Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
File:                     uod-WyjQCydV1j3QxYHJ_klGBnU.mft (raw, json)
Hash identifier:          5F2Bj3zpGgFZO5uuJY0EibP9+wHARG2PyCqyYszUg1g=
Subject key identifier:   4B:CB:BF:18:57:CB:38:94:95:26:D5:4D:76:18:63:29:D9:FE:03:55
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Certificate issuer:       /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial:       0196D69B51A89141C75EA07F7E6B9CD66303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
Manifest number:          1323
Signing time:             Fri 16 May 2025 01:00:25 +0000
Manifest this update:     Fri 16 May 2025 01:00:25 +0000
Manifest next update:     Sat 17 May 2025 01:00:25 +0000
Files and hashes:         1: 3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa (hash: 1GqCE7f/lxXaUMCcSfF7oAJQEmNwJn6ems4l4j09Bk8=)
                          2: uod-WyjQCydV1j3QxYHJ_klGBnU.crl (hash: f0bKdi8HSrHF2hazD+ycoThgpjQ45EJzIQOWDIxZL1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:9b:51:a8:91:41:c7:5e:a0:7f:7e:6b:9c:d6:63:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
        Validity
            Not Before: May 16 01:00:25 2025 GMT
            Not After : May 17 01:00:25 2025 GMT
        Subject: CN=4bcbbf1857cb38949526d54d76186329d9fe0355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:51:66:da:a9:2a:f7:a9:ed:ba:0b:8a:3c:
                    81:3b:ee:a9:cb:a3:22:d0:24:5f:66:8c:cc:39:7c:
                    03:6b:1c:11:bb:20:80:6e:b2:19:9d:27:62:df:80:
                    61:f4:71:1b:28:67:84:4e:22:0f:71:43:3b:08:9a:
                    c0:6a:83:09:c5:ce:9b:7f:f3:fc:fa:c2:49:6d:a1:
                    ed:56:2e:7e:46:46:af:09:31:6e:73:1e:7d:3f:a6:
                    73:4a:3d:cd:f9:8c:c8:22:af:2d:40:ea:a2:9e:5a:
                    3e:fe:38:63:61:34:53:e9:36:8f:ee:16:21:25:16:
                    50:fc:69:da:0f:e1:d7:b2:25:a3:c7:95:0e:75:d8:
                    af:90:af:f9:a5:ad:d7:5b:18:d8:94:c3:25:bd:e3:
                    3e:6a:c6:0b:64:aa:59:14:06:d6:96:15:b5:90:2d:
                    ae:02:81:b0:b0:0d:d7:5f:c6:85:d8:65:44:01:7f:
                    6d:d9:57:bb:25:f4:ec:8f:f4:57:74:05:5b:72:37:
                    43:e5:b6:20:5a:47:c0:1d:7c:d0:63:83:36:76:8d:
                    1d:6f:e1:0b:88:70:21:3f:e3:d8:76:cd:82:96:86:
                    eb:f9:79:17:87:3c:9e:7e:87:11:53:5d:b1:6e:40:
                    fe:6b:07:01:aa:d3:b6:b1:7a:2f:46:f3:18:f1:c3:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CB:BF:18:57:CB:38:94:95:26:D5:4D:76:18:63:29:D9:FE:03:55
            X509v3 Authority Key Identifier:
                keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:be:c0:7e:79:9e:9f:f5:57:b3:22:26:88:98:f6:27:05:ae:
         da:76:06:73:58:23:13:0a:76:99:11:9e:1a:a1:21:aa:8b:bd:
         c1:fc:c8:78:35:9d:d9:77:ce:2e:09:c3:76:dc:ae:87:a4:b4:
         b7:77:04:98:ee:81:75:95:76:af:61:73:87:f1:92:84:88:f9:
         56:59:ec:2f:77:90:36:37:2d:2a:c8:9e:06:b9:c1:f4:54:5f:
         c1:00:ac:4a:08:9e:60:f4:bd:ec:3f:6e:79:ee:b0:c2:27:ad:
         7c:78:2f:3c:14:84:39:5e:71:56:84:b5:1b:4a:ee:59:4f:d2:
         92:29:e6:cd:a9:cb:1c:b0:dd:a2:e1:b3:7e:54:b5:70:7e:5e:
         39:c0:18:78:e8:75:16:83:c1:1d:dd:7c:d2:b7:14:2b:ce:83:
         33:bc:ff:86:7b:36:17:e5:c8:1f:48:9b:22:b8:62:15:8b:65:
         8a:41:01:6b:d1:d2:67:dd:92:4c:6a:2e:01:44:ec:f1:0c:cb:
         5a:0a:0f:50:c7:81:2a:c1:d8:99:bf:0b:4b:5f:f7:ee:49:c6:
         e1:96:d8:ae:9c:41:2b:93:09:50:7c:0a:c6:72:06:0e:ab:47:
         11:b1:57:ed:b4:4c:19:51:4d:85:27:ba:4b:09:fc:8d:c6:3c:
         19:0f:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:29:45 2025 by rpki-client