Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          bwMRSe1BzxcltoJ5WOhB4f4eBPD75/2tEW5+wtsx2Co=
Subject key identifier:   A1:16:56:36:8A:16:DF:53:BC:8E:68:0B:56:7F:20:AB:48:67:D8:31
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       01964632CD019BF78788F43EDF8C5B3A739C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          082A
Signing time:             Fri 18 Apr 2025 00:00:56 +0000
Manifest this update:     Fri 18 Apr 2025 00:00:56 +0000
Manifest next update:     Sat 19 Apr 2025 00:00:56 +0000
Files and hashes:         1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: Yz/gwlxdFIQ2dOk1cB5Ir6LPKtLWCOVHW+A/yO/wuCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:32:cd:01:9b:f7:87:88:f4:3e:df:8c:5b:3a:73:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Apr 18 00:00:56 2025 GMT
            Not After : Apr 19 00:00:56 2025 GMT
        Subject: CN=a11656368a16df53bc8e680b567f20ab4867d831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:6b:63:70:7d:ab:4e:ce:4e:37:40:71:00:
                    78:74:4b:1e:5c:92:51:53:c7:12:84:1a:b3:30:fd:
                    b1:6a:38:53:4c:82:cc:45:7c:3e:83:7d:17:40:ff:
                    77:0c:67:87:c0:73:25:9a:5f:9c:e3:c1:1c:42:3a:
                    f3:d5:a7:3e:20:99:e2:9f:a2:1d:ef:62:4b:f2:54:
                    93:66:93:65:76:be:0f:0f:aa:7f:53:82:a9:2f:b6:
                    ed:01:83:63:07:2b:7c:43:1e:f3:c9:ca:29:ac:cc:
                    99:50:73:95:e9:42:b6:88:fa:10:72:7b:2f:9b:67:
                    d6:59:2d:01:c5:58:79:2b:26:d9:08:af:c7:a0:7b:
                    8e:25:36:a0:96:6a:40:05:fa:34:fb:2e:1b:f7:c6:
                    6f:66:b8:6b:31:50:65:79:14:35:9a:ba:ee:b2:11:
                    2d:57:a8:66:ba:e5:2f:83:ef:8e:07:b2:22:80:26:
                    dd:e0:bb:3d:0e:8b:7d:e2:e8:8c:4c:f4:61:22:cc:
                    41:07:aa:25:3b:73:9b:0f:35:64:8b:53:b7:56:21:
                    ae:85:28:39:9e:3c:e9:b2:15:43:f5:a2:ca:f1:44:
                    5e:07:6f:9b:2b:19:49:59:c7:fd:0d:d5:99:14:c6:
                    2a:c9:d2:b6:63:bd:c3:12:f5:66:57:35:f6:c6:e1:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:16:56:36:8A:16:DF:53:BC:8E:68:0B:56:7F:20:AB:48:67:D8:31
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:8f:3b:75:02:b3:fa:45:81:9d:61:21:db:f9:53:f3:f0:
         09:82:6c:2f:2d:4d:82:37:e8:97:ea:0b:7a:4d:18:45:2e:5c:
         4f:44:ea:0e:aa:40:c8:f2:62:99:75:09:79:c8:ad:87:47:32:
         4d:2d:65:4b:b1:64:f7:81:8f:82:4b:a4:9f:91:a6:da:1a:65:
         66:73:66:15:bb:32:d5:5a:1c:a2:58:33:62:1f:ea:8d:c6:f6:
         ec:38:6c:83:77:fc:c7:bb:b1:0a:b1:89:94:86:59:6d:61:a1:
         1a:30:e6:33:92:b2:cd:7c:8c:10:6e:c0:bb:f3:3f:b4:97:87:
         f2:f2:a9:77:e7:46:6a:8a:09:38:e7:32:40:2d:65:2b:55:97:
         ab:4f:8c:62:73:2d:57:a6:e1:a4:0b:96:17:9e:a9:e0:f5:9f:
         66:3a:17:0c:8d:38:26:54:45:93:9c:e0:a3:2c:5a:a8:4e:0a:
         03:7d:2e:12:51:41:73:fa:b7:34:0e:58:2d:a0:25:7d:01:be:
         17:69:f2:75:66:e9:b9:bf:23:5b:61:ab:f6:61:81:f1:ae:5e:
         06:36:f2:c0:1e:18:7e:e2:4b:16:2c:79:8e:01:9c:02:fa:c2:
         8a:40:84:8a:c3:e7:c9:41:f2:2f:1d:81:7d:d9:c8:12:70:87:
         97:73:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:04:15 2025 by rpki-client