Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File:                     UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier:          rYApHdoVqUpt/u7NjuN1W9G1eKasyk5flXCU9ObuLNA=
Subject key identifier:   A5:5F:F6:13:7B:AE:7B:B6:F4:79:C3:C6:87:EF:71:37:52:AE:B5:3C
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer:       /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial:       0196575CC4F23352FA03244B50E6A1C6D4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number:          14FF
Signing time:             Mon 21 Apr 2025 08:00:19 +0000
Manifest this update:     Mon 21 Apr 2025 08:00:19 +0000
Manifest next update:     Tue 22 Apr 2025 08:00:19 +0000
Files and hashes:         1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: px0TjhdhrNgIAx3u3dmCEUETj9ED1anh/5KoPr5weAs=)
                          2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:5c:c4:f2:33:52:fa:03:24:4b:50:e6:a1:c6:d4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
        Validity
            Not Before: Apr 21 08:00:19 2025 GMT
            Not After : Apr 22 08:00:19 2025 GMT
        Subject: CN=a55ff6137bae7bb6f479c3c687ef713752aeb53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:84:2b:72:a5:2e:fc:ee:f6:d0:56:b7:40:
                    df:94:56:c2:f7:a6:47:0e:37:1c:b6:24:42:a6:aa:
                    2f:0e:e0:fe:e5:6e:d3:da:66:9b:9d:98:cb:2a:62:
                    3c:46:a5:2e:fd:7f:b2:a1:dd:62:59:21:76:85:c8:
                    e4:60:4f:63:2e:ed:fe:64:55:28:ad:a2:7f:67:16:
                    81:7d:7f:ed:e3:ab:14:5e:fa:f7:78:57:20:28:31:
                    cf:31:74:f6:bd:0b:6e:69:30:57:4e:fd:81:25:7f:
                    ed:26:af:05:e3:dd:f5:88:a1:a7:c2:47:10:79:4e:
                    48:40:e1:96:4b:8f:d2:b4:6e:36:4d:6f:87:6d:2b:
                    53:4c:92:af:4f:c8:55:dc:1b:0f:97:81:3b:65:7b:
                    92:8a:be:fb:e7:97:cd:5a:cd:d6:e9:98:f4:ca:c8:
                    5d:1b:7f:38:32:b5:eb:6f:62:cf:82:d8:9d:ef:38:
                    d4:9f:61:a9:f5:22:7d:3d:34:45:f5:54:16:48:91:
                    c0:ca:72:93:b4:13:a9:7f:57:0b:a8:6b:86:36:ac:
                    3d:85:21:d7:ce:d7:51:f3:36:c4:a1:6e:74:51:47:
                    c2:c7:ac:8d:a0:7f:65:f6:58:82:ef:f2:cc:2c:b6:
                    ac:31:c1:68:9d:f7:08:02:ed:d6:ac:0b:a0:45:52:
                    c3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:F6:13:7B:AE:7B:B6:F4:79:C3:C6:87:EF:71:37:52:AE:B5:3C
            X509v3 Authority Key Identifier:
                keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:82:4c:b9:d5:b2:f3:62:44:c7:46:0b:80:94:f0:44:da:c5:
         9d:fd:e7:f7:1f:e7:6e:93:16:f7:0b:96:fb:84:d8:b6:46:17:
         6d:b4:d2:f4:84:bc:3f:01:85:89:04:45:b2:d7:0b:35:c2:c5:
         3c:8d:00:c5:61:a0:82:90:1c:4c:05:3a:ea:f3:e7:91:0e:d2:
         6b:f9:ca:b3:63:b6:30:f0:c4:3c:23:4d:cf:70:ba:16:88:05:
         0f:a7:a3:52:e1:5a:e7:47:11:bb:45:a0:26:1a:c6:d7:35:08:
         b4:e2:bb:22:66:f8:e5:7d:0b:05:f5:82:71:35:b0:42:51:e4:
         8d:bb:78:3b:2c:fd:b2:8e:98:31:9f:f2:d2:71:d8:94:0b:38:
         52:5e:0e:82:fd:73:be:59:c4:66:92:db:fa:01:1b:21:7e:c0:
         ce:c1:34:76:35:a3:26:d0:da:74:b7:f5:59:16:17:98:9b:66:
         40:68:9d:fe:da:7f:66:68:fd:32:bd:70:0a:cf:d4:af:cb:df:
         1d:a1:e4:19:8d:d3:4c:66:33:0c:dc:c8:1e:01:98:c5:32:b3:
         a3:4a:ca:45:da:d7:38:d5:f1:cb:b7:ba:40:b5:a3:38:52:97:
         67:4e:a2:01:ce:ee:7b:42:dd:31:fd:ae:ff:93:1b:6c:34:ed:
         e1:c4:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:02:30 2025 by rpki-client