Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File:                     UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier:          FjCvVj2WgO0hvVOak2+lSLFD+K3OkbfTW5MJMEmW5tM=
Subject key identifier:   5A:E9:AB:F0:7D:DB:AB:DF:23:51:8F:44:B3:88:90:C8:4A:70:8C:CE
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer:       /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial:       0196C4CBE3ACD5D4A3B6DD461E50E0CC2EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number:          03F1
Signing time:             Mon 12 May 2025 14:00:18 +0000
Manifest this update:     Mon 12 May 2025 14:00:18 +0000
Manifest next update:     Tue 13 May 2025 14:00:18 +0000
Files and hashes:         1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
                          2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: bliaSzJLoGZIgxOv8N4z/6Sio7Ry65TsW25uEDSp+EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cb:e3:ac:d5:d4:a3:b6:dd:46:1e:50:e0:cc:2e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
        Validity
            Not Before: May 12 14:00:18 2025 GMT
            Not After : May 13 14:00:18 2025 GMT
        Subject: CN=5ae9abf07ddbabdf23518f44b38890c84a708cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:1f:83:45:3b:fe:94:c8:7a:fd:51:45:1e:
                    19:25:ca:9b:7e:32:a1:f2:37:75:f0:c8:ae:26:a3:
                    f3:9b:6e:b6:18:62:8c:85:78:99:3f:47:9c:99:2f:
                    dc:9b:bd:81:ee:ae:22:80:2d:fc:f0:47:ee:23:39:
                    90:88:39:cb:c3:ee:a5:09:e9:a3:03:d0:76:c0:eb:
                    c4:9f:46:52:a5:65:5b:ae:6d:fd:41:b7:c0:34:bb:
                    5a:ce:be:86:8d:ba:6f:dc:f4:7e:70:79:fa:35:04:
                    8d:3f:54:f1:1b:84:46:9a:cc:d6:e7:d9:d1:3c:1a:
                    54:6b:00:33:f6:65:da:b0:8f:87:27:47:35:6d:2b:
                    c9:1a:56:fc:02:04:78:18:1d:9b:e9:f4:f4:6f:58:
                    aa:c2:35:55:f6:db:c1:ee:b1:3f:16:da:8e:05:45:
                    c7:91:d7:ec:a1:14:16:2e:9b:bd:3b:d5:59:cf:88:
                    8c:d3:0f:5a:97:86:2c:12:f1:51:06:0c:cd:08:4d:
                    fc:14:3c:a4:d6:6c:9e:a9:ff:e6:a2:23:3b:69:df:
                    a5:74:19:80:63:9a:2b:1f:86:37:29:3b:e4:ee:23:
                    92:2e:14:c1:8d:1e:6e:ff:bc:97:ea:26:96:6e:96:
                    91:b8:0a:4a:48:3c:96:c1:27:4b:07:ee:18:d9:5b:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:AB:F0:7D:DB:AB:DF:23:51:8F:44:B3:88:90:C8:4A:70:8C:CE
            X509v3 Authority Key Identifier:
                keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:4c:ea:7e:9a:45:10:c7:5c:94:fb:ac:02:45:7e:b4:a8:
         4e:bf:2c:3e:f8:66:73:0c:61:79:69:64:0c:b8:a0:02:eb:7a:
         43:14:89:74:1b:89:d9:2c:96:f2:dc:de:78:ee:f1:c3:c9:d5:
         fc:e2:3e:4c:52:43:50:d8:5d:5b:e2:fa:80:50:0a:e2:0b:86:
         8d:7e:1a:5c:2b:fa:cf:f3:52:89:06:00:3b:9c:a4:c4:8a:2b:
         4e:43:23:1b:8d:51:c4:2d:36:15:f5:b1:27:f3:4d:21:05:b0:
         06:63:d5:4b:f9:24:9a:0d:06:80:da:1c:53:5c:c9:42:b6:50:
         a8:66:b9:e5:dc:59:8d:af:51:21:33:2d:3c:f8:b9:2b:03:f7:
         31:37:a7:03:98:9e:66:d6:8a:01:be:1f:1d:26:b3:28:7b:c7:
         de:14:fd:a3:f7:e5:3d:28:cf:cb:21:48:04:d6:d3:ae:aa:99:
         44:2d:be:66:38:80:46:47:cb:59:08:1b:e9:16:8c:57:42:42:
         19:53:1f:d1:b1:a3:68:ba:70:47:f9:e5:5d:a6:ba:de:3e:3c:
         d1:c0:df:b3:b4:73:37:23:b8:7e:a2:51:df:34:82:e3:d6:ae:
         50:e0:86:a8:72:f6:cf:fc:83:ce:f1:af:ac:88:0a:66:24:e7:
         33:fc:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:51:39 2025 by rpki-client