Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
File:                     UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json)
Hash identifier:          6qeBcCea9oHG2tnbIt3q1soBbMgv3OG2M56WuTWfwx4=
Subject key identifier:   B4:F1:5C:B6:93:62:FD:2E:1B:3E:CF:75:8D:65:43:F2:0E:6C:FF:2D
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Certificate issuer:       /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial:       0196B823654E64D7E721D900ED7EE8C83F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
Manifest number:          0C08
Signing time:             Sat 10 May 2025 03:00:49 +0000
Manifest this update:     Sat 10 May 2025 03:00:49 +0000
Manifest next update:     Sun 11 May 2025 03:00:49 +0000
Files and hashes:         1: QrLxpXcKKlTKVqNWJjfnZ5zQego.roa (hash: JlU34SAKSUABE+VJCPnsQJhW9HL/rg4ccciJ5TxRUSY=)
                          2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: NFtwuONr5cvVx9OhjVy6fPlz9L0SkSDZpC4IuPMH/ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:65:4e:64:d7:e7:21:d9:00:ed:7e:e8:c8:3f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
        Validity
            Not Before: May 10 03:00:49 2025 GMT
            Not After : May 11 03:00:49 2025 GMT
        Subject: CN=b4f15cb69362fd2e1b3ecf758d6543f20e6cff2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:d4:fd:98:03:16:7f:5d:38:68:2c:53:18:
                    6e:5a:af:ec:78:e1:42:cb:be:6d:56:e1:1e:14:8d:
                    03:86:e0:6f:b5:6a:c8:b8:37:12:07:22:3c:95:96:
                    1c:b7:e6:3d:be:7e:a7:ae:c2:ac:a3:65:57:8a:de:
                    52:b6:ea:ea:b3:ab:51:36:25:dc:df:ef:b6:c5:8f:
                    4e:b1:45:77:e4:7d:4c:fa:43:f5:c4:ee:d3:7e:56:
                    7c:b1:42:a4:8c:11:eb:c0:f6:f9:83:7b:15:45:74:
                    61:72:96:88:50:d5:b2:4e:73:3e:24:74:0c:7a:7f:
                    98:af:ac:61:b7:42:22:44:7c:50:28:5d:cc:fe:1f:
                    1d:0d:2c:bf:93:d7:55:0c:97:e7:82:11:0c:e1:9d:
                    84:51:4f:b3:10:c2:d6:36:c8:48:bf:fe:a9:3c:88:
                    20:66:cb:b9:e8:6d:99:2f:5a:bc:fb:32:fb:1e:91:
                    6e:41:0f:e8:0e:0b:35:d1:f2:8b:16:e2:43:50:ea:
                    bd:79:81:70:2b:9d:02:32:ea:6b:5f:41:03:6d:b7:
                    5a:7f:50:10:9e:5e:bb:f9:0a:19:87:63:11:be:61:
                    e9:19:ef:53:2d:d9:0f:19:d4:63:2b:e6:96:17:1d:
                    ee:49:2c:38:9a:72:48:be:9d:a8:5c:8b:6f:3a:96:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F1:5C:B6:93:62:FD:2E:1B:3E:CF:75:8D:65:43:F2:0E:6C:FF:2D
            X509v3 Authority Key Identifier:
                keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:07:81:49:54:f5:5b:e5:5f:2e:55:d9:43:ad:a9:1f:c0:71:
         fb:7f:88:fb:3a:1e:31:a9:9a:02:fa:ab:fb:39:35:36:d6:85:
         87:e8:8d:5c:b7:3f:e9:fd:0e:ca:c4:28:b3:42:10:d6:ba:e3:
         c0:cd:52:8f:a5:1e:5d:c6:e3:e3:d2:fd:5f:b8:b8:20:b0:e2:
         4a:ec:0b:be:1b:f2:46:ae:20:5a:b4:f7:b0:35:07:60:2a:19:
         0b:a1:b3:10:f1:5a:04:7c:f5:1d:34:f3:4d:79:78:03:52:e5:
         fb:8f:42:d9:c8:e9:91:d8:d1:02:16:ce:35:a5:b5:0c:da:ab:
         27:a5:ea:09:8c:c5:2c:c5:a7:68:67:d3:ac:21:1f:f5:b7:e0:
         fa:ad:30:1b:5f:52:e0:d4:70:0e:a5:0e:f4:8e:7c:d6:9a:0a:
         31:6f:78:54:13:fd:cc:c2:4c:d8:f5:d7:0c:2d:a3:60:23:c3:
         ba:aa:8b:a6:b8:54:6a:37:cd:4d:44:d8:ea:16:90:e4:12:bb:
         f0:f2:5a:d5:54:1e:d0:a3:69:ea:77:db:12:a4:6a:d1:45:26:
         ed:b8:97:f5:c4:9d:cc:f4:1e:8f:52:14:cc:fb:ca:f7:77:14:
         38:63:87:5f:ff:67:65:c9:16:79:40:59:51:db:18:6c:31:e5:
         9b:f2:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:22:59 2025 by rpki-client