Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          qG43Od8pUz89tb7lgXtceiKBXeDFykk8SwASZgAgYIg=
Subject key identifier:   82:D4:C6:F9:BF:EB:E0:BC:CE:59:56:AD:E1:36:04:BF:73:E6:FA:8D
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       0196CB05C9B59CD9D05C9DFA02A9C5C939D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          1542
Signing time:             Tue 13 May 2025 19:01:16 +0000
Manifest this update:     Tue 13 May 2025 19:01:16 +0000
Manifest next update:     Wed 14 May 2025 19:01:16 +0000
Files and hashes:         1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: IoEzRCUNrd8Qj/F30dAPQTZ4x5/Tr3p6RA6NqLNwhWA=)
                          2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:c9:b5:9c:d9:d0:5c:9d:fa:02:a9:c5:c9:39:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: May 13 19:01:16 2025 GMT
            Not After : May 14 19:01:16 2025 GMT
        Subject: CN=82d4c6f9bfebe0bcce5956ade13604bf73e6fa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:b4:60:55:24:ef:b9:77:18:45:58:f7:35:
                    32:51:e3:54:37:8f:b4:15:5f:a5:d0:87:2a:9b:cc:
                    3a:ed:9e:4a:c7:04:40:8f:0a:d5:51:f3:a2:92:39:
                    d8:57:2c:50:b9:ec:a7:06:68:f8:db:76:a5:be:30:
                    f5:c4:65:68:4a:df:08:49:74:34:f2:18:7c:21:45:
                    d7:05:32:b6:2c:61:f7:d2:13:91:a6:aa:7d:81:6d:
                    06:e2:02:a5:24:35:10:74:b9:76:3c:90:2a:9a:8a:
                    a9:64:40:6a:cc:71:fe:cc:26:91:9a:1d:7f:4d:a4:
                    14:00:81:52:99:33:12:e4:93:62:70:a6:1b:9b:d8:
                    a2:2d:9c:33:96:ee:81:d5:98:f7:47:2f:72:33:fc:
                    79:a6:ae:3a:9d:d2:b9:7f:03:07:a1:19:c1:ea:bf:
                    5f:b1:20:95:46:db:3f:6b:d4:c5:b0:b1:27:c2:6d:
                    b1:cf:2e:b6:87:b8:d6:24:d7:42:f1:db:2d:21:e9:
                    cf:2a:62:41:13:22:82:cf:54:7a:5a:07:b5:8b:c1:
                    17:28:8d:60:21:de:bd:32:bb:cb:22:30:ed:8b:68:
                    6f:5e:40:41:3b:b4:62:73:06:41:6a:b3:fd:0a:f3:
                    9d:bd:bc:03:f7:a8:ab:0c:80:c7:a4:c8:70:20:dd:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D4:C6:F9:BF:EB:E0:BC:CE:59:56:AD:E1:36:04:BF:73:E6:FA:8D
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:08:51:aa:5f:e9:99:3e:86:e3:ec:cf:e6:4e:ab:3a:0c:5b:
         14:b5:8e:2d:15:47:5d:77:f1:f4:80:18:f4:d6:b4:18:1d:4f:
         ec:5b:90:bf:08:65:08:73:55:e9:9b:15:c2:e4:fb:5c:0b:03:
         6f:0c:6c:15:d8:32:3e:06:56:08:cd:90:b5:ce:ff:b1:1f:e6:
         51:5f:db:3f:3c:10:d3:37:58:e1:d5:87:18:de:c1:f9:1c:f2:
         cf:29:80:6c:89:a9:df:f9:c2:28:7b:5c:c9:92:fa:10:09:58:
         e1:70:59:e1:52:42:5e:b9:fa:2d:0a:f5:4c:d7:23:71:94:6e:
         1e:ff:a4:67:13:d5:87:13:7d:cd:c1:1f:fd:65:9b:f7:f6:07:
         cf:44:18:ef:e6:62:50:92:5a:d5:17:be:3d:5d:e1:31:9f:2a:
         45:85:03:c9:40:8f:2b:e8:6f:1f:b0:fc:f3:aa:08:64:67:87:
         23:b4:58:3c:27:b8:49:8d:1f:29:8c:48:ad:61:8a:9a:e7:8e:
         64:a1:4a:41:d0:a5:b6:78:31:f3:e6:f7:21:0c:00:2b:45:bd:
         31:34:e1:34:6a:4a:5a:77:39:97:e9:31:7d:e3:fa:07:a1:15:
         d8:f3:8f:8c:ab:6e:ca:06:9a:eb:2c:92:49:a3:26:e9:fa:94:
         42:e7:b7:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBcm1nNnQXJ36AqnFyTnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmI3MjI3MTVmOTFiZTc5MmExZWMzYzMxZTc3ZWQ5ZGEw
NWNiZTEwHhcNMjUwNTEzMTkwMTE2WhcNMjUwNTE0MTkwMTE2WjAzMTEwLwYDVQQD
Eyg4MmQ0YzZmOWJmZWJlMGJjY2U1OTU2YWRlMTM2MDRiZjczZTZmYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU60YFUk77l3GEVY9zUyUeNUN4+0
FV+l0Icqm8w67Z5KxwRAjwrVUfOikjnYVyxQueynBmj423alvjD1xGVoSt8ISXQ0
8hh8IUXXBTK2LGH30hORpqp9gW0G4gKlJDUQdLl2PJAqmoqpZEBqzHH+zCaRmh1/
TaQUAIFSmTMS5JNicKYbm9iiLZwzlu6B1Zj3Ry9yM/x5pq46ndK5fwMHoRnB6r9f
sSCVRts/a9TFsLEnwm2xzy62h7jWJNdC8dstIenPKmJBEyKCz1R6Wge1i8EXKI1g
Id69MrvLIjDti2hvXkBBO7RicwZBarP9CvOdvbwD96irDIDHpMhwIN0dEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILUxvm/6+C8zllWreE2BL9z5vqNMB8GA1UdIwQY
MBaAFLgrcicV+RvnkqHsPDHnftnaBcvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zOTY3NTktYjBjNi00OGVmLTk3YjMt
YTE1YTE4NjEzZGE2LzEvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zOTY3NTktYjBjNi00OGVmLTk3YjMtYTE1YTE4NjEzZGE2
LzEvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAhRql/p
mT6G4+zP5k6rOgxbFLWOLRVHXXfx9IAY9Na0GB1P7FuQvwhlCHNV6ZsVwuT7XAsD
bwxsFdgyPgZWCM2Qtc7/sR/mUV/bPzwQ0zdY4dWHGN7B+RzyzymAbImp3/nCKHtc
yZL6EAlY4XBZ4VJCXrn6LQr1TNcjcZRuHv+kZxPVhxN9zcEf/WWb9/YHz0QY7+Zi
UJJa1Re+PV3hMZ8qRYUDyUCPK+hvH7D886oIZGeHI7RYPCe4SY0fKYxIrWGKmueO
ZKFKQdCltngx8+b3IQwAK0W9MTThNGpKWnc5l+kxfeP6B6EV2POPjKtuygaa6yyS
SaMm6fqUQue3kQ==
-----END CERTIFICATE-----
Generated at Wed May 14 02:59:53 2025 by rpki-client