Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File:                     uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier:          1YK3jTAJsiK87IS9bg+MOSfQdw2BRT1Rr6iaG8xZIq0=
Subject key identifier:   25:6C:0C:30:AE:67:53:B0:8B:21:EC:84:43:CB:77:82:4C:84:00:8B
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer:       /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial:       0196BF6F1F67574A4D800E971DC851C57794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 13:00:52 +0000
Manifest this update:     Sun 11 May 2025 13:00:52 +0000
Manifest next update:     Mon 12 May 2025 13:00:52 +0000
Files and hashes:         1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
                          2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: 786GzWYEgj9i/cEUzLd2qJieTC4fT19+1TlyG9o7ATI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:1f:67:57:4a:4d:80:0e:97:1d:c8:51:c5:77:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
        Validity
            Not Before: May 11 13:00:52 2025 GMT
            Not After : May 12 13:00:52 2025 GMT
        Subject: CN=256c0c30ae6753b08b21ec8443cb77824c84008b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3d:d7:07:89:f8:9c:c3:45:74:71:0c:be:a7:
                    9c:aa:76:02:8c:e4:e1:f1:cc:78:16:8b:ce:1c:60:
                    96:eb:b7:6e:3c:82:f7:48:2d:b7:9b:79:1a:21:b1:
                    8c:12:56:6a:cc:90:92:48:ce:b2:6b:cd:e6:ba:d7:
                    9b:3f:92:9c:71:32:fd:87:a0:1c:b6:d2:5e:16:df:
                    0f:ce:5a:32:b3:a3:28:f6:77:1b:79:89:89:68:bc:
                    e7:b4:4c:8e:33:62:f7:b1:91:91:ea:55:3a:ef:5d:
                    33:9a:ee:d4:7f:87:bf:da:3d:e6:c4:e8:3d:f5:21:
                    66:10:75:21:93:ca:8f:44:f0:7c:d2:d3:86:57:b4:
                    a5:d0:57:9f:7e:e3:03:db:5f:7d:8c:5c:7e:f0:46:
                    44:0c:7a:81:91:7d:ee:d7:d3:64:e7:2a:45:d9:49:
                    2e:95:3e:d5:95:e2:94:27:93:9f:a2:6b:5d:5e:87:
                    da:d5:bd:f5:3e:54:5a:13:4a:9e:19:b2:6c:24:fc:
                    68:9e:51:5a:e0:7b:30:52:c0:8f:6c:05:f7:cc:81:
                    56:80:51:7b:7e:cc:b0:ec:9e:df:3a:ae:5d:06:93:
                    19:e6:29:5c:cc:4a:8e:96:58:ca:06:6d:a1:6c:ca:
                    1c:14:d6:1a:43:0c:a3:16:00:60:b1:1e:8b:a7:d6:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:0C:30:AE:67:53:B0:8B:21:EC:84:43:CB:77:82:4C:84:00:8B
            X509v3 Authority Key Identifier:
                keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:38:79:cf:5e:89:23:f2:46:6a:31:2a:98:2f:6c:63:2d:fd:
         20:de:db:ed:20:10:41:5d:f9:e4:82:03:84:00:69:97:ef:ee:
         c8:68:4c:d4:db:fd:d3:88:e2:cb:ab:58:80:d7:60:54:5b:a8:
         1a:32:e1:ff:30:e5:a9:b3:ef:8e:4e:8f:4e:2f:e7:44:65:5a:
         97:7a:71:02:dc:36:b2:f1:e2:5d:f1:8a:4f:b5:60:a2:cf:67:
         32:60:e6:c9:01:69:ab:fe:49:16:87:dd:7e:2c:8a:b7:59:6a:
         f1:bd:1a:9a:36:1e:d8:c5:1c:2a:cf:2b:20:13:76:ea:ac:32:
         b3:5c:93:9c:c9:68:82:b1:66:6d:8f:54:83:c4:13:bd:01:32:
         9e:ab:c2:28:27:cf:f0:66:f7:9f:76:b0:29:2f:e0:33:ca:4a:
         14:98:47:7b:22:4c:6f:f8:cf:27:16:c2:de:7d:de:d9:9d:19:
         b8:a0:a5:b2:08:cf:83:75:ef:b6:2f:dc:68:31:b2:05:24:7c:
         08:4a:7e:1a:7d:87:84:aa:6c:08:c5:71:f5:38:62:6d:1f:2f:
         86:1a:6c:04:d9:cc:53:b8:7c:2c:e6:8c:7c:e7:7d:7f:f0:2b:
         38:68:54:56:bc:cd:23:9c:1e:8c:f2:32:f0:7b:46:eb:e0:48:
         70:5c:3d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bx9nV0pNgA6XHchRxXeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTlhMzM5ODFlMzRiMmFlNTA1ODZlMzA0OGM2NjNhMmM2
Yjg1ODYwHhcNMjUwNTExMTMwMDUyWhcNMjUwNTEyMTMwMDUyWjAzMTEwLwYDVQQD
EygyNTZjMGMzMGFlNjc1M2IwOGIyMWVjODQ0M2NiNzc4MjRjODQwMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz3XB4n4nMNFdHEMvqecqnYCjOTh
8cx4FovOHGCW67duPIL3SC23m3kaIbGMElZqzJCSSM6ya83mutebP5KccTL9h6Ac
ttJeFt8Pzloys6Mo9ncbeYmJaLzntEyOM2L3sZGR6lU6710zmu7Uf4e/2j3mxOg9
9SFmEHUhk8qPRPB80tOGV7Sl0FeffuMD2199jFx+8EZEDHqBkX3u19Nk5ypF2Uku
lT7VleKUJ5OfomtdXofa1b31PlRaE0qeGbJsJPxonlFa4HswUsCPbAX3zIFWgFF7
fsyw7J7fOq5dBpMZ5ilczEqOlljKBm2hbMocFNYaQwyjFgBgsR6Lp9b1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVsDDCuZ1OwiyHshEPLd4JMhACLMB8GA1UdIwQY
MBaAFLsZozmB40sq5QWG4wSMZjosa4WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUt
NjA2MGM0OGRhODM3LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUtNjA2MGM0OGRhODM3
LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjh5z16J
I/JGajEqmC9sYy39IN7b7SAQQV355IIDhABpl+/uyGhM1Nv904jiy6tYgNdgVFuo
GjLh/zDlqbPvjk6PTi/nRGVal3pxAtw2svHiXfGKT7Vgos9nMmDmyQFpq/5JFofd
fiyKt1lq8b0amjYe2MUcKs8rIBN26qwys1yTnMlogrFmbY9Ug8QTvQEynqvCKCfP
8Gb3n3awKS/gM8pKFJhHeyJMb/jPJxbC3n3e2Z0ZuKClsgjPg3Xvti/caDGyBSR8
CEp+Gn2HhKpsCMVx9ThibR8vhhpsBNnMU7h8LOaMfOd9f/ArOGhUVrzNI5wejPIy
8HtG6+BIcFw9vQ==
-----END CERTIFICATE-----
Generated at Sun May 11 19:17:06 2025 by rpki-client