Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          y1cGN6u4csomY41CgDhHNvh/Nlj/QPRkXqgqjLXxzPk=
Subject key identifier:   00:93:9B:10:9E:41:D1:80:EA:97:C1:BC:59:A6:56:DE:22:EC:05:EB
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       01961133345563436EFDE717E31466ECE9FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          06E6
Signing time:             Mon 07 Apr 2025 17:01:30 +0000
Manifest this update:     Mon 07 Apr 2025 17:01:30 +0000
Manifest next update:     Tue 08 Apr 2025 17:01:30 +0000
Files and hashes:         1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: Wj5EpsE5bMitf1BdaAxxpRWgi8i+ZLNwYngfjZlRsxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:33:34:55:63:43:6e:fd:e7:17:e3:14:66:ec:e9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: Apr  7 17:01:30 2025 GMT
            Not After : Apr  8 17:01:30 2025 GMT
        Subject: CN=00939b109e41d180ea97c1bc59a656de22ec05eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:7a:0d:b5:ed:bc:c6:a1:a5:42:cf:77:92:
                    45:cc:6c:e4:96:f6:67:90:94:ab:f7:66:e8:e9:79:
                    41:70:91:fe:36:51:be:00:4d:b6:0c:d6:ac:03:7b:
                    1b:a1:9f:b7:c7:ee:5c:36:99:41:f5:35:90:5a:cb:
                    95:ca:dc:2e:f3:57:b6:7f:80:7a:fc:33:58:51:f5:
                    65:de:3c:f7:f9:81:57:4b:14:43:6e:64:9a:fd:57:
                    1d:b4:78:73:58:64:0f:11:ef:ed:a0:a2:99:44:be:
                    b4:d5:88:3c:8d:10:47:a5:3c:cd:d5:79:6a:eb:9a:
                    4b:a4:0e:57:d5:58:71:f9:6f:a5:9a:4a:6d:6d:41:
                    27:30:3d:f6:2c:ed:78:c9:eb:7b:39:77:ec:48:a3:
                    e1:25:52:22:06:7c:9b:c3:34:ce:e4:4d:20:38:50:
                    44:6a:d9:3b:03:1d:c7:95:7a:f2:31:fc:16:fb:9f:
                    91:ba:a2:74:e5:3e:06:1e:b1:8b:af:90:50:60:d2:
                    ef:b7:d2:df:d6:cd:c7:9e:74:72:bf:95:3e:7b:ca:
                    9f:c6:6f:f3:b3:fb:9d:06:0c:40:c3:4b:b9:10:5c:
                    37:c0:ac:79:99:b4:3c:62:ca:7f:71:4d:2d:f4:c5:
                    9a:21:49:df:c4:4b:d6:3b:c4:93:99:08:f6:98:a4:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:9B:10:9E:41:D1:80:EA:97:C1:BC:59:A6:56:DE:22:EC:05:EB
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:86:09:13:2e:8d:7c:31:4b:82:9c:0d:1a:ed:90:9c:ba:
         a5:de:26:6b:e8:c2:e3:8f:8c:8d:77:61:4f:29:99:7d:fc:cc:
         2c:f4:19:da:69:ca:87:17:d9:34:63:20:a0:d1:ef:8f:79:28:
         e3:36:3f:c3:c5:71:d2:39:5b:c5:92:28:ce:c2:6b:8b:bd:99:
         9a:0f:e7:5f:a8:46:84:a6:89:b4:a7:57:7c:8d:9b:3c:59:94:
         80:55:65:c3:ec:ec:e1:c5:d6:c0:c5:07:fa:cd:f6:55:02:f3:
         5e:0e:fb:89:92:47:de:aa:e0:74:e7:64:9f:4c:1e:48:71:f0:
         cb:f2:61:e5:5e:f8:45:37:14:2b:fd:f0:3f:d7:9f:7c:98:25:
         e1:9e:bb:9a:80:19:6f:19:26:e6:55:7a:f5:f7:a7:42:34:3d:
         57:a9:d7:60:0b:9c:5d:6c:a4:d1:02:a4:b0:11:5a:f2:8a:a9:
         ed:82:e5:76:08:08:a1:a4:f3:55:0f:f3:a5:69:cc:c9:6e:fa:
         3c:af:76:12:f5:19:b0:43:ee:01:0c:85:04:52:cd:07:3a:2b:
         b7:8e:54:cf:a1:f2:b5:9b:78:76:87:42:55:96:af:62:f8:3a:
         95:10:18:b4:37:98:d6:34:ce:81:3b:c5:34:af:0d:58:cd:c4:
         58:e6:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:55 2025 by rpki-client