Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File:                     UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier:          j3/X/gx8H0cxOHrr2nlK7Nxbh2FQk8J1W+8dKL3sx0g=
Subject key identifier:   62:EE:D6:59:FD:3D:CE:9B:70:1C:4A:33:52:BF:03:15:76:8D:56:A9
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer:       /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial:       0196C9BB3DEE0A7A0BCFBB00A29580687029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number:          153B
Signing time:             Tue 13 May 2025 13:00:13 +0000
Manifest this update:     Tue 13 May 2025 13:00:13 +0000
Manifest next update:     Wed 14 May 2025 13:00:13 +0000
Files and hashes:         1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
                          2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: gWtkU5p4AJh0IpXh9kde2ZUl3vqouzKUEduh9KuBS7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:bb:3d:ee:0a:7a:0b:cf:bb:00:a2:95:80:68:70:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
        Validity
            Not Before: May 13 13:00:13 2025 GMT
            Not After : May 14 13:00:13 2025 GMT
        Subject: CN=62eed659fd3dce9b701c4a3352bf0315768d56a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ca:55:3e:ba:c9:60:be:8e:32:88:4b:33:95:
                    3c:58:2d:cb:33:59:d9:05:7c:f4:a6:b3:8f:48:0c:
                    88:28:c6:93:1e:6b:02:00:ba:b2:53:f7:5c:51:1e:
                    0e:c6:32:3c:37:c0:dc:e5:d5:82:a2:52:96:7c:3c:
                    d2:eb:7b:fc:f8:73:b1:11:16:46:1a:e6:66:5e:e6:
                    ea:df:42:77:76:de:63:97:ad:28:c7:fc:be:3c:26:
                    f7:58:02:b2:39:1f:0b:d0:50:3f:28:bd:17:dc:64:
                    c4:f6:0d:cf:20:b6:3c:ac:73:df:6c:7f:b3:54:6b:
                    9e:43:5f:24:7c:ac:de:a7:d0:57:1b:1b:c2:00:6e:
                    21:4c:c6:db:b5:09:e5:8a:82:29:e9:9c:95:69:db:
                    6f:70:77:27:f9:e6:68:04:31:25:69:57:ca:31:b3:
                    27:82:55:c8:70:44:90:7a:2e:55:28:c0:c7:f2:54:
                    64:2a:e2:1b:dd:b5:42:23:25:34:ea:69:38:3e:cc:
                    ec:f4:56:5b:33:de:69:ca:f7:50:22:14:73:28:de:
                    bf:6d:6a:fa:f7:9a:a0:e4:b4:a7:a3:f2:7a:3c:c0:
                    2d:3f:51:ae:3e:f5:2e:a1:64:9c:a1:a1:f6:8a:e2:
                    32:5c:df:3f:b1:e4:5e:77:23:eb:09:b7:8f:e3:ff:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:D6:59:FD:3D:CE:9B:70:1C:4A:33:52:BF:03:15:76:8D:56:A9
            X509v3 Authority Key Identifier:
                keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:50:0c:ba:95:67:6c:de:c9:d0:4e:8e:6f:7b:eb:53:67:
         ad:84:fb:66:e7:04:99:cb:d8:4a:a9:07:3d:48:d8:6a:8e:45:
         1f:e8:61:ad:bf:05:24:bd:bf:32:6d:c1:e5:aa:89:24:4a:6a:
         8f:55:4a:44:c2:f5:e0:c9:85:c8:6a:42:bb:33:1b:ac:33:9b:
         15:b9:e8:c8:ff:e6:09:a6:95:5c:e2:26:23:0c:4e:5a:c5:bb:
         29:b7:d2:5f:a8:b4:5b:e6:4d:a3:ae:06:4d:1b:4c:1c:59:53:
         42:3d:91:fe:a5:fc:ba:16:dc:f1:68:7f:6f:f9:ab:be:10:11:
         51:ca:a1:fa:9e:f2:79:15:33:a2:37:9e:4b:39:47:7f:05:20:
         6f:b3:3a:c0:d5:83:5a:01:69:40:a4:35:5c:2a:3e:cc:02:a2:
         8c:dd:1a:e5:0f:30:c2:6a:49:cc:af:ae:d6:32:13:6e:59:99:
         e4:46:fc:6c:55:a5:e7:5b:fe:d1:50:46:09:aa:a1:2b:07:b7:
         21:cd:e4:f7:5f:56:ed:ee:bf:ec:d0:db:52:69:e3:e1:fd:b5:
         03:32:47:fd:79:ee:1a:8d:28:4a:b6:c0:d9:e9:78:e8:61:1a:
         0f:43:72:ed:e1:30:e1:b5:59:4b:2e:c9:e1:a1:c6:9a:04:bd:
         4e:1e:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:11:56 2025 by rpki-client