Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File:                     UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier:          lqJENroR5W2d3xTq6kSq3NZeGCyc6a4XLmp1aNyolQA=
Subject key identifier:   80:4C:29:8F:C9:8D:BA:7A:47:17:C9:BD:A5:92:A3:13:6C:E3:20:AE
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer:       /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial:       0196CC85AD06387863865BE0376D11CE113E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number:          1006
Signing time:             Wed 14 May 2025 02:00:34 +0000
Manifest this update:     Wed 14 May 2025 02:00:34 +0000
Manifest next update:     Thu 15 May 2025 02:00:34 +0000
Files and hashes:         1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
                          2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: fw6zKDKGDA+qrN2EdC2K2OYwQb9+RInKhhd8BVEYDFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:85:ad:06:38:78:63:86:5b:e0:37:6d:11:ce:11:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52386e520478e625be1d6282d216b05912f83874
        Validity
            Not Before: May 14 02:00:34 2025 GMT
            Not After : May 15 02:00:34 2025 GMT
        Subject: CN=804c298fc98dba7a4717c9bda592a3136ce320ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:56:41:02:ca:c6:66:65:8c:21:64:44:0f:
                    a2:d0:b2:4e:ce:0a:ab:fb:f5:f8:b3:76:22:12:74:
                    f0:02:c8:7f:b2:19:e1:ba:e8:1f:62:80:5a:5a:4b:
                    18:41:8b:db:5a:ff:03:7b:97:f5:94:94:0a:48:45:
                    a4:ca:dd:e2:3e:0a:6e:da:3b:01:13:24:59:0c:39:
                    90:a7:0d:2d:5b:57:5e:ba:73:33:4b:41:40:37:ff:
                    5e:63:94:eb:7b:89:89:fa:d1:66:7f:36:32:06:7a:
                    5e:4a:d9:1f:40:70:9f:7b:0e:b3:0e:9c:49:09:2b:
                    a8:b9:bd:ad:a2:24:eb:32:48:a8:b4:63:f7:c7:c9:
                    02:0d:df:45:97:bc:08:68:17:0e:39:25:03:ea:5f:
                    4d:c1:90:32:d9:cb:d3:e9:3e:94:52:52:2a:6c:17:
                    02:49:aa:0f:50:c0:95:65:0e:59:a0:2f:cb:5c:22:
                    18:25:31:e5:85:3f:c1:05:ee:61:50:3d:bb:33:cb:
                    d8:76:e4:fa:4d:61:6a:7f:7d:7e:f7:8f:7d:f2:b9:
                    b7:6c:cc:b5:0c:5a:b1:82:78:9d:d1:24:11:ff:5c:
                    98:70:03:12:d2:86:f4:d0:92:4b:e1:c9:d3:80:20:
                    47:69:f9:c6:5c:3b:ed:c7:07:46:7f:18:b6:e2:10:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4C:29:8F:C9:8D:BA:7A:47:17:C9:BD:A5:92:A3:13:6C:E3:20:AE
            X509v3 Authority Key Identifier:
                keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:ca:95:39:ec:a4:4d:4e:e2:fe:0a:ec:43:12:d9:0c:15:
         58:b4:2e:88:f1:7c:03:42:ba:ee:f1:3d:4f:ca:b4:1d:c4:af:
         75:e9:2c:75:d8:1d:00:34:45:0a:c2:c3:4e:de:f9:e9:3d:88:
         23:28:7a:0b:d9:07:51:ae:b7:92:62:c0:f5:4c:95:d6:a7:8d:
         1c:90:11:47:e5:42:c5:aa:65:52:80:d7:03:88:e1:4b:bd:b3:
         66:19:51:81:16:b4:38:19:36:ad:4c:18:8e:9b:9a:6f:db:58:
         bd:b7:96:0b:ad:e2:fe:58:04:b7:4c:14:9b:4a:cf:2b:3d:89:
         59:a1:be:df:5c:9b:dc:fe:a5:4f:5a:f3:9f:ba:db:6d:55:9d:
         3f:5f:b0:ef:16:9f:e5:9e:ea:30:a3:41:c6:64:c3:a1:b2:67:
         6d:e7:eb:3e:13:60:17:f9:e3:61:ca:5c:62:21:6f:bf:90:db:
         ae:68:06:12:33:87:e4:06:c5:af:67:04:b9:96:74:10:68:ab:
         4e:23:31:f8:78:e0:c1:33:9d:e0:1e:2c:58:be:c9:db:4a:48:
         d2:77:e7:bc:04:2a:06:31:13:da:43:58:ff:5d:11:a3:82:23:
         d9:0f:d0:49:f1:ca:1c:0e:88:70:9d:96:a2:cd:95:be:d5:e1:
         4b:61:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:58:48 2025 by rpki-client