Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
File:                     uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft (raw, json)
Hash identifier:          FWIQA+rAQNyUEui2j9RLgiXt3/pxQBg8sy5Z04wH+yk=
Subject key identifier:   D4:3E:E7:9C:00:50:87:D1:3E:E6:BC:A7:D2:F5:5B:ED:BC:B5:4C:AC
Authority key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27
Certificate issuer:       /CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
Certificate serial:       01964FA3A262895174216DBC6F07A90C2229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
Manifest number:          0455
Signing time:             Sat 19 Apr 2025 20:00:46 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:46 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:46 +0000
Files and hashes:         1: uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl (hash: LLK2B8F63Jd8i8Rk89Pdlk0EosnNVMexkmnbQWo9wMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:a2:62:89:51:74:21:6d:bc:6f:07:a9:0c:22:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
        Validity
            Not Before: Apr 19 20:00:46 2025 GMT
            Not After : Apr 20 20:00:46 2025 GMT
        Subject: CN=d43ee79c005087d13ee6bca7d2f55bedbcb54cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:1c:33:05:a4:f9:9f:67:ed:73:e4:87:89:
                    d9:65:b5:ee:a0:4b:79:53:b0:70:b2:a7:23:22:aa:
                    7a:2f:7d:66:9e:a5:98:0b:a2:ba:44:67:6b:8e:25:
                    1e:89:bb:5e:17:44:3c:71:f5:39:56:b1:d4:3f:e5:
                    77:59:d3:15:22:d3:e1:eb:a9:18:12:99:b3:10:3b:
                    63:94:f8:72:b1:d4:41:c8:7e:05:98:c2:d9:f8:4e:
                    40:c9:2c:12:65:94:cf:85:7f:a0:e8:ff:bd:1b:0a:
                    c6:1a:66:af:25:f3:de:ca:a7:73:eb:c0:71:fb:3d:
                    c1:13:d4:49:f3:14:2b:13:46:4c:2e:0d:31:8d:4c:
                    38:19:b8:e8:03:82:b7:ce:f6:56:58:77:71:f5:7f:
                    9e:9e:bb:c0:21:02:55:84:4e:ce:74:06:0c:a5:32:
                    09:5d:e3:36:18:d0:37:45:aa:6b:80:25:a1:9b:3b:
                    bc:d9:ae:59:32:82:69:c5:3d:72:00:9a:27:84:a5:
                    7d:fd:96:95:72:6d:2b:9e:f6:b1:f7:0f:60:2b:96:
                    3d:2f:3d:60:80:77:a0:41:cc:a1:72:57:1c:03:0c:
                    90:53:2f:a9:0b:b8:9d:51:b7:b6:11:c4:2a:37:3c:
                    59:17:68:c1:33:33:ba:80:7b:c9:d6:a6:cf:a7:e7:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:E7:9C:00:50:87:D1:3E:E6:BC:A7:D2:F5:5B:ED:BC:B5:4C:AC
            X509v3 Authority Key Identifier:
                keyid:B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:f0:c1:b9:19:e8:85:d0:ef:fa:e5:35:0b:a8:61:84:13:
         de:16:ef:69:a8:d1:54:2a:fa:c7:89:63:83:5b:d5:38:f5:e8:
         0d:96:45:73:f6:49:71:e7:5a:9e:91:30:6c:bf:9b:6c:b9:f0:
         a4:e4:cf:df:5c:ab:76:18:ad:84:61:5e:a8:d1:c6:47:55:73:
         c7:1f:04:ac:8b:ec:ed:40:4d:4d:e9:81:a3:ea:ee:4a:55:04:
         69:35:68:d7:e8:db:a9:84:bd:5c:29:0c:ef:ea:d3:1f:dc:65:
         c9:d1:9e:44:62:dc:0a:45:83:36:09:70:90:62:d0:e2:c5:f1:
         2a:1e:9c:db:37:84:66:1a:ec:d1:a0:21:54:45:ef:83:d7:bd:
         39:22:aa:b0:37:ae:fd:69:06:24:63:66:20:1d:78:8c:c1:9a:
         e9:b2:2e:9d:c0:f3:d7:5e:b4:44:0e:9d:44:27:96:af:9f:6d:
         e6:b0:75:54:b9:e7:41:65:1c:58:3b:d0:5f:3c:8b:d3:f2:f6:
         04:b8:c7:af:7e:a6:75:3f:88:71:1e:5b:47:23:5f:ef:b3:5c:
         f0:bd:c6:87:c0:14:58:e9:18:22:f7:0e:bb:b9:3d:7c:15:60:
         e9:d2:5e:ba:6b:a9:fb:24:e9:ef:99:43:7d:26:33:eb:1d:b0:
         02:9a:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:07 2025 by rpki-client