Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          5v4zVRSGwG4u+MQU88ZQXrs3R1lxYixOLORuAgXAAGc=
Subject key identifier:   58:A5:98:65:CC:99:21:64:12:2F:2F:3D:EE:79:31:DA:04:03:BE:7E
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       0196CA60B6C89A8A9C27661BB2316C698D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          0BB6
Signing time:             Tue 13 May 2025 16:00:57 +0000
Manifest this update:     Tue 13 May 2025 16:00:57 +0000
Manifest next update:     Wed 14 May 2025 16:00:57 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: fu6o6XCUCSGV/XmxrFOI+AdBCewtBG6r41skpx+6vzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:60:b6:c8:9a:8a:9c:27:66:1b:b2:31:6c:69:8d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: May 13 16:00:57 2025 GMT
            Not After : May 14 16:00:57 2025 GMT
        Subject: CN=58a59865cc992164122f2f3dee7931da0403be7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:5a:df:82:8e:7f:9d:dc:e8:e3:5b:8a:73:
                    63:db:9b:b3:f3:f4:61:3d:7d:97:60:b7:00:e1:92:
                    d4:a0:32:a8:c6:ca:60:50:c9:3f:a6:1f:c6:a3:fd:
                    6b:b9:32:9f:e4:64:75:c2:56:c5:4a:b1:99:14:e1:
                    27:34:e6:19:78:ce:7d:09:b5:eb:a7:d0:98:f6:c7:
                    df:98:77:29:e2:73:02:9f:db:8a:e0:b4:ed:44:a7:
                    73:88:04:de:2d:31:2f:75:b2:b8:3f:8e:d2:b0:7b:
                    d1:e6:f3:1f:a4:ee:40:cb:5d:01:ee:1e:ae:14:bc:
                    61:6e:e8:9a:02:e5:db:e4:76:99:aa:e2:8b:59:ce:
                    88:79:71:62:c9:1e:66:b4:67:48:00:ab:f1:22:e6:
                    81:12:71:90:b9:ed:2b:0a:c9:d5:de:a7:70:54:ab:
                    81:a4:8b:63:1b:d3:c1:d6:d8:64:e7:aa:27:82:81:
                    2e:9e:9c:5e:fd:ae:cb:cb:a3:fb:b3:90:25:aa:b0:
                    17:c7:40:9d:2b:25:88:97:6c:ed:f4:a9:8a:48:4c:
                    6c:35:43:33:0f:78:c7:f9:a9:77:81:1b:de:84:68:
                    17:25:27:a4:2a:be:ec:d5:86:28:64:da:9d:56:a9:
                    57:23:34:f2:11:93:17:e2:da:bf:ec:58:42:27:65:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A5:98:65:CC:99:21:64:12:2F:2F:3D:EE:79:31:DA:04:03:BE:7E
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:3a:34:12:6e:15:c8:35:d5:0f:76:8a:77:24:64:0c:3f:
         c9:6c:c6:22:60:db:2b:dd:c1:e5:f6:eb:2e:85:da:b6:6d:31:
         db:49:d6:8d:60:b9:28:40:d9:08:2f:6c:d2:7f:2a:f1:b4:c3:
         49:a2:cb:71:83:8e:51:00:92:b7:ee:ca:93:7d:9d:ba:25:0a:
         18:77:bf:53:1e:98:08:ae:74:27:d0:64:eb:52:15:67:48:52:
         d1:53:fa:dd:82:3a:e8:57:e9:95:f4:97:64:d5:f1:5a:88:cb:
         cd:ae:85:b8:8d:4d:18:8c:d7:ea:6a:ee:16:1c:49:3e:e1:ec:
         24:08:d2:55:ae:09:e1:34:63:ab:01:61:21:89:3e:3e:86:6a:
         1f:b9:a3:0f:b3:ff:be:5a:6f:b5:36:15:d3:09:ae:1a:d6:ee:
         1d:72:25:4d:49:76:ec:bc:a5:60:ea:3c:31:19:76:f7:7b:eb:
         d9:28:2d:3a:a0:fc:8b:0d:37:05:e0:a1:ce:a2:14:4a:88:bd:
         20:e3:08:25:e0:c3:ee:ae:65:c3:28:0e:a1:9b:0a:7c:11:51:
         0b:1d:29:13:fb:21:1b:7f:c4:47:76:40:fd:f4:82:1b:69:f1:
         11:ef:cf:65:68:ec:f1:df:13:d0:59:70:35:38:0a:7c:fc:9c:
         a6:13:d2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:54:01 2025 by rpki-client