Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File:                     UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier:          9qLEhZXwB9L5ep7OtDJINuKIiBahwRbe6znkfG76wu4=
Subject key identifier:   C0:F1:59:94:23:3B:E1:56:1D:3C:57:8B:26:28:0A:F8:5C:8E:B5:00
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer:       /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial:       01958CCE0ABCC9D144BA6450D44DE6583E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number:          0624
Signing time:             Thu 13 Mar 2025 00:01:07 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:07 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:07 +0000
Files and hashes:         1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
                          2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: jL2rmWQK34qoDs/S9fZF/2+FK9MgRb6KxrFyLEXPEv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:0a:bc:c9:d1:44:ba:64:50:d4:4d:e6:58:3e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
        Validity
            Not Before: Mar 13 00:01:07 2025 GMT
            Not After : Mar 14 00:01:07 2025 GMT
        Subject: CN=c0f15994233be1561d3c578b26280af85c8eb500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:db:09:15:af:2b:90:0c:e6:e9:3d:82:b6:
                    9f:ea:66:0f:e2:df:f4:ac:d1:dd:6a:63:e3:59:85:
                    8a:9c:01:a3:63:19:61:9b:7f:04:52:b4:11:3e:3a:
                    4f:13:e0:28:3d:5c:0f:2f:e0:01:5b:3c:43:59:10:
                    96:81:6a:ea:b5:69:41:64:d9:cb:6e:33:b6:ba:39:
                    e6:7f:c3:2e:61:47:f0:fc:05:5e:8f:42:64:ba:a0:
                    5f:de:5b:3e:30:7d:23:65:31:e3:27:20:4c:d8:98:
                    f4:22:a8:7c:ee:86:55:db:59:f8:97:b0:c4:75:5b:
                    6a:de:26:35:70:bf:21:e0:34:cd:8d:98:15:3d:76:
                    81:2d:69:36:0a:ac:b2:12:46:cc:96:98:41:a8:36:
                    38:80:f6:2c:29:2c:f6:4b:c5:a0:c9:de:69:bf:28:
                    60:b5:f1:6a:8a:c0:6d:31:e9:37:3e:d8:9a:d1:c7:
                    9b:56:79:97:7c:1d:77:24:6a:8b:1c:61:77:dc:9c:
                    07:51:0b:c1:5b:ff:6d:5f:9b:ff:2e:d1:d6:82:6e:
                    09:a5:ab:65:e3:8d:79:7d:03:d1:50:96:33:92:26:
                    23:ad:b1:61:01:a3:d0:d7:1d:65:83:ba:d0:5d:28:
                    be:7d:9b:1b:3f:3f:70:0d:fd:de:65:25:3f:4b:bc:
                    4f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:59:94:23:3B:E1:56:1D:3C:57:8B:26:28:0A:F8:5C:8E:B5:00
            X509v3 Authority Key Identifier:
                keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ea:e9:a4:f3:80:c8:0b:ea:90:78:7e:45:ae:4f:b8:2d:68:
         f4:85:af:51:07:82:de:68:ca:e5:9c:70:d4:b0:80:eb:05:ff:
         cc:62:36:6e:38:25:80:9f:3f:e1:cb:f0:46:fb:1d:1b:fd:77:
         61:03:b9:d4:2c:3a:1e:8b:26:1e:36:c4:6b:91:96:7e:6e:bf:
         53:8b:a6:16:b0:f1:6b:a8:da:c0:4d:5b:a2:14:1c:3e:de:9a:
         76:54:c4:5b:63:ec:82:3a:ab:0d:24:35:be:41:63:f7:38:d3:
         53:8c:f4:bd:6b:fe:73:08:e4:53:7b:af:1c:a1:fe:fd:5d:a9:
         d6:a6:fd:ed:6a:a5:b7:e9:46:8b:14:1f:fa:fd:dd:10:a3:db:
         12:cc:5a:45:42:56:d0:1c:c9:a2:90:81:47:87:fb:43:3b:71:
         81:14:45:5b:e5:6a:b1:1e:e7:54:85:ec:55:2b:04:34:af:5f:
         8b:14:4c:b9:71:75:05:27:14:ca:2b:a2:60:6f:df:74:fe:64:
         94:e7:60:95:9a:8b:f4:37:1c:83:ad:ed:0d:b1:55:e2:59:dd:
         27:b1:0c:a1:cf:9f:c9:cc:fc:c0:da:8f:ef:a2:93:41:e5:4b:
         69:32:79:5d:74:13:ee:bc:17:60:5b:53:ba:6c:56:89:43:61:
         45:0f:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:28 2025 by rpki-client