Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          u60vFtJObiNgBwdkSW1PMfdUHapMSsJupphOh7LNL4E=
Subject key identifier:   5E:10:99:0D:90:9F:26:F2:B0:6A:56:CC:63:A0:F4:FE:E7:C2:4D:E9
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       0196C5A87535DB336743EBE8F987CFA9DDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          140F
Signing time:             Mon 12 May 2025 18:01:13 +0000
Manifest this update:     Mon 12 May 2025 18:01:13 +0000
Manifest next update:     Tue 13 May 2025 18:01:13 +0000
Files and hashes:         1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
                          2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
                          3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: 8qjDUXtNU95/rg5M6kqc7/GrOFoHU1O+2cbP+O5Eczc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a8:75:35:db:33:67:43:eb:e8:f9:87:cf:a9:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: May 12 18:01:13 2025 GMT
            Not After : May 13 18:01:13 2025 GMT
        Subject: CN=5e10990d909f26f2b06a56cc63a0f4fee7c24de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:df:7c:7f:5b:20:e8:67:82:f0:9b:c8:e9:
                    0c:43:de:3a:b7:42:4c:f2:a1:be:0d:4f:d0:ad:fb:
                    3d:20:47:2d:da:06:45:f4:a1:cb:9b:b1:56:2a:42:
                    5b:a7:55:b8:bc:16:86:2d:02:c5:6c:a8:17:53:c9:
                    dc:ab:dc:d5:eb:4c:ef:1f:f6:a4:9f:09:db:38:2a:
                    15:71:64:68:91:0e:89:39:ba:78:56:e1:46:a3:27:
                    e6:d5:28:3e:d2:6b:e9:9e:d5:30:99:16:20:ae:cc:
                    8e:ac:c2:32:0b:f3:28:e9:6e:2b:da:c2:91:00:d6:
                    3b:b8:4e:4c:ce:d0:80:21:de:c9:29:1d:ab:71:75:
                    11:bf:06:80:85:b6:d0:b1:10:c7:22:ee:77:5b:d3:
                    e2:29:b1:e2:8c:ef:e5:95:6d:97:ff:cc:70:04:bd:
                    41:49:11:c6:62:da:e5:e2:06:1c:d5:17:c5:ad:02:
                    93:2e:c4:44:0c:95:56:4e:d2:71:90:6e:be:ca:b9:
                    e8:c6:39:a1:7e:c2:f3:7c:c9:db:0f:05:04:be:f1:
                    3d:96:81:c6:d2:32:6c:ab:70:02:ac:69:c9:c1:e5:
                    4d:61:6d:16:74:61:ba:7c:fa:df:72:92:04:51:54:
                    6d:8d:3d:ff:82:32:bb:b4:8c:a4:08:aa:e4:0f:7c:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:10:99:0D:90:9F:26:F2:B0:6A:56:CC:63:A0:F4:FE:E7:C2:4D:E9
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:b9:2a:85:c7:1d:ed:5e:10:11:5c:cb:a2:c3:66:0c:81:
         a7:e8:e2:08:34:0d:f1:8d:c1:ce:91:1d:68:e5:21:61:34:6b:
         41:e2:c7:30:be:d2:21:4d:e0:c3:db:07:a8:e9:9d:4e:fe:d1:
         df:67:96:3e:96:c1:cb:de:13:08:37:8e:9a:1a:5a:2c:32:28:
         a7:be:51:63:97:47:78:28:47:4d:dc:96:5d:98:25:c2:e5:77:
         9a:c2:19:9d:57:21:23:90:db:99:7b:7c:b3:6b:2a:b2:0a:93:
         da:6d:1f:6e:b2:b5:54:5b:73:1e:dd:39:a4:22:57:9a:bd:ff:
         a8:09:01:91:5c:25:57:87:f0:88:0b:f5:19:10:74:ef:54:dc:
         f3:f4:81:cb:19:f8:48:f1:f5:23:10:c4:c9:f7:67:3c:28:35:
         08:13:26:57:1d:f2:e1:de:56:d3:63:3f:30:fc:fd:b0:85:c4:
         8e:87:cd:b0:03:07:f0:d3:73:9b:f8:f2:67:cc:fb:14:92:d9:
         69:b6:2a:dd:6e:ad:11:f2:31:e0:bc:2f:d5:ac:42:c8:f7:c2:
         43:57:ad:5f:a0:6a:8a:0b:c0:25:b7:7e:89:32:b7:b1:7a:70:
         57:63:fe:fa:28:02:08:82:73:4c:0e:b3:f7:3d:6f:76:c0:9c:
         ce:a2:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:58:15 2025 by rpki-client