Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File:                     UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier:          Y2nT3j/4MQkDUzzqlsPA5iYl/7+NEg2fBBw9PP0nN1Q=
Subject key identifier:   A8:39:B9:15:60:30:EB:16:04:91:2F:52:29:B2:54:EE:CD:E3:A1:5B
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer:       /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial:       0197C94BB04351ABE97EF39E4FC7D6980BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number:          0178
Signing time:             Wed 02 Jul 2025 04:01:10 +0000
Manifest this update:     Wed 02 Jul 2025 04:01:10 +0000
Manifest next update:     Thu 03 Jul 2025 04:01:10 +0000
Files and hashes:         1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: Xyl5yxDBbXpx7m9G44BbozSdA5sEuqbzScm2IGV/iLs=)
                          2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:b0:43:51:ab:e9:7e:f3:9e:4f:c7:d6:98:0b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
        Validity
            Not Before: Jul  2 04:01:10 2025 GMT
            Not After : Jul  3 04:01:10 2025 GMT
        Subject: CN=a839b9156030eb1604912f5229b254eecde3a15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:2a:39:43:d9:ab:43:b4:f5:f7:25:b5:a4:
                    3b:a0:d2:44:d4:d5:03:b8:23:56:1b:73:6a:80:0c:
                    a1:92:61:6a:5f:a6:a8:98:f2:42:73:8d:31:2a:2a:
                    fd:7b:f5:74:0e:eb:2a:1b:59:db:02:8f:e1:33:42:
                    5c:37:e5:3a:49:17:c6:9f:fa:3a:ff:18:42:7b:63:
                    88:77:6f:6a:62:7e:3b:93:05:fe:d8:8c:1f:64:21:
                    f2:08:b9:67:12:48:55:ce:30:b2:cc:21:83:58:37:
                    04:7b:33:98:c7:c4:ae:8a:a2:04:54:a3:35:f4:5e:
                    1b:4c:19:ed:41:24:29:71:34:3f:3e:78:9c:5c:d8:
                    6c:9b:2a:00:f1:41:6d:8e:67:ab:46:11:26:8b:5a:
                    b7:0e:a9:a2:6f:64:49:01:b2:f7:81:ed:4f:ff:61:
                    03:bf:47:7a:04:6d:32:a4:ee:f3:78:66:ee:aa:31:
                    b9:ad:5a:1a:3a:b8:29:4a:de:d6:90:8c:7b:23:8a:
                    fe:09:55:1f:c1:29:96:d5:bc:ed:24:e5:4c:67:16:
                    69:a4:a6:b6:80:ce:2c:37:1f:a5:0e:b1:71:cc:ff:
                    6d:ae:f4:46:0b:73:6a:b4:ea:1a:38:97:9e:4b:e8:
                    dc:8f:fb:80:e2:1b:6d:ae:ba:49:ca:cb:14:02:b5:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:B9:15:60:30:EB:16:04:91:2F:52:29:B2:54:EE:CD:E3:A1:5B
            X509v3 Authority Key Identifier:
                keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:30:7a:c1:7b:d0:d8:76:a5:80:e1:da:1d:85:57:ad:3c:
         a7:b8:86:f4:8d:75:e3:67:fa:f2:88:05:76:75:90:a8:16:0a:
         02:91:69:d7:9d:7b:ff:c3:a0:af:da:7d:08:59:e9:36:30:bb:
         54:ad:f4:25:78:94:00:0c:f5:7a:fb:91:a5:70:97:2c:f3:6d:
         0d:71:5a:13:8b:2a:b5:4d:35:d9:20:ba:04:5b:dd:70:8f:8f:
         ec:2f:f1:c2:22:99:6b:92:59:19:64:e6:ea:e1:e5:86:c7:54:
         cb:6c:42:61:25:df:4a:27:38:15:27:c8:6d:74:08:5f:6f:46:
         c3:36:db:60:9b:93:84:ea:c9:c8:dc:84:b6:bd:8f:8b:5b:45:
         e8:13:2e:5e:43:7b:61:27:54:7e:76:de:53:1d:41:6b:2a:f3:
         f1:04:6c:1e:ca:1b:b6:22:a0:73:9a:f7:a0:40:8d:00:d0:5b:
         78:53:7b:d8:15:02:ec:43:b4:3a:17:0f:03:70:c9:75:2d:75:
         58:fe:60:a0:28:2b:9d:c8:16:02:ba:de:71:28:1e:c7:c0:a8:
         41:bb:b3:19:da:fe:4d:de:c7:7c:d2:e0:2c:e0:9c:51:9f:69:
         fe:15:3d:96:46:6e:8c:e3:c5:6d:9a:3b:c6:97:72:bf:6a:c3:
         64:01:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:13:04 2025 by rpki-client