Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          79fl28KJSiv7YRJHkruJkT2nfUU0rUvEmNfei/DjFTk=
Subject key identifier:   9B:51:C8:3A:97:1B:23:95:47:EC:CE:BE:1E:F2:F7:47:4A:5A:87:0F
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       01964E910A04095419A45D8B3EC9161F8C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 15:00:50 +0000
Manifest this update:     Sat 19 Apr 2025 15:00:50 +0000
Manifest next update:     Sun 20 Apr 2025 15:00:50 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: 2cVg+e2zsn1BymYuOVucQPGtVv8GzT0PUTEt8Kejktc=)
                          2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:91:0a:04:09:54:19:a4:5d:8b:3e:c9:16:1f:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Apr 19 15:00:50 2025 GMT
            Not After : Apr 20 15:00:50 2025 GMT
        Subject: CN=9b51c83a971b239547eccebe1ef2f7474a5a870f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:3f:90:45:3d:b5:b7:66:61:61:64:55:5c:
                    90:28:24:34:42:c3:1c:99:74:1e:06:af:3c:0d:4b:
                    8a:7f:58:a3:18:28:36:9d:b9:f0:83:c4:80:e7:90:
                    86:9f:ae:41:79:e1:34:e7:09:db:77:57:be:2e:3e:
                    a6:5d:45:38:c4:69:08:e7:23:9b:59:59:72:58:6c:
                    f9:98:56:3e:a0:40:68:e3:31:09:3a:45:cd:0c:48:
                    9d:8d:8f:53:26:9c:92:52:b0:41:cf:f4:9b:f8:df:
                    c8:d6:61:2b:71:de:d3:c7:6e:19:6b:4c:d0:c4:5c:
                    6f:26:8a:d1:29:00:c7:26:cc:a7:75:a5:da:22:2b:
                    b8:e1:65:af:4f:85:1c:1d:8a:8b:02:57:3d:62:04:
                    c0:8b:81:95:73:e2:8e:11:f3:9a:83:5b:72:76:d1:
                    2f:d7:91:fd:4a:e3:c2:ed:b5:43:5d:f9:02:eb:03:
                    63:19:d8:68:3d:45:78:64:a2:bf:52:eb:f9:d5:c3:
                    fb:1b:80:ce:b4:fe:40:c3:52:56:a0:08:b5:ca:37:
                    6c:cf:ae:b0:c0:81:82:69:36:ee:a8:d7:93:d3:bc:
                    da:75:f9:c3:8a:13:dd:ae:15:36:b4:86:29:48:ea:
                    aa:2c:98:e2:ff:87:c6:9e:d6:19:03:0f:98:22:84:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:51:C8:3A:97:1B:23:95:47:EC:CE:BE:1E:F2:F7:47:4A:5A:87:0F
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:58:dd:88:13:58:76:bd:65:99:4a:a2:c3:44:b7:7a:f6:93:
         65:5d:8b:00:0b:68:40:e1:7b:0c:80:5b:a3:33:2a:2a:9c:96:
         22:fd:43:2a:7c:07:7f:bd:4a:66:10:49:93:3b:a7:49:ce:f8:
         d5:51:b2:4a:33:25:2d:61:32:69:79:dc:c9:6f:0e:75:8e:56:
         22:a1:23:ab:43:bd:aa:55:62:fc:e1:bd:0a:63:f3:80:ab:0a:
         04:3b:95:fd:bb:a6:13:07:0f:8e:d3:58:de:c9:26:70:da:20:
         f3:6e:05:3c:bc:27:b5:7b:be:7d:46:11:c1:c0:1c:c4:15:8b:
         e5:3b:c2:a8:aa:e9:38:de:b3:ab:81:3e:c7:a9:d3:80:ce:1e:
         16:79:0c:d1:87:3e:9b:71:5e:4d:5f:80:c6:97:f1:13:6d:56:
         5b:da:79:ab:3c:26:b4:ab:57:8b:18:25:07:56:55:50:0d:d6:
         de:0c:53:fb:5f:58:b7:28:aa:28:c2:eb:99:ab:b0:53:eb:f2:
         10:31:9b:3e:28:e7:18:34:c3:38:ca:7f:20:3a:19:ac:8d:51:
         60:0f:a8:d2:80:de:1e:94:c4:5e:42:de:40:f1:25:13:ab:60:
         31:93:2b:4e:ce:48:1d:b3:94:ef:34:bb:c7:5c:77:06:23:f9:
         36:c9:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:57:21 2025 by rpki-client