Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          KYNskS3v/LCPCYS2zudnNggBujmi9Owsu2X/lueEzJE=
Subject key identifier:   68:B0:B8:09:04:20:C1:38:36:68:DD:42:9C:25:00:D8:45:0C:B8:72
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       0196CCF35AC242594F37135A366D70FA44A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          11B4
Signing time:             Wed 14 May 2025 04:00:22 +0000
Manifest this update:     Wed 14 May 2025 04:00:22 +0000
Manifest next update:     Thu 15 May 2025 04:00:22 +0000
Files and hashes:         1: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          2: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
                          3: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
                          4: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          5: rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa (hash: JaM6/GuUVucxk5DxvvEe7MfBQN9s9ZArtYnX5zZQ0E0=)
                          6: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 62PEpaHpoqd7DCw2ASY2f9d8KpUAQ0+/pYpyYKQgWTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:5a:c2:42:59:4f:37:13:5a:36:6d:70:fa:44:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: May 14 04:00:22 2025 GMT
            Not After : May 15 04:00:22 2025 GMT
        Subject: CN=68b0b8090420c1383668dd429c2500d8450cb872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:db:f1:96:85:a4:cc:a3:52:dc:e3:33:a6:69:
                    16:da:20:9d:15:88:f2:b4:93:69:51:d4:24:dd:5f:
                    14:d4:69:63:80:81:2d:01:a7:e8:07:5c:6c:49:94:
                    d0:20:e0:a7:7d:27:11:63:03:af:b5:b7:7a:32:c4:
                    a5:80:93:e0:41:32:e5:4b:60:57:96:0a:aa:9e:f5:
                    1d:e6:ba:23:47:cf:57:ec:ee:03:76:91:a9:a0:9b:
                    72:55:6a:b9:02:cf:7e:60:3c:fc:a7:94:54:89:6c:
                    dc:21:57:b6:f2:12:81:1b:ff:eb:74:b0:c2:29:3e:
                    f5:53:c8:e1:fa:59:22:25:46:08:a7:65:1d:9e:d9:
                    57:ba:ef:46:73:14:a7:ee:5f:3e:2f:0c:7d:3d:60:
                    d9:ef:c3:63:a8:85:e1:52:18:1a:fa:4c:a3:86:16:
                    98:87:30:53:22:41:e6:a7:6d:9a:d5:98:a3:a4:cc:
                    f2:bc:24:31:f7:45:ec:a0:54:0c:c2:34:74:a3:65:
                    c0:8e:2d:0c:f9:e1:3b:97:a6:1c:b4:1e:cd:88:70:
                    e0:41:5b:47:22:47:71:77:7b:67:5d:fb:a3:3a:ea:
                    23:38:ce:ca:7f:80:53:06:ae:19:1d:ce:f0:db:a0:
                    df:cd:09:79:d0:2b:37:c4:70:c8:9f:8a:89:ef:6f:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B0:B8:09:04:20:C1:38:36:68:DD:42:9C:25:00:D8:45:0C:B8:72
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:e0:9a:5b:62:22:29:bf:f1:d2:3b:ef:de:48:3d:37:d6:
         8f:50:40:ea:b9:c2:8e:c7:3a:58:5f:1a:3c:d4:0b:b5:fc:cd:
         8e:49:17:5d:89:fb:b0:a0:4d:15:55:0f:91:9d:74:98:62:74:
         44:64:c1:c2:06:a6:49:ee:5e:c6:57:f6:63:3d:e1:3e:26:13:
         ae:c5:d1:60:15:e7:56:07:35:1b:d3:92:18:eb:ed:5e:46:f1:
         7b:45:a1:fc:97:fe:4c:d4:9c:d5:b0:1f:e6:d1:bd:6a:16:39:
         ab:4c:93:89:bc:51:ef:a2:13:03:55:41:14:0e:b3:f5:d9:45:
         41:66:0f:5a:33:58:4b:db:1a:fb:0e:04:c0:8c:c1:3f:a3:47:
         fc:3b:07:70:5e:de:d2:3d:8b:75:a0:6b:fc:28:5c:6f:fd:fa:
         16:57:b5:cb:cd:95:03:48:3a:f2:97:4e:7d:6c:61:df:f2:dc:
         39:33:e0:8b:17:33:7d:46:c1:f3:7b:5f:2e:e4:84:db:b1:62:
         f0:ff:c7:f9:e9:3a:aa:85:42:73:14:3b:60:fb:e2:8f:9b:51:
         72:67:3a:c4:90:8d:46:70:6f:e5:3e:55:ab:56:d4:e9:21:6f:
         f9:5d:56:ac:8c:a9:89:65:11:68:35:b2:e6:76:7e:36:56:b2:
         f1:a4:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:31:57 2025 by rpki-client