Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File:                     uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier:          abFqWgqVkOIIEkqvwG4RyFa1Qva3Up65F6k+3BrCRs4=
Subject key identifier:   06:59:1C:E8:B4:F7:1C:96:B6:F0:47:EC:7A:C7:87:FA:EA:B0:D7:3B
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer:       /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial:       0196CCBC932347A86DFA0863272BD4FF2C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number:          0C5B
Signing time:             Wed 14 May 2025 03:00:32 +0000
Manifest this update:     Wed 14 May 2025 03:00:32 +0000
Manifest next update:     Thu 15 May 2025 03:00:32 +0000
Files and hashes:         1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
                          2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: of6RCb2VuJumh/n5amB1abYvWEour7BU2JmxTldgWuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:93:23:47:a8:6d:fa:08:63:27:2b:d4:ff:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
        Validity
            Not Before: May 14 03:00:32 2025 GMT
            Not After : May 15 03:00:32 2025 GMT
        Subject: CN=06591ce8b4f71c96b6f047ec7ac787faeab0d73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:ad:72:f5:d4:cb:5c:6f:4a:26:ae:80:19:
                    e2:36:89:5f:19:96:e5:4b:b6:ec:ab:2e:66:d7:9f:
                    cc:e1:2d:45:fe:b4:cb:f1:ca:65:e2:ed:a1:af:1d:
                    ae:07:cd:32:78:ed:22:d8:d5:19:19:ed:d8:0d:c6:
                    8d:07:4b:61:d0:93:e1:b8:9f:c7:f3:f2:e3:ba:0e:
                    d3:58:19:75:55:b8:94:2b:0e:0a:2b:b8:cb:ca:d4:
                    f5:d5:ab:ba:fb:93:e7:08:7d:58:9c:4a:92:39:4a:
                    8f:27:b1:39:58:28:53:95:7f:64:d0:79:14:a0:f1:
                    5b:a7:3b:36:2c:ee:18:c1:9a:cc:11:90:36:a6:85:
                    5d:6b:ca:de:27:ca:cb:b8:d9:9f:a2:24:7e:00:a1:
                    ff:74:55:03:24:d8:15:2a:cd:d5:e8:24:91:df:9a:
                    f0:ef:c4:1f:c0:45:3d:b7:f1:62:cb:13:ae:dd:af:
                    3e:5c:7d:77:dd:35:b7:61:12:2d:98:a4:ed:cf:a6:
                    c1:6f:2a:f3:88:ff:85:87:9f:e0:ac:1d:27:68:8a:
                    0f:a7:d0:75:f6:7a:4a:83:a1:56:dd:86:a4:a6:ec:
                    cc:23:48:1a:7b:3c:4d:fb:9e:c5:cb:86:d8:f0:f8:
                    90:6e:14:9d:c5:c9:de:56:9c:78:c2:71:93:32:75:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:59:1C:E8:B4:F7:1C:96:B6:F0:47:EC:7A:C7:87:FA:EA:B0:D7:3B
            X509v3 Authority Key Identifier:
                keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:e2:65:13:b4:bb:4f:a4:31:fb:ec:fc:e9:28:7c:bf:9e:
         2b:dd:45:f7:14:00:f9:43:20:18:ba:47:62:cf:16:a1:03:1a:
         53:42:f7:67:36:97:61:52:7a:31:12:d4:15:31:dd:60:23:a6:
         e6:f8:3a:79:51:08:26:ef:72:77:0b:8a:36:9f:44:a0:47:4b:
         09:12:8d:33:e0:05:bc:a3:92:d8:93:eb:ce:bb:e7:51:75:41:
         3c:13:e8:ec:f0:e8:50:96:b1:c7:cc:79:0b:57:6e:00:f7:a7:
         fa:7c:e8:35:cb:1a:d0:66:58:1d:65:32:6d:46:5e:d9:4a:9e:
         b0:e6:45:43:11:70:20:d4:aa:44:80:99:23:54:81:aa:7a:59:
         55:c1:89:5a:3a:16:f9:a1:7b:9c:8f:2a:47:b1:98:ea:c1:95:
         8c:3f:b6:94:f8:ae:d9:f0:e6:ee:85:52:5d:ef:d2:c9:04:d2:
         99:34:36:90:0c:15:ff:43:10:ca:98:2a:e8:e1:b8:91:37:a0:
         c8:86:ef:59:35:0a:ac:59:05:e7:27:04:d6:6b:6d:28:b6:4c:
         43:21:ea:5c:bc:92:68:40:67:60:ed:86:ed:fd:60:4d:c8:6d:
         d9:3b:13:31:49:b5:7a:eb:9a:05:f4:34:c6:57:72:c6:49:cb:
         d7:dc:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:48:28 2025 by rpki-client