Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File:                     txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier:          bDrQg74c9/wZVZ51JXnGgA784weipB4bp538HuiLM8M=
Subject key identifier:   BC:AF:3E:2B:0C:A8:91:C9:82:6D:7E:49:88:3B:23:FB:9A:84:5F:5E
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer:       /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial:       0196E11EF294D4BE49803550E04076B62F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number:          1108
Signing time:             Sun 18 May 2025 02:00:23 +0000
Manifest this update:     Sun 18 May 2025 02:00:23 +0000
Manifest next update:     Mon 19 May 2025 02:00:23 +0000
Files and hashes:         1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
                          2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: BSwvP9XkvWQNUVL15t7tG98ZG50FLv3TjeOmD2UEmko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 21:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e1:1e:f2:94:d4:be:49:80:35:50:e0:40:76:b6:2f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
        Validity
            Not Before: May 18 02:00:23 2025 GMT
            Not After : May 19 02:00:23 2025 GMT
        Subject: CN=bcaf3e2b0ca891c9826d7e49883b23fb9a845f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:ec:45:b7:97:3b:dc:e1:04:fc:fe:68:b7:
                    b1:77:a6:1a:e9:5c:dc:7e:e0:ea:b5:31:ca:b9:d9:
                    ce:16:b7:89:1b:5d:8f:c5:67:9a:e5:97:db:18:bf:
                    9d:38:e2:1a:8c:80:b5:57:39:2c:8a:90:96:35:17:
                    27:65:7f:f2:3a:2f:97:f6:6a:5a:4f:f9:01:6a:b1:
                    c6:cf:2a:1e:5f:70:1f:e6:02:b1:54:aa:75:bd:6c:
                    05:13:4d:92:95:bf:b3:86:f4:db:f1:b5:94:b4:39:
                    f3:5b:1f:b4:18:97:44:fe:60:66:50:d0:cd:6f:96:
                    5c:c7:65:81:2b:ef:86:eb:78:63:40:66:7e:37:b7:
                    18:68:03:be:1e:68:41:c6:43:49:22:8c:2c:ff:7a:
                    d9:a1:6d:f3:33:4e:64:ee:10:09:20:3b:c3:9d:4d:
                    46:f4:08:11:b9:82:08:59:b5:bb:9d:8c:04:63:11:
                    78:ac:25:82:33:47:a2:17:2f:4e:6f:d7:35:25:be:
                    c3:da:08:e9:0f:63:19:1f:57:f2:f8:4a:92:67:cd:
                    d0:52:f0:39:8c:18:4b:b5:f0:c2:25:54:33:9b:c0:
                    ff:57:0b:5f:11:0a:d8:84:76:67:f3:e3:11:94:3a:
                    30:02:39:e7:57:3d:51:71:c8:74:71:7d:c6:72:ad:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:3E:2B:0C:A8:91:C9:82:6D:7E:49:88:3B:23:FB:9A:84:5F:5E
            X509v3 Authority Key Identifier:
                keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:f8:72:e2:ef:4a:c6:c6:ff:0c:00:1d:96:dd:26:7c:8e:
         49:cd:be:72:3e:85:c6:4b:ea:3b:85:95:f6:dc:96:1f:63:b2:
         d8:35:1f:3f:10:52:0f:82:b9:61:6d:97:b9:34:b3:a2:64:f3:
         80:0c:2a:37:61:a2:a9:30:02:00:ca:98:d2:8c:3e:88:86:69:
         4e:8d:54:ab:fd:30:d4:6f:33:69:11:89:c7:c1:39:b4:30:ed:
         2c:5a:90:58:41:b2:d8:4f:e9:bc:6a:7e:3d:d3:c4:b3:47:05:
         52:5b:cc:45:ff:38:03:3a:65:9b:82:50:d4:9a:fe:2c:9f:06:
         f0:e8:f7:c2:6d:cc:32:38:d3:31:1d:2c:65:69:6c:7b:fa:a8:
         60:fb:a2:39:3a:11:23:e6:10:e6:0b:18:64:48:26:25:59:d8:
         3a:55:17:41:18:73:de:ae:95:94:b7:51:b1:af:82:97:bc:ad:
         c7:c7:c0:d9:c8:f0:74:7b:d6:9c:0b:d9:df:46:f8:ff:93:d9:
         2a:31:51:e9:12:f9:68:fe:e2:e5:1b:b6:44:02:3d:1c:0b:d2:
         13:ce:73:4e:2d:ad:10:7e:ba:91:b3:84:f8:f4:27:7c:08:7b:
         91:21:4b:24:94:9e:99:e9:87:f3:0c:fc:d7:7e:fb:bb:da:4e:
         08:fb:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:47:23 2025 by rpki-client