Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          SLiCNJmTsgr8F5lmv94Fp1MNWBrxXr0LhxBfGBfVHDo=
Subject key identifier:   D7:1C:DF:E7:4C:B7:8E:DB:14:C0:BF:E5:F3:C1:7F:8F:D4:F8:82:7B
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       0196C4275581F03ED849515E72CCECF1E603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          120E
Signing time:             Mon 12 May 2025 11:00:34 +0000
Manifest this update:     Mon 12 May 2025 11:00:34 +0000
Manifest next update:     Tue 13 May 2025 11:00:34 +0000
Files and hashes:         1: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (hash: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=)
                          2: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: szLcMVfrst1vt1xnGxXCG4Qle+YzPaOSc132eZ3QQg0=)
                          3: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (hash: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=)
                          4: elKWmf6BGTWMt5DvOkJSmfgI6Qc.roa (hash: XewDawQR0+tbCE/3KxBoInLYooxTPbPPCM6MSvyHwQE=)
                          5: foa891AnmG5IItmg1Wf-_lEJLDs.roa (hash: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=)
                          6: ro7x5tBi5pz3qKIPLgpN5cezxqA.roa (hash: 5qgWdLvv6h/u7ssCLQ9odiZwNdNNYlXCXXprQdKkz2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:55:81:f0:3e:d8:49:51:5e:72:cc:ec:f1:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: May 12 11:00:34 2025 GMT
            Not After : May 13 11:00:34 2025 GMT
        Subject: CN=d71cdfe74cb78edb14c0bfe5f3c17f8fd4f8827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:3a:5e:e6:85:b4:76:aa:ce:b7:de:12:e1:
                    40:64:9f:8d:05:60:88:5d:51:1d:6a:fc:f2:bf:c1:
                    57:b2:a7:fa:b5:15:04:bc:da:b4:f7:5a:13:3e:be:
                    36:58:97:d1:10:14:17:d4:98:40:17:9a:36:8d:9e:
                    f6:9e:e7:45:7f:13:02:88:23:d9:24:dd:0e:38:a6:
                    83:1b:fc:16:a2:16:93:78:d9:7a:a9:d7:9c:c4:d5:
                    16:f5:5b:69:d3:ba:c4:98:b3:95:5c:e2:a3:b1:3d:
                    4e:ac:48:17:00:1e:42:73:8d:55:fb:26:d7:12:74:
                    86:1b:cc:f2:9e:20:94:83:5c:4f:bd:90:d5:98:6e:
                    83:29:49:86:01:c9:5e:c2:d5:d5:b2:56:49:81:be:
                    fa:44:9e:9d:34:54:84:b6:30:a6:77:9e:2b:de:b6:
                    5a:eb:7a:64:d1:fd:29:97:03:46:14:60:d2:77:45:
                    4a:d4:b6:46:c9:6a:5d:9e:c1:29:ae:65:e2:09:05:
                    02:c0:e2:e1:bf:4e:cf:90:a9:cd:30:0a:33:d2:d4:
                    6c:73:ec:95:72:4b:67:67:b3:05:24:82:20:76:70:
                    04:5e:79:f2:2c:ea:5d:9b:04:e6:54:80:c1:b4:76:
                    ac:f2:f8:f4:b7:d9:90:12:4b:20:f4:58:01:47:cd:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:DF:E7:4C:B7:8E:DB:14:C0:BF:E5:F3:C1:7F:8F:D4:F8:82:7B
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b1:fb:96:fe:c5:78:04:43:09:5e:5b:d9:9e:b6:fa:53:7d:
         22:ce:06:87:c2:00:d3:e3:f3:c9:5a:d4:d6:a4:43:5c:9c:1c:
         2c:7a:10:aa:a2:0a:4d:1a:17:ab:6e:ee:66:0d:7c:96:ac:7b:
         91:9a:f2:5a:c4:ce:86:bd:49:18:df:7a:7c:1a:e1:6a:a8:2b:
         8e:0d:53:a7:e4:79:42:53:ae:95:3c:e0:7c:e5:e2:ee:66:ce:
         2c:fa:78:b2:ce:ff:4d:a0:ed:09:1e:7b:d3:2d:b4:2e:a2:86:
         b5:76:3c:e8:4e:02:0c:b7:bc:77:d7:41:0f:38:f1:05:22:08:
         26:4d:48:8d:70:c9:64:66:d9:c0:d6:29:16:4d:f4:d8:55:cd:
         c3:fc:b4:5c:34:85:70:65:de:3d:22:15:17:c0:0e:9f:96:c3:
         9c:dc:fb:ae:bd:83:1c:51:f5:4d:68:68:26:be:91:1d:d5:65:
         d1:6b:12:15:79:39:5d:7d:1d:7b:36:78:3d:8b:7a:08:6d:b6:
         01:0f:b3:42:8e:e3:65:dc:33:66:93:f2:80:05:81:fc:30:e9:
         29:13:8d:f7:aa:cb:d3:12:5e:23:91:f7:6c:65:b5:cd:30:b6:
         f5:22:9c:c5:a8:bc:75:40:eb:a3:ae:d0:eb:6a:a8:43:d3:8e:
         57:f3:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:48:53 2025 by rpki-client