Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File:                     uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier:          0Wj9Fkb9Z99TsubXcYCl22ohpbKxKw7Q2OnBzUf+62E=
Subject key identifier:   27:8E:6F:5B:7C:65:60:A3:BD:DC:78:22:AE:7B:8F:3E:6C:65:32:3E
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer:       /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial:       0196BB92A6D4D79461D5673F5F0483727EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number:          0D33
Signing time:             Sat 10 May 2025 19:01:12 +0000
Manifest this update:     Sat 10 May 2025 19:01:12 +0000
Manifest next update:     Sun 11 May 2025 19:01:12 +0000
Files and hashes:         1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
                          2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: l8Elm1VNNaQgHFfY/HiCvpO2IcL7xILzus4tFvxTXoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:a6:d4:d7:94:61:d5:67:3f:5f:04:83:72:7e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
        Validity
            Not Before: May 10 19:01:12 2025 GMT
            Not After : May 11 19:01:12 2025 GMT
        Subject: CN=278e6f5b7c6560a3bddc7822ae7b8f3e6c65323e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:3e:50:b5:27:de:6c:97:59:03:f2:1d:de:
                    d9:5f:0b:6e:56:40:44:8a:a3:33:d6:db:93:38:70:
                    b8:df:37:d0:20:e9:87:32:59:3d:2a:b7:c5:b4:62:
                    21:bc:32:6c:0c:bc:12:1b:e3:22:18:7c:be:08:52:
                    ae:34:e8:88:ae:97:7a:33:88:f3:58:ed:4e:8a:1f:
                    3a:e2:12:95:19:14:0c:9b:ca:14:df:7d:46:77:e0:
                    b8:e7:43:f0:8b:fe:db:64:8f:66:eb:90:d2:6f:dd:
                    66:bd:f3:51:b9:14:87:43:ac:92:4f:7f:c6:97:b3:
                    af:8c:9a:d6:42:e0:5b:aa:86:ad:a3:90:d1:25:93:
                    53:c6:33:c4:73:ac:2f:b4:c7:a6:23:a7:01:8d:c6:
                    bc:c1:a2:3a:81:cb:46:9b:c3:10:98:12:19:67:ad:
                    66:26:ad:5e:78:8b:e4:8b:8d:3d:db:c7:74:9e:8b:
                    51:64:48:30:b0:a2:4e:98:92:d0:75:f9:bf:b9:a4:
                    9f:06:72:a8:f3:0e:9a:e3:8b:4c:78:f4:f4:84:5a:
                    ae:4b:69:43:95:19:72:1a:d2:55:f9:c7:b9:97:01:
                    da:47:99:fe:dd:5b:01:ab:af:aa:e4:cd:4d:0b:12:
                    40:ad:e4:01:69:27:e9:25:89:fd:ed:6d:10:15:8d:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:6F:5B:7C:65:60:A3:BD:DC:78:22:AE:7B:8F:3E:6C:65:32:3E
            X509v3 Authority Key Identifier:
                keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:21:00:b4:df:52:f4:54:09:a7:72:c1:a2:38:d4:66:f7:d7:
         31:ca:8a:ca:39:85:eb:3f:51:63:bb:aa:1c:ea:6d:84:0f:7b:
         74:2f:9e:96:68:68:74:06:f9:3b:02:48:37:56:8a:85:7a:b0:
         72:2f:07:5d:3c:2e:6f:e4:d3:ae:02:cc:45:34:99:22:e7:5a:
         01:4d:4a:39:75:0f:5a:82:7a:1e:03:7b:07:7a:f9:8b:cf:0f:
         4f:08:41:a6:1d:62:aa:2e:7b:87:d4:10:00:7e:23:f6:24:d3:
         38:d6:50:57:d0:2f:96:19:e9:81:a0:96:93:76:c8:13:7d:e7:
         11:17:f1:47:ca:9e:83:a7:6a:be:b3:37:57:62:da:91:fd:18:
         20:69:71:20:d9:0c:ae:11:1e:b4:4f:2b:57:d5:45:59:cc:e6:
         99:9a:dd:5d:92:92:d6:15:3c:e8:ee:b4:da:8e:05:44:e7:4a:
         38:95:64:38:74:ca:9c:4f:17:93:50:35:52:41:e9:dd:9a:40:
         03:b2:2b:7a:2b:be:cd:94:a7:f3:e7:35:dc:19:a6:0f:02:c8:
         1c:b5:67:03:c2:95:00:d8:69:21:66:70:95:cc:d6:4c:da:f0:
         9a:57:b1:6f:8c:59:13:46:3e:63:df:56:c7:ad:20:b6:b4:ed:
         07:a0:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:27:44 2025 by rpki-client