Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File:                     UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier:          0C+BphVkPjl8opbB3GLYt13rxhV5afaGVMNHxq9d6Iw=
Subject key identifier:   BB:1A:7C:C1:6E:BB:E7:B8:8D:82:8C:A6:41:38:57:F6:AC:A1:F0:19
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer:       /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial:       0196C15D8E817B461BFB7FC161FA0CE54D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 22:00:56 +0000
Manifest this update:     Sun 11 May 2025 22:00:56 +0000
Manifest next update:     Mon 12 May 2025 22:00:56 +0000
Files and hashes:         1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
                          2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: E7Ble87u8SZH91LT2kQtBebCGF7fliY6agHDcpqzT2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:8e:81:7b:46:1b:fb:7f:c1:61:fa:0c:e5:4d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
        Validity
            Not Before: May 11 22:00:56 2025 GMT
            Not After : May 12 22:00:56 2025 GMT
        Subject: CN=bb1a7cc16ebbe7b88d828ca6413857f6aca1f019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:d7:68:bd:87:62:06:12:d3:d4:5c:a3:7f:
                    eb:81:2f:f1:65:28:a2:d4:ae:ad:d6:d8:d2:15:bf:
                    1b:ac:d5:b4:ec:a0:64:f4:46:02:14:8d:b8:f8:ea:
                    3b:42:61:5a:c4:17:1b:7e:ed:cb:d7:fe:34:21:c1:
                    bb:d7:fb:81:80:97:ff:9a:60:ae:c1:72:40:29:58:
                    2c:a5:72:a2:00:f0:c0:7a:b9:cf:34:68:ba:e0:68:
                    3d:ab:cc:31:15:dc:15:61:ef:4a:b8:0f:48:fa:28:
                    96:3f:12:fe:54:f0:a5:ba:d9:a2:eb:90:d0:e6:20:
                    b5:d3:2c:55:35:64:73:4d:af:bb:85:e6:e6:31:ad:
                    44:9e:5d:e2:ac:b0:e9:8e:12:e3:fa:49:ed:41:a9:
                    a8:0d:5b:7d:bb:e3:8f:9f:92:5e:42:72:0a:d1:2f:
                    88:5f:35:0c:86:19:c8:9d:6a:e0:3a:74:1d:98:d7:
                    a9:8c:61:07:30:15:af:da:1a:20:52:c6:79:2d:52:
                    9c:df:9d:a3:b7:df:96:b9:09:3e:f1:87:ef:92:20:
                    34:5e:7b:be:9f:d2:f6:56:46:db:8c:6b:76:de:6a:
                    5e:4c:c9:99:c5:ab:b2:a5:8b:96:c5:2f:a3:a7:be:
                    a4:0f:44:6b:f0:de:b6:2d:da:e3:d6:a7:a1:bf:7f:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1A:7C:C1:6E:BB:E7:B8:8D:82:8C:A6:41:38:57:F6:AC:A1:F0:19
            X509v3 Authority Key Identifier:
                keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:7d:73:71:f5:cc:6f:47:76:f3:25:39:9f:cd:7b:48:aa:e7:
         d7:b8:db:6e:90:0f:74:1b:8b:88:61:a0:3e:7c:b9:24:9f:d3:
         ea:97:95:c5:64:b7:b6:18:48:19:ba:b4:52:96:49:1b:12:ba:
         e0:11:02:d4:36:5a:72:68:5a:4c:d6:ec:9f:82:73:a4:e3:b4:
         6e:65:13:eb:f8:cf:90:e4:a1:37:57:69:f5:92:30:75:37:b9:
         d9:36:78:c6:9d:ec:9a:22:d6:2c:e2:6d:3d:8e:e4:d6:3f:d6:
         be:b3:45:5a:ad:75:68:7d:81:46:98:69:8f:88:fa:7e:fe:c3:
         54:cb:a0:62:aa:c4:ac:09:06:70:32:00:c3:a7:59:fb:06:53:
         b9:2c:2b:59:5d:4c:0c:77:fb:5f:b4:c2:9f:99:99:ff:f5:d4:
         0f:b6:a6:ee:72:b2:9c:4f:b2:6d:5a:40:84:ef:07:b4:80:ac:
         ad:28:bb:e5:84:06:be:34:8a:4a:34:55:f0:2f:9d:4b:31:eb:
         89:cc:12:a6:b7:03:a4:00:84:42:ce:b8:ea:96:2a:94:5a:e4:
         b4:13:23:6c:60:2d:a4:dd:1a:0a:71:b9:fb:de:d8:2f:bb:39:
         bb:41:7d:f0:78:e2:fd:1f:6d:8e:51:6c:2b:9e:df:0a:e0:8b:
         00:49:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:58:57 2025 by rpki-client