Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File:                     uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier:          BrJRSI0mVxVAvAaIXoBV34I4XBGxMlBjucC32B0bp+M=
Subject key identifier:   97:3F:AF:66:86:E6:13:97:E5:71:DC:4A:00:A2:D8:83:EB:83:A8:84
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer:       /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial:       01963FF9A1B65BA898F6D0E2B21812B48C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 19:00:46 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:46 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:46 +0000
Files and hashes:         1: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: QslMSH3KW3ZM+od8r7y8g8+mfilgsu8Ak+0K3arlu4g=)
                          2: xDqVZVtr_9EDZVCNYlX0mCSaras.roa (hash: caUW0pjP9cTTEhVK0Pma740AnxF0QCHN6wxQ3vthDWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:a1:b6:5b:a8:98:f6:d0:e2:b2:18:12:b4:8c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
        Validity
            Not Before: Apr 16 19:00:46 2025 GMT
            Not After : Apr 17 19:00:46 2025 GMT
        Subject: CN=973faf6686e61397e571dc4a00a2d883eb83a884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:5d:d8:70:55:13:61:d6:92:bf:60:b3:89:
                    9f:da:6d:bc:e0:d8:13:d7:d3:eb:08:d8:76:61:74:
                    36:6d:d7:4a:03:dd:a2:bc:c7:81:48:4f:1a:10:5c:
                    90:a8:d0:4a:04:ae:68:60:c5:e3:32:43:de:f1:8f:
                    2e:4b:a9:d0:4a:e6:b4:a8:2a:29:9a:75:8b:40:9a:
                    b1:6e:c9:a0:77:a3:da:2d:fa:ea:8f:09:fe:21:90:
                    d4:3d:44:ca:a4:19:0b:42:ff:01:f7:98:fd:6d:1e:
                    f3:d8:d5:21:fe:0b:df:62:e9:f7:a2:01:dd:13:98:
                    d0:9e:9c:43:da:ac:df:b3:d9:2a:80:d5:d2:d4:af:
                    9c:e3:3b:de:74:88:88:ec:a6:70:51:40:46:23:ae:
                    5f:8b:8f:53:e9:18:68:b6:ba:51:92:bd:af:87:c2:
                    b0:a7:9c:38:87:e5:c3:1e:ef:15:bb:cb:2c:4e:71:
                    1b:e0:1c:04:13:9f:bc:65:27:95:dd:86:20:f2:ff:
                    95:f9:6e:13:ee:71:b9:b4:5a:e2:e9:d3:c4:9a:fe:
                    e1:e5:93:41:be:31:40:11:2d:04:6c:aa:58:7c:43:
                    11:21:63:ea:4e:05:3f:df:83:98:0f:b1:93:77:89:
                    b7:00:e6:14:86:43:10:97:e0:68:8e:cf:9e:c3:f5:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3F:AF:66:86:E6:13:97:E5:71:DC:4A:00:A2:D8:83:EB:83:A8:84
            X509v3 Authority Key Identifier:
                keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:80:6a:e8:3c:11:38:e2:3a:58:6f:7b:9d:4c:99:42:99:8a:
         c5:a1:63:b2:68:62:f3:c4:4a:20:6e:18:89:3e:08:20:9a:e2:
         64:8d:11:ca:05:4b:cf:90:17:9e:ef:7b:58:8e:86:15:a4:88:
         77:fe:84:96:f5:fb:d3:33:9c:43:1d:37:7c:78:69:6d:78:82:
         87:a8:74:9a:20:a1:e4:76:7b:71:1e:2a:ed:78:ac:67:01:ea:
         04:d4:03:52:a5:7a:4f:97:88:2b:58:21:ca:53:9e:e2:84:c6:
         2f:44:f9:bf:c7:1d:94:18:5f:c1:03:6f:6b:cb:07:de:45:d6:
         56:2e:f7:06:b6:88:07:bf:66:06:11:df:24:99:58:f2:7d:1e:
         97:45:8f:d9:36:92:55:7b:23:4c:1e:84:97:e1:13:cb:ec:1b:
         c6:40:2a:cc:03:fa:a7:dd:99:87:61:e1:0e:d3:85:a5:2c:c8:
         d5:64:4c:92:4e:c9:c8:7f:98:97:8c:64:31:76:32:ac:d6:65:
         e4:c4:21:13:62:64:bf:a8:77:d9:7b:f0:f6:62:d2:33:a3:70:
         16:8b:9f:6b:b1:01:0c:02:9f:d9:cb:1d:83:3a:79:f2:bf:3d:
         71:a2:4d:97:3b:8a:26:f0:6a:be:e1:fe:a1:ee:fd:a9:b7:21:
         28:c6:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:18:56 2025 by rpki-client