Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          yd6RwwJnq868HGDOI/YuIlOtXQkTTrxiFd/mpbmjaBw=
Subject key identifier:   11:93:14:27:24:77:BF:D4:74:E6:2A:9C:AA:1D:F8:CC:E1:59:07:57
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       01963876E3266CF194F25704C955F1737498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          0E0F
Signing time:             Tue 15 Apr 2025 08:00:37 +0000
Manifest this update:     Tue 15 Apr 2025 08:00:37 +0000
Manifest next update:     Wed 16 Apr 2025 08:00:37 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: 8tGhbhMGN_POJ7YSYEPEigGTSlM.roa (hash: AyZWf3gcGZsZqBrGbd7j+e4CICThgNWqmUZZB2Q39TY=)
                          3: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          4: lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa (hash: P6bpbS3OXvq0UtxdzJFd21jTQ3yjWXkBJ0OIzqYZwM4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: Nn+YBz9RCZACVM3CZL4oqvOFN5GAceD5sKuqKlMxWUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:76:e3:26:6c:f1:94:f2:57:04:c9:55:f1:73:74:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Apr 15 08:00:37 2025 GMT
            Not After : Apr 16 08:00:37 2025 GMT
        Subject: CN=119314272477bfd474e62a9caa1df8cce1590757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:5a:41:5c:41:e0:e3:e1:11:b2:10:d7:5f:
                    3e:da:01:2c:0f:c8:d9:14:cc:f1:8c:63:07:e3:c0:
                    1b:a5:08:f8:75:4f:5f:83:c5:46:89:36:b3:80:89:
                    21:ad:da:ed:28:a5:9f:52:3a:be:6e:68:59:81:5f:
                    69:0d:74:8d:ae:0d:80:bc:3f:22:e2:e8:05:79:99:
                    b6:58:ec:12:84:be:39:7d:27:b2:11:38:79:7f:1f:
                    57:1b:15:9f:ed:43:68:2c:ba:bc:c5:17:1b:bd:ce:
                    4b:02:1e:0c:d1:d2:ff:ae:be:12:d4:63:40:6f:15:
                    56:bc:8a:24:12:ca:84:7b:7d:ec:cc:ce:60:67:92:
                    b1:be:5b:80:3a:3f:60:31:61:ec:46:cb:07:df:fd:
                    29:38:9e:51:0b:af:52:6b:0a:57:5b:14:db:41:68:
                    2b:10:b3:25:9a:d4:12:68:b5:c7:29:59:1b:b2:08:
                    e7:42:05:2d:a4:92:22:c2:e2:88:7d:e5:32:0b:c9:
                    eb:bf:50:f2:bf:ab:ad:c3:53:d0:85:0e:56:44:61:
                    ea:a3:13:6e:9e:35:af:e9:17:aa:98:0f:b8:c2:e2:
                    b9:67:c1:fe:f7:31:c4:3e:e8:a0:cf:6f:a9:cf:4c:
                    00:8e:33:21:d3:cd:b6:54:2e:18:c6:c6:a4:ca:f2:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:14:27:24:77:BF:D4:74:E6:2A:9C:AA:1D:F8:CC:E1:59:07:57
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:bf:19:e9:88:bd:e9:a4:12:11:8d:d3:44:ea:9a:b1:0d:
         2d:e6:40:9b:29:bf:70:f1:e7:14:ca:d3:47:e9:ac:3c:8f:5f:
         f2:99:6b:79:2c:53:d0:9d:d8:54:fb:a5:51:f1:c3:6f:24:82:
         1e:43:d1:79:27:50:b9:2f:45:20:3f:76:a4:00:9e:12:bf:83:
         1a:9a:a3:aa:0f:f3:30:1f:37:29:66:1c:20:f9:fd:34:9e:78:
         91:a3:f6:ad:86:19:0d:0b:f9:e0:c6:d2:b7:c8:ce:f5:c2:0a:
         00:37:58:43:61:bb:b6:64:33:5a:02:2a:9e:a9:4d:c9:7c:ab:
         c4:18:d9:1d:a2:75:50:b4:b7:26:6b:fb:5e:67:eb:4c:e1:01:
         95:39:9f:ed:92:8f:c7:66:76:88:47:8c:5b:8e:93:81:fd:81:
         ea:f7:1d:50:c5:42:77:68:51:b3:81:2e:fa:17:73:94:7a:44:
         60:8d:00:99:c7:9a:dd:10:64:bf:d7:6e:f7:85:97:44:d1:bc:
         bc:37:3a:1a:a6:1a:67:da:2e:69:16:a4:a0:1e:4d:2d:4b:2a:
         3e:6d:56:f5:3b:be:92:51:e5:4d:56:f6:8a:9e:aa:d9:32:5a:
         d6:a3:53:9f:bd:72:86:6b:ca:8c:27:c6:61:07:df:d2:80:a7:
         74:5f:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:39:40 2025 by rpki-client