Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File:                     uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier:          rqjmWMXpazsVOq7XtJFxKI53VxAdeGILtbK3y100+1w=
Subject key identifier:   04:4C:34:50:C5:89:5B:5E:5E:D9:AB:77:4E:EC:9C:25:53:11:0F:C4
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer:       /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial:       0196C5A7E63BEF5FA36575C37C17E7CF1C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number:          0DBD
Signing time:             Mon 12 May 2025 18:00:37 +0000
Manifest this update:     Mon 12 May 2025 18:00:37 +0000
Manifest next update:     Tue 13 May 2025 18:00:37 +0000
Files and hashes:         1: Ujha7XxP98D3xulcV7MFKJ2FUK0.roa (hash: fQlcIKdy/eaJbe/2M1GqCZ9CE3CRZB+bKoGJevwXPtw=)
                          2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: 00XnMT7PVTQkYn68HHdkQHyMRPyMoomAfiSK8/ishvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:e6:3b:ef:5f:a3:65:75:c3:7c:17:e7:cf:1c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
        Validity
            Not Before: May 12 18:00:37 2025 GMT
            Not After : May 13 18:00:37 2025 GMT
        Subject: CN=044c3450c5895b5e5ed9ab774eec9c2553110fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:f4:02:b0:f3:e1:2f:3f:f6:af:6e:30:47:
                    ba:71:59:b5:1e:1d:f5:ab:32:cf:b4:73:a6:11:08:
                    bb:14:e5:1f:2b:e1:0e:c4:69:6f:a7:6a:a6:75:34:
                    97:18:d8:36:a0:a1:af:09:6b:01:0d:8b:86:47:2c:
                    ce:02:66:63:89:c4:de:08:ac:ff:65:c5:7c:8e:c8:
                    05:f7:70:4b:dc:fc:8d:41:a0:53:66:94:95:82:a1:
                    2d:8d:51:ee:1c:dc:39:58:1a:b5:c3:3a:ea:d6:3d:
                    f3:a2:6a:43:0d:b0:a0:57:06:b5:d8:c7:33:db:a4:
                    d5:43:6a:b4:07:2d:89:82:a3:2e:6e:74:42:ce:d9:
                    16:53:f7:7e:c8:49:39:57:81:56:4b:2b:80:34:84:
                    80:b3:15:84:49:7c:59:1b:62:19:c5:b8:57:c3:b1:
                    54:97:8c:56:ca:20:78:5e:43:82:ac:2c:cd:9b:56:
                    8e:31:c3:74:53:09:c0:2f:9a:97:82:59:9a:41:6c:
                    2a:66:15:95:f6:00:f9:71:f3:8a:36:a7:6d:59:5c:
                    dc:99:ea:d5:98:c5:e6:84:4b:5c:f7:8b:8d:fb:c4:
                    a9:44:35:47:f6:1d:33:f2:78:60:f1:b0:af:ad:f8:
                    22:bc:62:42:96:75:1f:fd:a1:53:4a:76:e0:19:7b:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:34:50:C5:89:5B:5E:5E:D9:AB:77:4E:EC:9C:25:53:11:0F:C4
            X509v3 Authority Key Identifier:
                keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:2c:7f:78:e9:aa:0b:95:83:dc:13:fc:2c:cf:4f:d1:9f:
         31:ed:f6:18:04:33:15:47:a9:8b:e8:45:ee:71:c0:a5:48:01:
         11:42:ab:a7:bc:38:f4:71:88:fc:79:eb:d3:2c:36:03:78:1f:
         89:1c:de:5d:e5:d7:61:13:71:d3:f2:91:66:41:d8:0b:f6:8b:
         57:57:a6:3b:d8:06:ff:99:16:77:54:53:2f:a7:05:cf:be:f5:
         36:cf:de:89:69:8d:55:a4:77:08:8b:c8:09:82:81:c9:5b:cd:
         0f:93:24:85:0a:d6:5b:15:93:8a:fe:60:42:21:1e:da:52:f6:
         e3:0b:09:89:9f:ee:a2:d7:99:8f:15:b8:4c:31:d9:49:4f:7d:
         e9:86:7c:7d:af:29:7e:34:c0:15:71:12:71:2b:c2:ec:1d:22:
         8e:b5:ab:6a:64:7a:e6:5f:78:7a:ed:a4:c5:0a:2d:13:26:83:
         bc:9c:d7:4d:7d:fd:ef:bc:94:06:23:39:17:4a:44:dc:64:a5:
         cc:47:ce:a7:2e:92:28:c5:8d:b3:f7:40:1a:82:1c:1c:fb:80:
         08:60:12:0a:b7:5e:ba:c7:7e:34:66:d6:45:b8:0a:3b:18:0e:
         b1:b0:9a:9b:0a:ac:b7:d5:45:47:7a:2f:8f:80:ad:ee:ae:f8:
         67:d7:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:32:39 2025 by rpki-client