Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
File:                     uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json)
Hash identifier:          yeQnLDzOAGKo9mjxFmLA5BHsKilR945mXTgrl77FJYY=
Subject key identifier:   A5:91:24:4D:47:87:24:17:43:65:6B:81:48:5E:3B:FC:6B:05:89:E7
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       0196CB7388634A970FF643276DE7CB4324B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
Manifest number:          1544
Signing time:             Tue 13 May 2025 21:01:08 +0000
Manifest this update:     Tue 13 May 2025 21:01:08 +0000
Manifest next update:     Wed 14 May 2025 21:01:08 +0000
Files and hashes:         1: GqJY_-YaLfVhDAO9-9FtProS6ws.roa (hash: OZM5pFFT51z72joYWwzEXxW0xM8WMd3VRKym1LwnAf0=)
                          2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: jZWZWhnlluZ93nuvZjw/luBIz+o076X3251mAy9KZrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:88:63:4a:97:0f:f6:43:27:6d:e7:cb:43:24:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: May 13 21:01:08 2025 GMT
            Not After : May 14 21:01:08 2025 GMT
        Subject: CN=a591244d4787241743656b81485e3bfc6b0589e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:0b:29:d0:8a:d4:9d:d2:7f:59:67:f1:f8:
                    50:58:b4:1e:41:a4:6d:fa:f3:06:24:cb:16:2d:95:
                    ee:76:33:be:74:d2:6a:46:0e:00:fd:dd:45:8f:0d:
                    39:df:4c:10:9d:93:12:a7:30:4d:92:05:96:a6:ea:
                    17:ab:a0:ad:aa:ae:b9:c1:18:44:19:5c:27:de:1a:
                    34:a8:51:93:f0:2f:d6:f5:13:81:4b:97:61:b7:5a:
                    77:74:ee:c7:69:e1:4a:66:bb:00:8c:6a:7b:f9:6a:
                    00:8f:93:7b:2d:24:5a:ce:49:a2:78:00:17:83:0b:
                    ec:2d:48:c7:d3:45:e6:0c:10:19:30:d8:f8:59:1d:
                    57:34:d4:c2:64:03:bb:52:19:88:f5:3e:32:d8:b7:
                    63:e5:07:27:2e:40:8c:95:6f:56:3a:a8:83:e0:7c:
                    a2:75:e2:a8:14:ee:40:bd:80:aa:02:bb:40:e8:9a:
                    d5:f5:60:32:77:f1:dd:bf:14:2e:60:e8:67:e9:41:
                    36:ac:9e:79:72:c3:e7:79:49:4f:74:94:8a:e7:d1:
                    f8:0f:27:3a:10:32:26:3f:02:6a:c0:52:8e:79:a3:
                    41:3f:61:21:56:23:73:ef:87:9b:46:f7:a3:3f:7d:
                    d7:0a:1a:8b:1a:62:c0:82:7b:fe:ac:bd:ea:a5:24:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:24:4D:47:87:24:17:43:65:6B:81:48:5E:3B:FC:6B:05:89:E7
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:3e:e2:e8:99:1e:9c:62:16:45:e7:d6:48:4f:d3:4f:37:
         a9:d5:f1:21:b0:f0:8b:16:bc:f7:40:50:60:9b:58:0d:55:74:
         67:84:36:c2:ef:25:b8:b5:53:52:24:af:d9:5f:ec:a7:ff:b2:
         44:bc:2e:0a:a5:21:56:dc:ab:ab:d1:0e:0b:29:3d:b9:c7:4a:
         8b:cc:f7:59:bf:6c:ae:40:a9:85:1a:6e:dc:a2:aa:9f:de:7a:
         fa:7d:ba:e8:6c:56:2f:e9:dd:60:88:9b:a9:91:32:ee:54:e0:
         a7:77:92:48:41:88:80:fe:b5:15:3f:36:a0:bc:5e:0c:6a:0c:
         51:32:82:0b:35:5b:a3:bd:ba:73:ff:1a:e9:5d:af:ce:ce:9b:
         f5:ee:8f:f1:6c:42:2f:43:2f:3f:e9:c1:e7:ca:51:e8:93:51:
         f3:c8:ab:82:53:46:6e:59:b5:83:ee:40:9f:b4:05:ae:fd:15:
         24:74:c8:c8:f9:18:51:0c:5a:66:88:87:d4:90:45:8b:d6:36:
         cc:37:93:50:f0:26:30:31:7a:8d:7c:fb:3e:44:95:5d:b6:c6:
         24:e3:49:80:7a:d4:5b:db:78:96:2c:a2:c4:58:fc:6e:39:c0:
         7e:44:be:75:10:9c:87:5b:08:a3:ea:8e:00:2b:da:0c:ec:c4:
         7c:a2:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:39:25 2025 by rpki-client