Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
File:                     UuZ47pYouTW-JXzsw_siiYOdnlw.mft (raw, json)
Hash identifier:          WgHXDNMMjIQR9/xGwPYKYX1Wlp0FsYaKfvZsKOb/BsI=
Subject key identifier:   8B:01:81:A2:C7:CF:9E:C7:31:39:15:C4:DC:47:FA:F1:8A:11:43:2A
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Certificate issuer:       /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial:       01969E2C19D00C2C64B91CD76C2249624418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
Manifest number:          0FBA
Signing time:             Mon 05 May 2025 02:00:12 +0000
Manifest this update:     Mon 05 May 2025 02:00:12 +0000
Manifest next update:     Tue 06 May 2025 02:00:12 +0000
Files and hashes:         1: UuZ47pYouTW-JXzsw_siiYOdnlw.crl (hash: Y7XvWjKQfeE2yINa8mW8SdH3JZnq8mkiXhdxSjV05w0=)
                          2: o4wNCL530KMA0YJs8iAz7IeQteo.roa (hash: CcyAmjc7Z+KPkDgKW61aNMPKh1esJ1MkO0axJUX/3rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:19:d0:0c:2c:64:b9:1c:d7:6c:22:49:62:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
        Validity
            Not Before: May  5 02:00:12 2025 GMT
            Not After : May  6 02:00:12 2025 GMT
        Subject: CN=8b0181a2c7cf9ec7313915c4dc47faf18a11432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:e0:6e:5a:b4:90:f2:8a:f4:7b:57:42:f5:
                    e7:b7:ee:9d:97:9c:7f:71:42:73:f5:66:16:bc:9e:
                    2a:7b:52:9f:0e:39:9a:2f:b1:28:de:af:b6:f1:00:
                    9d:1a:63:68:e8:94:3b:2a:06:b0:fc:db:8d:4b:30:
                    41:25:2a:2c:be:db:2a:f3:74:25:d2:06:fc:a6:35:
                    2e:c2:d7:52:23:e5:a8:bb:52:7c:32:d3:3d:7b:17:
                    c2:87:b0:ad:d9:61:6e:fd:8b:51:78:ef:29:9b:98:
                    be:f8:ef:09:68:42:4b:4d:20:3b:0b:3c:63:c4:f3:
                    4c:a6:dc:97:10:7b:0c:c6:4d:94:9c:22:f8:3a:c5:
                    fb:f6:65:35:2b:4f:8a:3a:02:ef:a2:ab:8d:13:65:
                    78:af:92:01:11:5f:f8:38:86:13:47:de:b2:f3:9e:
                    25:62:1a:b0:11:cb:d5:9f:18:32:95:43:8c:55:3c:
                    e7:f7:3f:19:79:fb:ab:f3:f0:1d:09:50:ff:8f:73:
                    8c:2e:7f:c9:91:15:aa:4e:36:d9:03:a5:50:24:a8:
                    98:a3:db:df:46:18:fb:6c:15:db:23:e0:de:63:95:
                    67:db:80:7f:fc:8c:47:fa:cb:e2:e4:97:ed:aa:da:
                    b5:47:86:21:f8:2d:82:ea:ec:2c:b9:53:0e:c9:fc:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:81:A2:C7:CF:9E:C7:31:39:15:C4:DC:47:FA:F1:8A:11:43:2A
