Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File:                     uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier:          SiKFd+fVWhJB+8mrjYSpbTko3KjDfZlkwbbKFN+FQAo=
Subject key identifier:   19:22:C8:9B:B8:04:1E:9C:A8:CC:8E:C8:75:89:C0:F0:1B:70:E4:87
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer:       /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial:       01962C05AF23023238B9800504FE17FE8946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number:          047B
Signing time:             Sat 12 Apr 2025 22:01:32 +0000
Manifest this update:     Sat 12 Apr 2025 22:01:32 +0000
Manifest next update:     Sun 13 Apr 2025 22:01:32 +0000
Files and hashes:         1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: ReVSPw3YFQpGZuapDVwr/zHZRLlK9IIgf51AnZTus9U=)
                          2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:05:af:23:02:32:38:b9:80:05:04:fe:17:fe:89:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
        Validity
            Not Before: Apr 12 22:01:32 2025 GMT
            Not After : Apr 13 22:01:32 2025 GMT
        Subject: CN=1922c89bb8041e9ca8cc8ec87589c0f01b70e487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:9c:21:6f:25:f8:24:b0:7e:9b:80:66:27:
                    5f:65:67:6a:a8:98:5c:16:f0:f6:e9:51:a5:51:5d:
                    40:74:58:d9:01:fc:5e:ed:8c:57:bf:dc:32:c2:ce:
                    e0:89:1e:d9:29:ba:ad:d4:ae:c0:ca:d3:eb:0c:42:
                    8c:ae:aa:1e:a6:ec:91:ad:e6:b7:3c:a1:51:53:62:
                    5f:31:09:fb:c8:3e:27:c7:05:63:72:61:85:ed:e8:
                    03:4b:b1:1d:c9:0d:d2:bd:88:73:98:57:c4:10:aa:
                    9a:28:21:a9:f2:5d:37:89:4f:96:06:80:8e:12:e6:
                    8f:ec:94:fc:65:5d:44:80:db:a2:8a:b2:be:3f:d5:
                    cc:34:b5:14:9b:83:2d:61:e4:bc:b8:4b:14:09:d1:
                    61:c9:07:95:b4:cf:a9:a8:dd:19:1e:1b:69:51:01:
                    ee:0d:00:2e:70:b6:a4:71:b7:35:f0:5f:28:a0:32:
                    93:9a:f4:2a:34:52:0d:d7:58:c9:d8:78:5e:16:06:
                    eb:ff:ce:bf:2a:19:5d:be:cf:8b:8f:ad:12:92:e2:
                    b6:9f:db:fb:0d:19:e3:87:5a:2b:27:41:bb:cc:00:
                    c6:c8:77:2d:db:c6:a3:ac:ac:b1:1e:a9:2a:cb:f9:
                    5c:60:06:b9:cb:c6:4d:ba:ce:e0:1f:77:27:21:fc:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:22:C8:9B:B8:04:1E:9C:A8:CC:8E:C8:75:89:C0:F0:1B:70:E4:87
            X509v3 Authority Key Identifier:
                keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:c6:c0:c9:b4:00:67:10:d5:30:41:70:43:ad:a1:3f:08:
         79:30:2b:23:28:eb:97:39:e5:0b:7f:9b:0a:d8:08:73:c9:62:
         9e:80:72:d2:2c:11:29:df:eb:2e:fa:7e:cc:1d:3e:98:b2:5b:
         31:dc:89:08:4e:bd:ef:42:bc:7c:ff:8a:83:a4:55:2e:1a:76:
         78:42:69:20:bb:4d:16:08:25:6f:c5:27:17:a8:26:cc:2d:19:
         a8:77:63:a4:bf:35:0f:08:25:73:ff:0f:1f:44:0a:60:36:c4:
         95:18:0a:1b:00:35:4f:bf:8a:03:2c:70:cc:a3:99:1e:90:37:
         41:9f:06:34:87:91:51:eb:3d:08:f9:c2:23:63:ab:f8:66:53:
         58:7f:16:ab:f9:7d:76:c4:9d:ab:48:e0:4c:f8:7f:cd:b4:55:
         e3:30:80:6b:5c:13:d0:55:22:a1:f8:91:a9:f6:b7:a5:dc:8d:
         c9:82:08:b6:f8:6f:a2:46:09:03:ae:a4:0b:16:26:29:c4:7b:
         fa:c1:4e:17:1c:dd:ef:91:73:98:4e:93:32:5f:76:fe:d8:2f:
         55:e0:40:b7:23:0b:c9:f2:51:a8:5b:a3:2c:c7:61:ac:0b:17:
         86:78:85:ce:bd:90:e6:b6:3c:ea:0b:b4:63:62:57:65:c9:ca:
         d3:5f:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:39 2025 by rpki-client