Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File:                     UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier:          GwVhkB28sihojvhovcieF7eOrWWf7TufC68QNDEuNK0=
Subject key identifier:   0A:79:1A:90:64:ED:3E:52:2A:06:9D:36:EC:77:07:5B:75:82:35:A2
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer:       /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial:       0196A277C7DB5C59F6AB8A3E88969C0F1CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number:          1526
Signing time:             Mon 05 May 2025 22:01:20 +0000
Manifest this update:     Mon 05 May 2025 22:01:20 +0000
Manifest next update:     Tue 06 May 2025 22:01:20 +0000
Files and hashes:         1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=)
                          2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: HKP010UE+oF81KwrblB2aQScHMwdTsVB97Vj97lHrFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:c7:db:5c:59:f6:ab:8a:3e:88:96:9c:0f:1c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
        Validity
            Not Before: May  5 22:01:20 2025 GMT
            Not After : May  6 22:01:20 2025 GMT
        Subject: CN=0a791a9064ed3e522a069d36ec77075b758235a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:7f:b2:e6:81:8a:9e:ee:ce:b5:e6:fb:5a:
                    fa:4a:bb:32:64:78:e5:dd:86:7c:59:14:49:13:7a:
                    76:05:2c:dd:39:3d:d4:d8:c1:af:ec:32:79:83:c3:
                    22:40:5f:97:ff:3d:d5:36:b3:f0:0a:14:2b:19:43:
                    32:2a:10:12:32:bc:f3:27:64:ee:97:40:c9:ea:2d:
                    65:8f:dd:ce:44:30:6b:96:a9:db:ad:06:a0:db:6a:
                    96:fa:f4:d3:56:14:12:bf:3a:d1:8e:32:38:3f:49:
                    56:6a:88:09:b3:e2:5a:5a:b8:0e:17:eb:43:73:01:
                    43:a6:cf:d3:1a:df:a1:27:b6:31:65:0f:0f:42:31:
                    f3:b5:13:b7:3f:48:d7:7d:8b:90:8e:19:06:5b:1a:
                    00:66:f1:1d:33:1d:a3:3f:ac:29:63:a2:b7:a9:4d:
                    b5:98:9f:e3:2f:d7:e6:38:6c:ac:ad:08:82:59:50:
                    d3:de:aa:08:0f:66:e9:c2:0b:af:b9:d8:f0:17:a8:
                    a3:e6:52:c7:56:fd:55:a4:6d:17:f2:54:8a:9e:e9:
                    2b:90:95:99:3a:29:7e:fe:67:f8:bc:94:80:e4:01:
                    e1:58:1a:31:34:15:77:bf:06:73:e3:d5:e6:c1:9f:
                    65:79:6d:ca:7a:4c:fd:68:18:55:b1:b7:d0:aa:f2:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:1A:90:64:ED:3E:52:2A:06:9D:36:EC:77:07:5B:75:82:35:A2
            X509v3 Authority Key Identifier:
                keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:32:01:23:12:2c:3c:36:ab:b8:5b:a1:5f:99:44:69:3c:39:
         11:23:78:57:51:d0:58:17:1b:d2:16:cc:78:b4:79:3f:83:4a:
         89:9f:b4:64:ce:1e:5d:6a:9a:47:ef:25:44:23:a6:ef:36:42:
         4c:ca:a1:d8:2f:65:ff:fb:33:78:59:55:04:17:db:d9:ca:f6:
         5a:38:2b:31:7d:54:0a:f7:a1:8c:e8:ed:dd:28:7d:25:f4:51:
         9a:41:78:a6:8c:66:68:5e:37:eb:8f:fe:52:e4:9f:da:8c:0c:
         84:27:84:95:92:3a:d5:16:78:b6:30:a0:5a:4d:f9:20:9a:9c:
         6b:19:1e:ce:c0:3e:8c:54:70:03:7d:ae:b2:81:11:24:b7:e4:
         62:6c:b4:bb:64:e5:91:48:ba:7f:3c:e2:b9:04:0e:3a:d0:89:
         54:50:7a:a9:5f:91:92:c3:e0:9e:29:90:3d:f1:f0:48:b7:21:
         b2:65:05:fc:ff:d5:a4:66:cd:92:73:5f:51:b7:26:2c:1c:8c:
         8e:ed:3c:f4:43:27:c1:a5:b1:16:73:70:37:d4:2d:5f:30:e6:
         90:d2:1c:72:1d:1c:ab:b2:aa:41:41:93:b4:3b:9b:76:21:18:
         0b:de:96:45:c8:df:c4:82:0c:fb:0d:3c:f5:96:6c:6e:bc:1a:
         d4:94:f3:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid8fbXFn2q4o+iJacDxy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTU5YmYwNDMwODAzMDYzNTlmNWEyOTQ5MWY1NDViMDcw
NTFjMDUwHhcNMjUwNTA1MjIwMTIwWhcNMjUwNTA2MjIwMTIwWjAzMTEwLwYDVQQD
EygwYTc5MWE5MDY0ZWQzZTUyMmEwNjlkMzZlYzc3MDc1Yjc1ODIzNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR1/suaBip7uzrXm+1r6SrsyZHjl
3YZ8WRRJE3p2BSzdOT3U2MGv7DJ5g8MiQF+X/z3VNrPwChQrGUMyKhASMrzzJ2Tu
l0DJ6i1lj93ORDBrlqnbrQag22qW+vTTVhQSvzrRjjI4P0lWaogJs+JaWrgOF+tD
cwFDps/TGt+hJ7YxZQ8PQjHztRO3P0jXfYuQjhkGWxoAZvEdMx2jP6wpY6K3qU21
mJ/jL9fmOGysrQiCWVDT3qoID2bpwguvudjwF6ij5lLHVv1VpG0X8lSKnukrkJWZ
Oil+/mf4vJSA5AHhWBoxNBV3vwZz49XmwZ9leW3Kekz9aBhVsbfQqvJVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp5GpBk7T5SKgadNux3B1t1gjWiMB8GA1UdIwQY
MBaAFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTIt
MDE0YzcwOTc3ZDQ5LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTItMDE0YzcwOTc3ZDQ5
LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDIBIxIs
PDaruFuhX5lEaTw5ESN4V1HQWBcb0hbMeLR5P4NKiZ+0ZM4eXWqaR+8lRCOm7zZC
TMqh2C9l//szeFlVBBfb2cr2WjgrMX1UCvehjOjt3Sh9JfRRmkF4poxmaF4364/+
UuSf2owMhCeElZI61RZ4tjCgWk35IJqcaxkezsA+jFRwA32usoERJLfkYmy0u2Tl
kUi6fzziuQQOOtCJVFB6qV+RksPgnimQPfHwSLchsmUF/P/VpGbNknNfUbcmLByM
ju089EMnwaWxFnNwN9QtXzDmkNIcch0cq7KqQUGTtDubdiEYC96WRcjfxIIM+w08
9ZZsbrwa1JTzAQ==
-----END CERTIFICATE-----
Generated at Tue May 6 07:48:03 2025 by rpki-client