            X509v3 Authority Key Identifier:
                keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:48:0e:78:8a:10:55:80:d9:45:07:0a:fa:f4:e7:1a:2f:ea:
         73:fd:06:0f:b1:ce:23:ba:87:38:80:c9:df:2b:7a:c4:72:ad:
         92:14:a8:c8:c1:8e:05:e0:7e:d5:a9:59:ac:b0:6a:5e:b8:e0:
         71:6a:41:e4:43:1d:0e:94:22:00:9e:70:f4:99:d1:ce:30:a2:
         1f:c8:b0:d2:a4:7c:fb:23:81:ed:be:e7:95:ef:fb:25:c6:88:
         6d:74:ae:d0:6e:91:0a:f8:b3:18:cf:6a:fb:77:09:26:ec:76:
         6a:5c:39:77:62:ec:55:85:96:a3:8b:d2:4f:83:15:24:1d:82:
         17:61:ea:25:3b:fa:ad:40:a1:67:d9:d1:4c:49:e3:fd:13:d4:
         52:e2:ad:e1:e7:61:16:aa:60:e9:8c:fa:25:f5:82:12:8b:b7:
         f4:9c:5c:67:0f:8c:11:5b:9c:d3:21:12:9e:1e:1b:40:2b:2f:
         ab:9c:f6:2e:e0:50:a8:60:d2:b0:c9:ae:8a:6c:f6:bf:eb:cb:
         4e:0d:27:01:cb:c0:39:97:12:3c:67:d2:be:9b:49:31:11:0a:
         59:53:d3:06:09:13:1d:bb:85:f1:60:61:87:16:16:1e:55:fe:
         14:ef:f4:db:20:44:2e:03:73:1e:e5:5d:50:20:df:af:b9:d1:
         93:46:fc:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLBnQDCxkuRzXbCJJYkQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTY3OGVlOTYyOGI5MzViZTI1N2NlY2MzZmIyMjg5ODM5
ZDllNWMwHhcNMjUwNTA1MDIwMDEyWhcNMjUwNTA2MDIwMDEyWjAzMTEwLwYDVQQD
Eyg4YjAxODFhMmM3Y2Y5ZWM3MzEzOTE1YzRkYzQ3ZmFmMThhMTE0MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUbgblq0kPKK9HtXQvXnt+6dl5x/
cUJz9WYWvJ4qe1KfDjmaL7Eo3q+28QCdGmNo6JQ7Kgaw/NuNSzBBJSosvtsq83Ql
0gb8pjUuwtdSI+Wou1J8MtM9exfCh7Ct2WFu/YtReO8pm5i++O8JaEJLTSA7Czxj
xPNMptyXEHsMxk2UnCL4OsX79mU1K0+KOgLvoquNE2V4r5IBEV/4OIYTR96y854l
YhqwEcvVnxgylUOMVTzn9z8Zefur8/AdCVD/j3OMLn/JkRWqTjbZA6VQJKiYo9vf
Rhj7bBXbI+DeY5Vn24B//IxH+svi5Jftqtq1R4Yh+C2C6uwsuVMOyfzTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsBgaLHz57HMTkVxNxH+vGKEUMqMB8GA1UdIwQY
MBaAFFLmeO6WKLk1viV87MP7IomDnZ5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82Y2IzOGMtZGQwNS00YWU4LWE4YjEt
NGU5N2VkNGU0ZWQ2LzEvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82Y2IzOGMtZGQwNS00YWU4LWE4YjEtNGU5N2VkNGU0ZWQ2
LzEvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUgOeIoQ
VYDZRQcK+vTnGi/qc/0GD7HOI7qHOIDJ3yt6xHKtkhSoyMGOBeB+1alZrLBqXrjg
cWpB5EMdDpQiAJ5w9JnRzjCiH8iw0qR8+yOB7b7nle/7JcaIbXSu0G6RCvizGM9q
+3cJJux2alw5d2LsVYWWo4vST4MVJB2CF2HqJTv6rUChZ9nRTEnj/RPUUuKt4edh
Fqpg6Yz6JfWCEou39JxcZw+MEVuc0yESnh4bQCsvq5z2LuBQqGDSsMmuimz2v+vL
Tg0nAcvAOZcSPGfSvptJMREKWVPTBgkTHbuF8WBhhxYWHlX+FO/02yBELgNzHuVd
UCDfr7nRk0b8xg==
-----END CERTIFICATE-----
Generated at Mon May 5 10:16:47 2025 by rpki-client