Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File:                     UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier:          RxSEMCe+e3TVZupyAjvBQCcbarsVdysfFMLEH19Yzco=
Subject key identifier:   0E:2B:01:24:01:59:32:95:7E:82:90:0A:4A:C9:99:DC:61:0E:80:85
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer:       /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial:       0196BFA58BD96AF7C7256E8DE28E290FD6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number:          0CFE
Signing time:             Sun 11 May 2025 14:00:19 +0000
Manifest this update:     Sun 11 May 2025 14:00:19 +0000
Manifest next update:     Mon 12 May 2025 14:00:19 +0000
Files and hashes:         1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
                          2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: HScCEx+z1QslL9hgE3n+dz6VYwybBBiJN7ekuXBlQyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:8b:d9:6a:f7:c7:25:6e:8d:e2:8e:29:0f:d6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
        Validity
            Not Before: May 11 14:00:19 2025 GMT
            Not After : May 12 14:00:19 2025 GMT
        Subject: CN=0e2b0124015932957e82900a4ac999dc610e8085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:91:7c:2d:da:a3:4c:fc:b1:7f:b1:32:13:
                    56:1b:91:15:bd:de:8f:89:6a:7b:b9:4b:51:b6:3d:
                    4b:61:55:52:c0:30:c0:60:a2:4e:42:33:51:57:db:
                    60:f6:22:b7:1a:bd:df:bd:f2:41:fe:c3:c4:38:1c:
                    e2:e8:ef:f1:dc:e9:37:77:f2:52:4d:ca:18:94:22:
                    3e:ce:20:15:f6:20:b8:d1:1e:7e:95:6a:94:5c:f1:
                    07:10:d6:26:25:e2:26:8e:f4:89:a2:d9:0a:35:55:
                    59:c3:ff:e6:f1:c0:f5:7a:3c:2e:a2:42:ca:ae:26:
                    ea:87:05:d7:c6:bf:3b:d4:d7:c9:7a:56:a5:24:06:
                    5b:e2:33:1a:17:eb:5e:be:e3:63:87:31:91:1c:22:
                    c8:6b:fc:f6:d6:b7:3a:fb:ea:03:44:f6:62:a6:6c:
                    26:a7:46:14:e4:15:1d:d8:d5:06:65:2d:ca:ac:a8:
                    42:8e:c2:1c:71:a8:29:1c:76:5b:12:e3:60:82:1f:
                    ad:6f:08:6b:1f:63:31:7d:1d:5d:44:80:23:e8:ef:
                    67:73:73:99:2a:1d:e7:be:a3:17:f0:ad:8f:78:ac:
                    c6:51:25:32:f0:1f:54:0a:ed:df:f8:0e:03:f5:11:
                    c1:d3:c4:56:72:63:91:1b:a1:1f:aa:2c:75:a9:f4:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2B:01:24:01:59:32:95:7E:82:90:0A:4A:C9:99:DC:61:0E:80:85
            X509v3 Authority Key Identifier:
                keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b2:9e:96:0b:ca:bf:a6:b6:4e:0f:73:79:fc:da:68:2d:4b:
         91:e7:48:83:5a:7a:23:cf:bc:d3:a2:84:1e:a9:f9:c8:f0:2a:
         85:b8:73:e4:3c:d5:be:8a:88:5d:b9:5d:14:60:cb:29:fd:48:
         ef:c3:43:e1:4a:47:b6:d4:1a:49:31:95:05:49:a4:85:60:ed:
         35:fb:fc:bb:c2:05:35:6b:1c:02:f7:e7:5a:1e:45:99:66:1d:
         d6:ef:ea:b3:c0:d1:0f:56:94:fc:0d:5d:c0:80:ed:18:64:b0:
         40:a8:28:e6:d2:a6:9a:71:b0:85:fb:fc:a5:2d:58:80:eb:b0:
         66:19:11:30:0f:76:e9:18:63:62:c5:8f:54:ca:90:fc:a0:24:
         2f:0d:02:e7:6e:f6:d4:56:29:d4:13:8d:29:b9:bb:de:9d:07:
         7e:79:26:7b:a5:dd:50:db:2a:8a:38:e5:04:89:85:8e:5c:2f:
         3a:b0:15:5c:79:d4:8c:6b:69:c8:e4:2f:cd:7d:92:c4:6f:5e:
         4f:7d:cb:87:9f:64:b4:18:80:2d:76:0d:76:dc:82:22:17:0c:
         ff:7c:9c:35:14:b7:a5:51:2b:ba:48:3d:cb:0d:03:94:6c:da:
         f6:82:a2:2c:0b:e5:75:ab:b5:38:22:31:7e:1f:c6:a3:33:b5:
         a8:dd:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:18:28 2025 by rpki-client