Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File:                     Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier:          kZFj0d8yrYPQJkZh+OhkLaLx7N+YZFMiLYWwpT5Ylbk=
Subject key identifier:   C8:BF:95:2F:1F:C5:F4:0B:35:06:50:A9:DE:54:B9:65:7F:9C:6B:0D
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer:       /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial:       01964669E4165A37541BE4C4B011756AE77B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number:          14F7
Signing time:             Fri 18 Apr 2025 01:01:06 +0000
Manifest this update:     Fri 18 Apr 2025 01:01:06 +0000
Manifest next update:     Sat 19 Apr 2025 01:01:06 +0000
Files and hashes:         1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: u6vL7ytAMwNlfVg+Q/VOW+rP+SfS/M8eO/MPLhIyNp4=)
                          2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:e4:16:5a:37:54:1b:e4:c4:b0:11:75:6a:e7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
        Validity
            Not Before: Apr 18 01:01:06 2025 GMT
            Not After : Apr 19 01:01:06 2025 GMT
        Subject: CN=c8bf952f1fc5f40b350650a9de54b9657f9c6b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:0f:aa:e8:44:17:77:97:1b:c8:d2:f3:eb:
                    88:01:8a:ed:8c:73:81:63:04:44:17:0a:5e:3b:0b:
                    d8:05:8f:be:e5:74:37:da:c5:38:cb:ad:db:b5:72:
                    6e:ef:2f:a7:ed:53:82:7a:7d:3a:53:f5:6f:53:4e:
                    c5:03:cb:55:5a:fc:d8:ca:af:c9:77:3e:fa:a5:1d:
                    e4:28:09:61:5c:06:2a:6c:bd:9a:1d:66:aa:5f:3b:
                    ae:c7:64:ba:5b:39:1a:d5:d3:96:86:ec:de:4e:cf:
                    b1:5e:ad:ce:b1:d3:d0:74:8b:ab:04:1e:44:c6:91:
                    4c:b9:a4:4f:f3:77:26:70:50:ae:cc:d4:b0:05:41:
                    a3:59:58:fc:ce:b4:9c:89:4c:9e:67:51:ec:3a:e5:
                    29:21:38:d3:f7:26:55:7f:5c:5d:b7:b6:6d:fe:8f:
                    f3:53:fb:fa:a2:d0:7f:93:80:83:6f:4b:f7:df:b7:
                    71:ea:f4:66:16:0c:9b:cd:18:c5:b9:ab:ef:22:63:
                    69:a7:46:28:ab:c0:c4:af:f4:78:1a:4f:ed:d6:b8:
                    e7:41:83:4a:a5:08:0e:2b:89:6c:c8:d2:8d:65:f1:
                    e4:6e:b5:fb:a4:1d:96:de:aa:55:a0:b1:38:23:3d:
                    41:dd:67:42:fc:86:2b:37:38:12:33:91:42:b4:08:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:95:2F:1F:C5:F4:0B:35:06:50:A9:DE:54:B9:65:7F:9C:6B:0D
            X509v3 Authority Key Identifier:
                keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:10:b3:93:1e:55:6d:b5:6d:fa:b8:5e:02:41:59:21:46:
         85:8c:d4:7e:3c:15:a7:db:e6:48:00:17:8b:dc:f7:c2:54:17:
         f4:bc:d0:f5:f9:be:74:69:fd:f4:a6:12:5e:83:a0:9a:ef:f5:
         c4:52:32:c1:97:bb:7b:c2:99:11:24:cc:93:4b:32:66:0b:8c:
         d0:a6:d0:03:17:c8:1f:e1:50:23:0e:c9:db:4d:fe:1a:c2:c6:
         24:94:b9:c6:dd:2f:93:ff:c3:e1:44:2f:e0:f4:37:70:1a:eb:
         cd:76:27:01:73:8e:97:51:01:16:cb:61:70:f6:ec:9f:1a:94:
         85:64:df:9d:48:5e:cb:ee:16:8f:e3:9d:3e:40:a9:4a:c0:ae:
         bb:ea:d5:a0:62:0b:ab:2e:56:2f:89:21:e8:b1:d0:7b:cf:57:
         ad:4a:be:54:1e:44:08:5b:84:36:e9:bc:27:1c:19:d8:b4:b3:
         80:a8:e9:f0:6a:8d:8b:56:fa:fe:74:cf:a2:c0:e3:d1:a9:78:
         5a:92:a2:30:f2:9e:8f:5d:7a:74:34:a9:b3:0f:d7:8c:12:83:
         58:71:99:44:55:c5:63:60:09:cf:9c:49:99:ee:74:de:a1:70:
         84:76:96:ec:d0:31:9e:27:ca:db:63:43:cf:6f:35:94:44:f7:
         54:34:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:57:22 2025 by rpki-client