Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier:          GoWdR0PoVaLQCEg3qCkR1wZ3Xl7Kd0uJG654vK84BpM=
Subject key identifier:   F1:53:C7:2D:8C:4F:FC:87:C5:22:A5:AB:D2:12:65:CC:B7:FC:3E:7C
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer:       /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial:       01964F35917E2CB41E807E44BE120223F108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 18:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:32 +0000
Files and hashes:         1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=)
                          2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: bV44r6Y0eu6TsqKqKRZTAerZFG0+MOEclIqOFIKGyoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:91:7e:2c:b4:1e:80:7e:44:be:12:02:23:f1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Validity
            Not Before: Apr 19 18:00:32 2025 GMT
            Not After : Apr 20 18:00:32 2025 GMT
        Subject: CN=f153c72d8c4ffc87c522a5abd21265ccb7fc3e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:b4:1a:57:3a:37:ac:e2:ae:80:3d:54:32:
                    cf:de:a8:d0:e2:50:6e:9f:a2:71:c6:a6:9d:a2:21:
                    d0:ce:0e:2b:d2:3d:ba:db:27:a0:94:22:3c:ff:80:
                    a4:35:d4:d4:2d:ab:5c:02:d3:50:5c:48:41:e4:6c:
                    13:43:46:6b:07:61:c9:12:9c:12:9f:dd:19:9d:1a:
                    09:ab:c5:a1:9b:16:ad:0a:f8:c2:31:d5:69:09:61:
                    bf:88:4d:d6:bc:f4:5f:b3:eb:44:98:eb:bb:2f:a1:
                    2a:af:3e:25:8a:31:b7:8c:08:6c:ea:80:53:6c:dd:
                    13:f5:e8:e4:0f:9c:2f:a1:d7:7a:ac:20:c0:ee:63:
                    b4:40:15:58:d8:14:74:22:e0:cd:17:eb:a8:1d:fd:
                    7d:25:f8:4e:6b:09:5f:00:e6:bb:fe:c5:cf:96:75:
                    49:ba:0f:57:1b:db:82:d5:b4:be:6f:44:df:db:49:
                    bb:e1:f3:35:45:01:19:44:5a:72:9b:ea:20:aa:d4:
                    9f:d9:4f:5f:ac:c1:37:6f:b1:02:c2:8e:f8:99:27:
                    c3:33:4b:1d:a0:17:d6:c6:4c:60:e2:c0:b3:cc:ec:
                    9b:48:1f:0d:17:00:90:4f:82:85:43:28:12:a9:eb:
                    7d:3c:96:c8:a3:26:af:a1:7e:1e:39:e2:56:de:36:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:53:C7:2D:8C:4F:FC:87:C5:22:A5:AB:D2:12:65:CC:B7:FC:3E:7C
            X509v3 Authority Key Identifier:
                keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:79:77:64:08:cf:87:22:cc:7d:2c:e6:d5:ff:99:ab:4a:
         06:06:0b:84:c1:15:b1:a0:f3:ff:38:c5:b1:cd:46:6d:56:ad:
         e0:f0:8e:8a:07:3e:42:67:e5:ac:db:c7:8a:ef:e6:ef:1c:4a:
         f9:70:52:ee:fd:36:91:62:8a:24:05:3c:e7:22:56:fd:d6:0d:
         28:6b:d0:29:9f:3f:d4:c9:8f:05:37:36:e2:74:8d:3d:fb:43:
         3a:21:fe:8b:50:3e:fe:e2:0f:f9:3f:34:7b:9b:5e:ca:9d:71:
         40:f2:cb:b7:a0:c7:63:c0:4c:9b:7f:b4:aa:aa:b3:aa:4c:2e:
         08:42:b4:ea:d7:3a:dd:38:8f:7f:f7:0d:4b:17:bd:38:d9:1b:
         96:3d:8e:46:49:fe:0d:71:d9:a2:15:b5:ce:f2:7e:84:1a:f3:
         be:de:1e:59:79:da:41:84:31:e3:71:b0:76:45:bc:ba:0f:90:
         a0:b5:8e:87:2b:7e:4c:7e:3e:81:d0:c3:4f:ff:18:e3:45:75:
         b7:3d:67:f0:4e:3f:3b:7c:b1:ee:b4:7d:b4:e6:59:e0:42:08:
         e1:ba:7f:bf:a3:8c:e9:30:87:cc:52:5d:ae:a1:9f:7c:32:88:
         01:fb:d4:a3:1d:ea:15:65:c6:73:da:cf:cb:6a:08:dc:11:82:
         d0:62:88:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:28 2025 by rpki-client