Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File:                     UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier:          HPLqv1g46CfK3J+Dl8wbd1JjYy8H0SKxS7bqodhRv6U=
Subject key identifier:   17:EC:89:25:3E:AC:AB:1A:5D:52:63:04:4E:D2:EC:3B:04:7F:C6:E4
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer:       /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial:       01962D18A081489D715B8109CC7419A7182A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 03:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 03:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 03:01:50 +0000
Files and hashes:         1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
                          2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: YoIrFUmiAUjG5XGuyq7cHW1CFMP16x3av3H4hhfOKBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:18:a0:81:48:9d:71:5b:81:09:cc:74:19:a7:18:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
        Validity
            Not Before: Apr 13 03:01:50 2025 GMT
            Not After : Apr 14 03:01:50 2025 GMT
        Subject: CN=17ec89253eacab1a5d5263044ed2ec3b047fc6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:31:49:fe:81:bf:d5:2f:d1:2f:69:fb:85:
                    3b:62:85:9d:0e:94:ed:b9:86:bd:ba:b2:12:ee:f2:
                    74:d5:51:ff:9d:2d:5b:32:06:ea:82:8c:4a:0e:c9:
                    e3:fa:89:13:e4:06:e5:4b:25:b6:84:2f:f4:af:c3:
                    d2:46:9d:36:fe:b0:24:94:09:4c:c1:54:c1:c6:d9:
                    42:71:a2:b4:d2:52:9a:2b:b0:73:4e:4a:4c:55:74:
                    7a:3d:d6:81:10:0b:cc:a2:cd:85:84:fd:2d:d4:14:
                    64:12:88:77:52:87:8e:a8:1c:76:27:e3:59:03:1e:
                    0c:a9:b5:a6:9b:e5:f2:a8:6b:21:ec:02:71:97:f1:
                    b4:62:5f:d6:48:76:9d:ae:1a:9b:d1:24:be:38:e2:
                    5f:fd:71:f8:96:75:ec:30:ef:73:2a:17:78:a6:05:
                    04:cd:3e:54:28:9e:aa:b2:81:3b:84:af:bd:66:09:
                    6c:d2:70:d6:be:54:bc:36:d0:20:60:20:19:2b:12:
                    5a:26:ab:1f:6a:c3:bd:11:06:22:a6:54:10:06:84:
                    ad:a1:d6:95:49:79:9a:cc:92:b6:d3:32:07:0b:b2:
                    46:91:ba:43:0a:a5:ca:34:d6:bb:a3:aa:1b:c0:04:
                    23:f4:49:ae:84:8c:7f:ae:04:04:08:d0:c2:5c:4f:
                    0f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:89:25:3E:AC:AB:1A:5D:52:63:04:4E:D2:EC:3B:04:7F:C6:E4
            X509v3 Authority Key Identifier:
                keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:9c:ae:71:fa:67:06:14:57:f2:67:b2:e6:36:df:89:92:
         04:73:cf:9b:ac:7f:a5:39:1f:b8:b8:29:8d:33:fc:2e:e8:e0:
         9d:70:f2:33:c0:84:e3:e1:f5:cb:c1:67:45:84:e4:90:3c:68:
         e2:d7:c5:20:f8:d9:7e:7e:b8:70:39:51:35:29:f2:9a:0f:1c:
         7d:70:12:23:1f:24:47:d1:b9:6a:19:10:92:cc:4c:76:8f:9e:
         e9:12:80:00:c4:b5:ff:01:c3:f7:1b:11:4c:2d:f3:31:32:f4:
         58:54:a3:c3:d1:f9:db:c6:96:45:75:c4:33:ae:24:d7:e8:c5:
         4d:fc:6c:71:c9:1a:73:c6:62:a6:0c:da:f4:13:db:8b:f0:7b:
         c3:99:ed:d4:bd:04:a8:1a:90:4d:93:fe:81:dd:32:31:f1:42:
         3c:b0:df:02:fb:fe:cc:ee:71:45:24:77:b9:25:d2:05:ef:12:
         a0:fa:97:78:4b:3d:6c:e8:49:ec:f5:c2:45:e4:cf:73:c9:3b:
         10:27:b5:82:b8:bc:05:3c:d3:8e:e6:17:76:29:96:8c:9b:c3:
         3e:30:d2:ae:17:ba:a7:64:4b:0a:80:cb:a2:39:59:6d:29:00:
         9c:f5:1e:47:b6:7d:cf:d9:40:02:15:66:6c:50:01:42:57:50:
         ec:75:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:49:37 2025 by rpki-client