Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          PNk0lT4GRpMoz0kLS/Wk0z1Cs3We8kyOLd+XI7RzvvQ=
Subject key identifier:   19:07:28:1A:EB:8A:02:D9:6A:45:86:0B:0A:7A:E1:EC:9E:06:C5:3F
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       0196B17BEB9FA00625EE7F170CD59DCC6985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          0C8F
Signing time:             Thu 08 May 2025 20:00:10 +0000
Manifest this update:     Thu 08 May 2025 20:00:10 +0000
Manifest next update:     Fri 09 May 2025 20:00:10 +0000
Files and hashes:         1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: 6fMi50W70RKSSKT6JwQ5DKcG3ZoSwFz7YHi6WuwPfxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:7b:eb:9f:a0:06:25:ee:7f:17:0c:d5:9d:cc:69:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: May  8 20:00:10 2025 GMT
            Not After : May  9 20:00:10 2025 GMT
        Subject: CN=1907281aeb8a02d96a45860b0a7ae1ec9e06c53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:f0:53:c9:32:03:20:5e:9c:a3:a7:6a:ef:
                    c8:d2:55:e9:40:32:d1:2f:f3:98:7d:bb:1c:b9:45:
                    f3:29:0b:50:05:77:7e:9c:f1:dc:9b:a9:8a:fa:2a:
                    f1:37:ee:ef:02:64:9b:bc:85:43:e8:83:eb:1d:8d:
                    c8:19:ae:2f:26:d9:5c:ad:ef:ea:3b:95:06:34:c6:
                    9b:90:b0:05:95:ec:c0:9e:f9:7a:4f:ec:c4:3c:9b:
                    38:be:22:6d:46:cd:8d:53:29:57:29:f0:37:13:f1:
                    bf:9c:90:45:17:d3:75:9e:db:e1:dc:8b:99:bc:da:
                    67:02:75:20:b0:61:68:9b:6a:62:6f:45:98:f8:e3:
                    d3:82:4e:28:80:31:4b:f6:5c:82:87:dc:8c:0c:5e:
                    8e:8c:98:f6:04:30:5f:fb:be:2d:19:9d:a1:bf:1d:
                    b8:d7:af:ba:84:1b:92:fc:d5:cb:2e:04:4a:11:70:
                    4d:57:23:79:4b:8e:af:de:88:c2:78:d1:ca:ad:31:
                    2c:5f:69:ed:b5:01:56:af:30:d2:19:fe:0a:35:f6:
                    63:c0:83:ba:0b:f7:6e:48:9f:bf:8f:ae:2a:10:26:
                    d2:86:67:22:a5:9a:9a:55:99:0e:59:a7:aa:91:fb:
                    74:32:c6:2c:db:66:68:f2:51:cd:99:67:bb:b3:20:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:07:28:1A:EB:8A:02:D9:6A:45:86:0B:0A:7A:E1:EC:9E:06:C5:3F
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d6:08:24:92:44:db:9c:34:54:66:95:fc:e9:a9:3b:f7:4d:
         a8:a0:58:d1:f6:ea:06:d7:ac:ce:0a:28:7a:a0:3a:f4:6a:31:
         6f:34:c6:c8:f9:1f:ff:bd:de:f4:03:9c:54:5c:b3:32:c3:70:
         28:77:90:e0:02:af:80:47:66:de:e8:26:3a:92:01:03:b5:d8:
         47:6e:e0:71:1c:16:74:f6:09:9b:63:ab:89:fd:86:76:a4:15:
         d7:8c:20:e2:00:42:cf:c7:84:7f:63:f9:01:28:fd:17:a5:78:
         19:57:0e:67:d5:12:4e:b7:db:55:f9:ba:ab:0f:8d:ca:4b:e2:
         db:ab:63:b4:1f:22:1e:c5:be:61:37:2e:51:53:d2:e3:c9:83:
         48:9e:e2:50:da:30:c1:19:47:a8:d0:70:ae:1b:84:8d:82:9a:
         55:41:55:7c:57:b3:0d:1f:56:53:19:7b:37:5f:91:84:40:ab:
         22:51:8d:69:14:cc:c1:63:d7:5c:af:3e:12:f0:7f:ec:77:cb:
         7f:b4:11:c7:1c:b1:65:6c:1d:31:f7:52:49:1e:88:c6:ee:e2:
         3f:7c:75:bb:04:a4:b8:14:55:93:25:b9:d7:81:47:27:69:3a:
         0b:a6:ff:37:73:8b:37:b9:a4:b3:53:55:a2:ae:89:7f:6b:1e:
         dc:67:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:13:30 2025 by rpki-client