Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File:                     UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier:          oxKWc5b2CcARW9YmJ5cFVmMb+RMjBz9MjzOYEyYlqA8=
Subject key identifier:   7E:0B:3A:05:0A:7E:47:56:C3:57:B3:4A:8C:F2:7E:5B:6E:1F:01:EE
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       0196BFDC67AE33421221E871AF4F594C7473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number:          0C18
Signing time:             Sun 11 May 2025 15:00:14 +0000
Manifest this update:     Sun 11 May 2025 15:00:14 +0000
Manifest next update:     Mon 12 May 2025 15:00:14 +0000
Files and hashes:         1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=)
                          2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: PEqLDNoaafjrxegCY3QcgxVa/tm6SCS6+d9xREPIQr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dc:67:ae:33:42:12:21:e8:71:af:4f:59:4c:74:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: May 11 15:00:14 2025 GMT
            Not After : May 12 15:00:14 2025 GMT
        Subject: CN=7e0b3a050a7e4756c357b34a8cf27e5b6e1f01ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:62:7c:c3:91:ec:8a:f4:a5:b4:11:2a:59:
                    78:36:6b:6e:9d:2b:d6:c6:0b:c8:ac:ca:5c:a7:0f:
                    93:79:ea:19:e3:32:c1:4e:eb:e2:cc:37:f2:36:21:
                    d5:56:e7:90:91:48:b1:b6:72:68:cc:74:1d:21:fa:
                    85:ab:f8:fa:a4:f2:36:5a:1e:5d:d0:7f:51:43:d9:
                    dc:5c:d7:35:05:87:a2:b9:ed:6a:d1:01:c8:e6:07:
                    d9:be:49:3e:37:58:75:80:85:cf:e3:2b:f9:37:25:
                    fa:6a:da:a8:12:87:9a:66:fc:59:73:2a:2c:e4:75:
                    16:ea:b9:69:c8:48:d9:f4:ce:8a:a2:a9:98:f4:8e:
                    49:8b:9b:2b:2a:cd:0c:39:77:9d:2a:41:0c:9c:67:
                    b9:47:43:92:37:44:64:0b:75:50:01:58:0f:7e:9d:
                    bb:31:01:e7:04:f6:75:ad:8b:86:69:6e:3f:47:bd:
                    12:8d:61:64:64:12:31:23:2e:35:21:9a:a6:0a:9b:
                    8f:ed:a6:59:ec:f8:11:b1:d0:1f:48:4e:5c:3e:d6:
                    5a:bc:b7:ca:b1:38:d7:d1:af:54:2b:2f:c8:70:18:
                    e7:1e:25:78:68:e2:de:c6:d2:3c:fe:d3:e1:71:82:
                    52:53:37:f1:8a:1c:62:6a:c4:37:57:e2:08:c8:e7:
                    c0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:3A:05:0A:7E:47:56:C3:57:B3:4A:8C:F2:7E:5B:6E:1F:01:EE
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fc:74:78:b6:7f:2c:a0:3e:ab:d6:b2:48:88:6d:bc:74:16:
         6d:00:03:f7:03:34:1e:df:1d:e3:be:99:26:ea:f1:01:67:de:
         c5:b6:24:37:f0:77:75:b1:36:b8:e3:43:da:09:ee:df:27:27:
         c2:68:80:e3:92:3c:ad:c3:b6:d3:c2:08:af:b2:e8:67:b2:06:
         42:a6:ce:46:3f:58:34:f6:3c:d7:c2:8e:59:1f:4a:03:ae:d3:
         43:01:29:38:31:dd:17:dc:63:4c:dc:e4:46:10:31:4d:70:f3:
         dd:11:37:a5:77:28:6b:f6:94:af:7c:5c:de:a6:13:c0:fe:c6:
         25:20:44:bc:ab:a0:d1:b3:79:16:15:20:2e:2c:17:ff:9d:ce:
         af:98:cf:0e:b7:a4:3d:54:73:61:f2:08:bf:26:d2:6f:3d:91:
         dc:07:eb:d4:5e:3e:ee:ce:04:0c:1e:d6:5b:91:de:a1:23:87:
         a4:2a:fd:1f:25:78:fa:47:ae:3f:d1:a3:ec:71:9f:dd:8c:4a:
         af:52:e6:30:64:e1:e8:0f:3d:d2:e8:b7:25:29:2f:de:6b:97:
         9a:30:e2:cc:49:e9:5f:ff:c4:67:99:55:0c:c5:ce:1f:9e:a4:
         0b:6d:a4:f1:b0:5a:48:fc:40:39:f9:90:17:35:8b:e0:cd:cc:
         60:69:47:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/3GeuM0ISIehxr09ZTHRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjIwNDUzODY5NjlkMTFjNzQxYzNiNTQ1ZTAyYTAwYzEy
NTJmNzEwHhcNMjUwNTExMTUwMDE0WhcNMjUwNTEyMTUwMDE0WjAzMTEwLwYDVQQD
Eyg3ZTBiM2EwNTBhN2U0NzU2YzM1N2IzNGE4Y2YyN2U1YjZlMWYwMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEBifMOR7Ir0pbQRKll4NmtunSvW
xgvIrMpcpw+TeeoZ4zLBTuvizDfyNiHVVueQkUixtnJozHQdIfqFq/j6pPI2Wh5d
0H9RQ9ncXNc1BYeiue1q0QHI5gfZvkk+N1h1gIXP4yv5NyX6atqoEoeaZvxZcyos
5HUW6rlpyEjZ9M6KoqmY9I5Ji5srKs0MOXedKkEMnGe5R0OSN0RkC3VQAVgPfp27
MQHnBPZ1rYuGaW4/R70SjWFkZBIxIy41IZqmCpuP7aZZ7PgRsdAfSE5cPtZavLfK
sTjX0a9UKy/IcBjnHiV4aOLextI8/tPhcYJSUzfxihxiasQ3V+IIyOfAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4LOgUKfkdWw1ezSozyfltuHwHuMB8GA1UdIwQY
MBaAFFHyBFOGlp0Rx0HDtUXgKgDBJS9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEt
M2I4MmU0M2NmMjkzLzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83M2MxNWEtMzUyYi00YzA5LTlhZjEtM2I4MmU0M2NmMjkz
LzEvVWZJRVU0YVduUkhIUWNPMVJlQXFBTUVsTDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/x0eLZ/
LKA+q9aySIhtvHQWbQAD9wM0Ht8d476ZJurxAWfexbYkN/B3dbE2uOND2gnu3ycn
wmiA45I8rcO208IIr7LoZ7IGQqbORj9YNPY818KOWR9KA67TQwEpODHdF9xjTNzk
RhAxTXDz3RE3pXcoa/aUr3xc3qYTwP7GJSBEvKug0bN5FhUgLiwX/53Or5jPDrek
PVRzYfIIvybSbz2R3Afr1F4+7s4EDB7WW5HeoSOHpCr9HyV4+keuP9Gj7HGf3YxK
r1LmMGTh6A890ui3JSkv3muXmjDizEnpX//EZ5lVDMXOH56kC22k8bBaSPxAOfmQ
FzWL4M3MYGlHng==
-----END CERTIFICATE-----
Generated at Sun May 11 23:09:23 2025 by rpki-client