Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          /k7JnpqrY2p7Jyaxngkhry4gXDRNY55Y8PR2rkLiJ3k=
Subject key identifier:   4E:6B:E2:E0:45:CF:E9:F4:F4:5C:F6:73:BA:BA:55:1E:19:1A:10:E2
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       0196CD6179590D42BD430B13BBC33057C5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          0870
Signing time:             Wed 14 May 2025 06:00:39 +0000
Manifest this update:     Wed 14 May 2025 06:00:39 +0000
Manifest next update:     Thu 15 May 2025 06:00:39 +0000
Files and hashes:         1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: ZqdFRth6qEtx2VZNP5arHRto207blj4wzNhKKgTq5KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:61:79:59:0d:42:bd:43:0b:13:bb:c3:30:57:c5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: May 14 06:00:39 2025 GMT
            Not After : May 15 06:00:39 2025 GMT
        Subject: CN=4e6be2e045cfe9f4f45cf673baba551e191a10e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:cf:85:a0:ff:95:2e:25:cd:18:2c:21:01:
                    db:5b:f8:59:dd:92:a9:70:82:a3:f0:f6:c9:83:ea:
                    93:c4:59:06:e1:73:ce:57:1f:74:b0:7a:05:06:03:
                    64:c9:97:84:df:2d:7a:b7:de:ec:bf:1c:91:0e:f1:
                    99:cc:c0:78:41:e1:bb:8d:93:3d:3f:fc:3f:82:a7:
                    0a:cb:57:69:69:5a:46:ac:86:3b:bb:10:4c:55:02:
                    a6:65:8d:29:3c:71:45:6a:13:93:1e:14:b0:51:8c:
                    5a:e2:43:e0:16:d7:eb:a0:e8:44:33:d6:ea:b7:43:
                    9f:44:47:41:32:9e:39:d3:d2:0d:94:66:40:2c:88:
                    32:21:b5:25:f0:84:fd:7f:6b:f7:da:7e:18:63:c2:
                    5c:bf:7f:5f:76:b2:67:d0:4a:8b:f8:3c:21:76:84:
                    70:34:5f:ec:31:c1:37:8a:ea:31:d1:3f:20:36:81:
                    44:c6:5b:3e:d4:15:aa:2f:bc:d1:80:eb:63:d7:86:
                    ea:8a:83:d6:5f:7a:87:2d:e5:5c:f5:64:07:67:b6:
                    88:e5:64:a3:66:c8:a1:dc:ba:69:84:f1:63:91:24:
                    63:d3:63:16:f3:88:a3:08:78:1f:e0:aa:0f:ac:96:
                    f2:eb:e8:0a:0f:f8:ab:1d:e2:d3:9e:f2:74:28:08:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6B:E2:E0:45:CF:E9:F4:F4:5C:F6:73:BA:BA:55:1E:19:1A:10:E2
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fe:fe:59:97:18:47:46:74:cb:31:8a:db:d2:95:80:6a:c2:
         1d:23:12:f7:f5:b7:1a:fb:cb:aa:92:db:22:a7:d5:bc:68:30:
         91:9f:ef:e1:6c:d0:df:17:41:a6:1a:f3:23:99:51:10:bd:07:
         c6:53:7e:5d:30:b3:c3:28:a7:10:15:55:4d:b2:a3:83:ce:33:
         2d:31:2c:83:7f:55:e1:80:9e:a4:95:3c:78:89:d9:bd:2b:21:
         f9:5d:6c:95:b5:bb:eb:ce:cc:c5:04:56:9a:1f:e4:09:c1:b8:
         0e:47:ea:b9:61:df:f9:1a:9c:30:42:15:c1:4c:14:87:f8:d2:
         0c:bd:bd:0f:38:f9:b6:97:e8:59:c6:2f:1b:2c:09:71:65:8f:
         c7:bc:b9:19:0e:a9:e4:67:aa:ea:3b:24:9d:27:68:98:a0:e3:
         07:e8:33:21:38:b6:f7:30:eb:ef:e0:e9:54:d7:35:bd:a7:64:
         65:85:16:b9:51:9a:4c:60:14:52:95:82:66:fc:cf:dd:03:43:
         5c:76:9f:a5:1e:03:c6:8c:c9:41:4e:e0:9d:a1:90:78:e4:6c:
         7d:4d:da:69:36:9c:69:42:c6:2f:5d:f4:15:53:b8:e4:db:2c:
         00:c9:77:8a:6a:90:9e:df:d3:66:8a:e1:c1:e3:18:42:09:45:
         bb:e2:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:05:42 2025 by rpki-client