/FGssjlkCY0t1X
u640cv90BgPX9h3mjJ+zLV1kvshTskQzYKK+Q4hmOEUvGSE08CYJxtCiXYmng2QE
QbeRTJ76Ysmtlg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:51:22 2025 by rpki-client