Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File:                     U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier:          s6GXpaQpgu5mgR/WSisr5WapF4bWvVwJ4CO8PPjpjqU=
Subject key identifier:   5F:A8:0B:F8:4C:E7:2B:C2:30:2B:B8:F3:5E:D1:48:AB:58:62:1A:60
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer:       /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial:       0196C5DE8272876801E12C0596C469B668E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number:          1279
Signing time:             Mon 12 May 2025 19:00:15 +0000
Manifest this update:     Mon 12 May 2025 19:00:15 +0000
Manifest next update:     Tue 13 May 2025 19:00:15 +0000
Files and hashes:         1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
                          2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: CxeTADLetdedLAqBvsyUgkh8GNDUX3qgtqaSz3G5Ezs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:82:72:87:68:01:e1:2c:05:96:c4:69:b6:68:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
        Validity
            Not Before: May 12 19:00:15 2025 GMT
            Not After : May 13 19:00:15 2025 GMT
        Subject: CN=5fa80bf84ce72bc2302bb8f35ed148ab58621a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:42:31:44:59:9c:e4:22:82:62:8e:69:ee:
                    bb:d1:cc:44:de:4c:59:5a:2b:7d:70:c8:6f:ac:8d:
                    f6:9b:34:21:1a:ac:41:7b:b0:d5:6c:92:60:d8:1c:
                    c0:c5:89:f1:63:14:7d:6a:18:d8:b2:f9:fd:14:3e:
                    76:0d:6c:95:ae:15:87:6e:18:da:49:28:f6:93:af:
                    d6:9b:ca:38:cb:b8:3d:99:25:ff:e7:df:96:ce:15:
                    5f:7c:a1:18:98:6c:91:2e:7e:e8:ff:15:ac:91:b0:
                    c5:bd:d3:e8:b6:0f:0c:f7:60:7c:b4:0d:99:9c:32:
                    d3:7e:86:b1:f7:56:5c:01:c0:67:35:2b:af:5a:83:
                    86:5b:0f:67:60:50:5a:01:a1:19:e3:bd:24:54:cc:
                    d2:63:b2:c0:70:38:83:2f:bb:90:d1:be:e5:d6:73:
                    07:4b:b8:b6:72:7b:89:86:17:0a:bb:6c:eb:a1:d4:
                    24:cb:43:50:6f:a7:e0:0d:f5:a4:2d:5c:08:a0:ee:
                    c9:03:18:93:e5:d4:50:60:fb:1f:e6:2b:d1:09:11:
                    aa:1f:22:9f:51:e2:ed:0d:23:a6:73:66:fe:ab:37:
                    f3:ca:b8:4a:20:47:cc:d6:a8:d4:5b:eb:b9:9c:13:
                    b9:25:c1:b9:e8:f0:fd:11:ea:74:38:54:44:3b:71:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A8:0B:F8:4C:E7:2B:C2:30:2B:B8:F3:5E:D1:48:AB:58:62:1A:60
            X509v3 Authority Key Identifier:
                keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:07:c4:ef:fb:47:a2:72:87:0c:c3:24:ea:04:71:ae:8a:
         0e:52:3d:f1:64:73:ef:8e:4b:8b:a3:5d:1e:41:a6:25:bb:f2:
         5b:62:d2:1a:e0:23:db:97:3f:bb:ec:4b:58:84:4a:72:6d:f1:
         e7:a4:b2:61:05:51:14:62:f1:af:c4:7c:fa:44:69:d4:47:22:
         86:33:77:86:54:34:d4:54:ab:18:64:1d:74:ab:9d:b2:85:a5:
         d8:52:b8:4d:9d:e7:b4:d6:57:37:8a:68:45:d1:64:a6:5a:41:
         91:5a:b1:b7:28:48:8b:47:d2:06:2f:5c:c5:0c:9a:e8:87:50:
         01:85:43:db:c5:e3:37:89:5d:12:b7:7c:f1:84:e2:54:5c:8c:
         8a:4e:17:c8:95:58:9f:3d:27:bd:dd:d8:b4:80:53:4a:e1:05:
         c2:e0:02:c3:b8:0a:7b:cb:ed:9d:9f:16:8c:e7:a6:b8:61:17:
         74:3c:2d:9c:69:0d:fe:e0:c9:25:d4:ad:f4:a0:41:ec:a0:9c:
         73:4a:88:ec:7f:a9:62:91:90:c9:36:73:79:0e:9e:de:6a:51:
         5f:23:e8:33:75:dd:63:38:ae:7a:84:61:ff:ac:6b:22:c4:e3:
         69:e8:6d:94:c2:01:66:62:45:98:e5:71:9a:ef:2b:96:15:9d:
         f6:a6:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:46:44 2025 by rpki-client