Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File:                     U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier:          ciNHMdDokvE4oTErMNc+5p+O5AdAEfxtPIwzlCAaVQc=
Subject key identifier:   63:99:15:9D:C1:91:B6:57:52:C3:04:44:E3:5D:21:7D:2D:31:BA:99
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer:       /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial:       0196598211DDF51D04CF894B0F21553CB17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number:          0C9C
Signing time:             Mon 21 Apr 2025 18:00:18 +0000
Manifest this update:     Mon 21 Apr 2025 18:00:18 +0000
Manifest next update:     Tue 22 Apr 2025 18:00:18 +0000
Files and hashes:         1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: /26jwanwispCbOGPXikxvwtjTNwB+NJQqZNImpCiKa4=)
                          2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:82:11:dd:f5:1d:04:cf:89:4b:0f:21:55:3c:b1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
        Validity
            Not Before: Apr 21 18:00:18 2025 GMT
            Not After : Apr 22 18:00:18 2025 GMT
        Subject: CN=6399159dc191b65752c30444e35d217d2d31ba99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:bd:dd:17:00:c4:ed:00:ea:c0:36:7d:02:
                    c5:be:36:60:59:25:09:63:0b:12:34:4a:68:35:ed:
                    57:58:0b:74:94:57:51:01:85:8c:ac:8d:04:2a:c9:
                    cb:b1:4e:58:f6:e2:42:ac:da:1f:33:42:fd:51:be:
                    79:52:36:57:b5:9a:53:9a:54:3c:91:64:65:19:ec:
                    8e:80:08:1e:81:70:23:70:dc:06:1e:b4:07:53:23:
                    4f:94:cc:51:4e:0b:4f:a1:a2:51:6c:65:1e:2f:48:
                    27:93:0f:e0:bb:ef:6d:28:88:cd:ce:7d:09:89:ea:
                    fd:8e:57:cc:86:1f:fd:2a:a4:c4:c0:cf:0f:6e:09:
                    82:2c:71:20:ca:0d:b9:49:75:aa:ac:86:18:e3:91:
                    f8:c3:5d:3f:88:17:0a:7c:41:ce:57:16:ae:97:ef:
                    d6:fe:2d:3a:d5:90:ae:96:c7:77:33:1b:27:6c:70:
                    10:bb:5f:c9:58:81:fc:29:45:c4:61:b6:fc:39:bd:
                    f3:cc:ba:5a:2d:bc:47:10:61:97:2b:ff:bb:34:40:
                    62:97:40:0c:c8:13:26:5c:17:b9:97:5f:a3:56:9c:
                    d0:0e:fb:2f:90:98:9c:2f:be:78:a9:60:d5:ed:fd:
                    bd:be:27:fe:c1:eb:95:f6:b5:62:fc:ae:a9:1c:bd:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:15:9D:C1:91:B6:57:52:C3:04:44:E3:5D:21:7D:2D:31:BA:99
            X509v3 Authority Key Identifier:
                keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f0:44:d7:8a:8e:9a:78:3a:33:e8:33:b2:13:4a:13:e5:ac:
         26:09:4e:e5:a9:1c:6a:3b:e7:b8:85:78:17:14:7f:8b:2d:7b:
         8d:d8:a8:a5:bb:60:13:c7:a7:5b:47:89:6d:09:13:e9:0a:58:
         30:ea:e3:3c:76:24:e0:9c:61:cd:13:c5:48:7f:b9:0b:b4:a1:
         9e:3d:8e:6c:dd:c2:ac:42:7e:62:af:6c:e0:a0:97:41:2d:af:
         f5:11:1e:11:8a:f4:d9:87:f0:51:78:fc:12:da:56:7e:bf:95:
         ef:20:b4:0d:75:59:f7:be:66:88:74:ce:4d:75:e6:35:f8:2c:
         22:59:57:f8:db:84:8f:37:4d:01:60:43:f5:1d:51:3e:22:79:
         30:75:1a:a1:a1:4a:2c:6e:c9:90:6c:53:c4:9a:1d:9d:ee:85:
         1e:c0:d2:04:3e:2d:47:90:2b:52:e8:5a:dd:43:b8:54:1f:9e:
         4d:ae:9a:fb:36:08:4d:a1:53:5f:0c:e7:bc:44:21:03:79:b8:
         89:46:d5:47:57:ca:b0:f1:f7:2e:09:52:df:29:c0:7b:1d:e7:
         b8:82:03:46:ef:10:32:da:55:7f:85:2f:ee:14:ea:1a:5b:d0:
         29:be:fb:3f:0c:e8:ec:a2:10:6e:5e:3c:3d:b7:88:46:40:3d:
         61:10:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:00 2025 by rpki-client