Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          kUafqrno/DYQBAvWiwYW9ull0uXTyqsRN3qZaC+g28I=
Subject key identifier:   35:43:7E:3B:EF:2A:03:DE:11:C1:71:94:A5:B9:33:63:FA:6D:47:D8
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       0196B7B56F7B1998868D1AB4AA8F459D833E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          02C1
Signing time:             Sat 10 May 2025 01:00:43 +0000
Manifest this update:     Sat 10 May 2025 01:00:43 +0000
Manifest next update:     Sun 11 May 2025 01:00:43 +0000
Files and hashes:         1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
                          2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
                          3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
                          4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: +CfXdn8OoDsJ4X2iVySDrJTnJslZ7jQy1R36wVy4TYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:6f:7b:19:98:86:8d:1a:b4:aa:8f:45:9d:83:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: May 10 01:00:43 2025 GMT
            Not After : May 11 01:00:43 2025 GMT
        Subject: CN=35437e3bef2a03de11c17194a5b93363fa6d47d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:76:10:57:0e:27:ee:62:51:b9:ef:f0:0e:
                    e8:5e:0e:b7:4c:8a:a6:2d:02:e5:81:03:3c:ae:6f:
                    51:8d:9d:6f:9f:c9:81:77:5c:a4:d7:7c:8a:18:77:
                    1a:20:45:03:d0:66:26:25:31:87:08:da:59:4d:ce:
                    2e:e5:1b:c4:3a:4d:ec:4a:e6:c2:4f:fc:63:80:44:
                    45:d6:77:af:6a:52:50:7c:cd:ef:8b:9c:56:94:af:
                    8e:e1:28:e7:0b:49:21:46:98:1d:e0:bc:55:ec:06:
                    08:df:b2:4f:50:10:e0:64:d7:54:ee:2f:f9:1a:1a:
                    2f:d2:41:c7:bb:dc:5f:95:54:a3:4c:3f:40:55:55:
                    c7:a6:a2:03:e6:e3:32:b7:42:8b:0a:16:2b:e8:56:
                    da:47:37:5c:bb:ae:fa:c0:dc:45:42:88:d0:4a:b6:
                    aa:9f:0d:73:43:56:c6:1c:28:0b:35:dc:c4:80:a9:
                    43:89:0a:b2:d8:da:95:48:5a:dc:a3:cd:26:aa:b0:
                    6a:75:92:95:5a:aa:3b:34:f3:b1:63:e8:92:f7:7d:
                    49:8e:9d:dc:da:5c:52:d9:45:4e:7b:cf:71:64:8f:
                    1d:9c:9b:70:cb:8c:55:09:2c:15:03:10:bc:23:35:
                    fb:f2:09:b5:fa:b1:72:28:52:07:f9:39:13:13:89:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:7E:3B:EF:2A:03:DE:11:C1:71:94:A5:B9:33:63:FA:6D:47:D8
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:dc:d8:33:94:92:70:7e:2f:00:50:92:39:3e:fb:f0:e7:
         33:d4:c2:9d:7c:02:63:af:4f:05:03:04:1a:5a:a2:5d:ca:d5:
         e9:97:9c:d0:a6:c4:a2:b4:46:f5:5f:d0:4a:22:15:9e:87:fb:
         6e:14:40:db:ba:96:23:4b:f0:51:70:70:5a:48:64:f5:e4:be:
         a9:2a:fc:6c:23:73:3d:0d:0f:18:4a:d8:93:ec:49:71:44:28:
         f0:d1:74:f7:5a:ec:b9:88:0d:7d:13:06:94:40:5d:57:17:ea:
         6b:3f:da:b0:8d:71:43:d2:37:e6:44:7b:59:9f:6b:24:2b:ac:
         69:61:39:45:28:c8:ae:04:46:1d:97:67:b4:db:9f:b0:7e:0d:
         45:3d:61:c4:71:a1:2f:61:9e:ca:d7:d9:2a:da:7a:4f:e7:10:
         d8:9c:e8:8f:99:19:1b:01:5f:b8:cb:b2:a3:57:53:c9:b8:63:
         12:a3:b0:32:2c:ed:69:36:35:c9:8b:8b:3f:7d:ca:66:2d:8c:
         ae:87:21:33:46:16:5d:47:5e:61:fc:87:c5:9d:0b:8e:c5:66:
         a4:c9:6b:2b:f6:a4:76:fe:75:ce:ae:39:5c:7a:62:da:67:11:
         61:53:3b:f6:3e:6c:f5:f1:92:38:03:d3:36:81:db:45:50:45:
         b8:65:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:13:10 2025 by rpki-client