Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File:                     ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier:          n18j+dfzeh/bHCEPeyIqXlSXc0Pd2XGO4QkXK9zJg2c=
Subject key identifier:   F2:2B:B4:FF:92:B3:D1:68:40:A8:D8:06:48:64:C6:94:A1:89:C6:7F
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer:       /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial:       0196C426FD8D3118BE005667A07C3CB07477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 11:00:11 +0000
Manifest this update:     Mon 12 May 2025 11:00:11 +0000
Manifest next update:     Tue 13 May 2025 11:00:11 +0000
Files and hashes:         1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
                          2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
                          3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: L9qlPHZyvLT+71zJjDjmoQ7IMHOvEoLI3SjOtloqOVE=)
                          4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:26:fd:8d:31:18:be:00:56:67:a0:7c:3c:b0:74:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
        Validity
            Not Before: May 12 11:00:11 2025 GMT
            Not After : May 13 11:00:11 2025 GMT
        Subject: CN=f22bb4ff92b3d16840a8d8064864c694a189c67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:4a:36:45:6e:a1:ba:f9:0c:46:ea:49:67:
                    08:1d:81:56:bf:4b:7b:86:65:d7:be:b0:d2:00:cf:
                    ef:23:92:48:cf:a1:93:e4:3f:33:c2:a9:7c:1c:1a:
                    ef:7b:2d:7d:67:73:63:39:60:4d:f7:22:5e:1b:b8:
                    8f:e7:b9:5b:fb:4c:de:ac:65:79:88:05:b1:0a:9d:
                    3f:c9:35:1b:57:9b:68:5e:d3:85:d0:a5:8b:2d:12:
                    90:75:73:0c:21:86:5a:17:09:b8:be:e4:c3:d8:ab:
                    8e:ad:3f:b3:d9:25:14:4d:37:4f:67:21:3b:a6:ef:
                    6d:af:8f:5d:48:4e:e0:fc:20:51:76:31:3d:f5:20:
                    b8:e8:66:00:16:ad:c5:8a:d6:22:02:70:de:a5:ae:
                    13:0f:a4:23:9b:e2:41:55:22:a3:25:a9:16:17:bb:
                    59:27:fe:ec:e1:f7:e4:8d:e2:5b:32:e4:9f:2f:15:
                    25:eb:ea:57:05:88:5e:b4:f6:9c:49:ce:7e:e3:7a:
                    3d:2e:29:ee:19:cf:97:1a:72:2e:70:99:4d:77:a4:
                    85:6d:15:88:30:fb:64:f6:a9:86:43:14:75:fd:ef:
                    d8:36:67:fb:94:b1:32:ad:ef:c7:65:49:36:dd:8c:
                    57:ce:e5:48:36:c5:d4:ec:5b:21:92:ea:90:33:fc:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2B:B4:FF:92:B3:D1:68:40:A8:D8:06:48:64:C6:94:A1:89:C6:7F
            X509v3 Authority Key Identifier:
                keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:36:22:62:c1:b9:d9:4b:fa:59:23:65:3b:23:fd:68:cc:bb:
         5d:56:4d:8f:49:80:ac:a6:8f:9a:0e:e9:70:c0:92:ff:38:67:
         4d:1c:ab:a2:8a:79:4a:4a:d9:65:a8:e7:1e:43:96:33:a5:10:
         7d:db:eb:f7:85:a1:e6:09:4e:69:40:5d:e9:28:de:10:ad:a4:
         be:d8:36:5c:5f:77:46:db:8f:e8:aa:a5:9c:68:18:fb:92:13:
         5d:ef:33:3a:17:65:9a:c3:3c:0d:49:45:81:47:cb:7f:a7:0a:
         3c:9c:ed:1e:f0:81:da:cf:8c:5e:47:ae:e4:80:56:64:c4:61:
         f8:a0:5c:9d:28:10:11:8e:96:c0:16:d1:ed:61:28:0c:5c:0b:
         5d:0a:93:76:11:34:50:f9:1b:f3:77:04:45:e8:b5:95:05:c9:
         06:a9:cf:49:49:8a:b3:0a:4e:4a:2a:70:ba:b1:94:c6:88:1c:
         d4:29:cd:e2:4d:a7:c3:fe:36:e4:0f:26:b7:c4:9f:56:b9:bb:
         f8:c9:98:6e:fc:68:f6:db:51:46:49:a6:a6:f0:f8:2b:a1:c7:
         94:9b:f4:cc:3d:af:52:b1:15:e5:7f:3d:f1:fd:e6:aa:df:33:
         a6:10:55:e8:6f:91:e1:bd:31:6d:52:d2:78:28:b7:3e:5a:0e:
         ed:1b:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:13:59 2025 by rpki-client