Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          1dCu/xJ7OlhE7i4YcCZd5xw7iir3AjC6Ye9tLgE3fzU=
Subject key identifier:   63:24:36:FF:11:4D:59:89:14:16:76:06:E5:FA:C2:DC:D9:45:29:5D
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       0196BA7F59AA5FFD1C5F574E0E743B0E7B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          0E55
Signing time:             Sat 10 May 2025 14:00:30 +0000
Manifest this update:     Sat 10 May 2025 14:00:30 +0000
Manifest next update:     Sun 11 May 2025 14:00:30 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
                          3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
                          4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: 7qenZe1l39M37mh9RIvbudFMNKR0FxjN8F762GQeP6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:59:aa:5f:fd:1c:5f:57:4e:0e:74:3b:0e:7b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: May 10 14:00:30 2025 GMT
            Not After : May 11 14:00:30 2025 GMT
        Subject: CN=632436ff114d598914167606e5fac2dcd945295d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:62:09:80:a3:6b:5a:90:08:8d:00:ea:b5:
                    b1:ca:45:cc:5b:a6:21:7c:b0:fb:43:c3:a3:26:a5:
                    71:f3:f3:f0:91:de:f4:bd:b0:74:8c:3e:30:90:95:
                    8b:a9:50:54:b2:80:60:fa:e5:f3:34:7a:06:5a:68:
                    fc:f5:5a:29:fb:08:19:75:48:15:06:0d:90:d3:55:
                    b4:49:b7:41:48:d3:16:54:21:47:39:16:e2:0c:09:
                    2f:ec:cb:58:58:12:82:7d:db:78:98:31:b2:cf:2b:
                    b8:c6:13:55:5a:3c:70:6a:fe:dd:33:15:d5:c0:20:
                    96:2b:ad:34:01:d1:15:dc:ee:12:60:99:12:c6:b4:
                    d3:fe:41:73:ca:b0:9d:f9:67:8b:e8:68:9e:6f:86:
                    11:c1:de:35:b2:b2:7a:c1:fb:b8:22:49:11:36:f2:
                    4d:b7:98:39:97:9b:8a:c4:b5:0d:48:c8:a4:1c:20:
                    27:7b:1e:81:a4:06:e1:9b:67:f7:b3:1c:a8:b8:5c:
                    b9:a3:ad:69:03:94:fe:13:b8:fa:bc:3a:07:8c:95:
                    98:4f:c0:45:fd:6d:21:24:97:3e:09:b1:4d:c1:91:
                    fc:70:89:d8:ff:d8:be:83:28:2f:47:f2:11:b2:fb:
                    40:39:1a:a5:c9:d0:c6:fd:bf:b9:b9:b9:9e:4b:29:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:24:36:FF:11:4D:59:89:14:16:76:06:E5:FA:C2:DC:D9:45:29:5D
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:4e:2b:86:62:96:54:ca:b9:50:83:f7:4b:fd:e8:58:17:
         6f:dd:f1:ec:2f:a5:4b:97:90:75:95:c0:9a:e6:15:17:d8:dd:
         39:ee:57:fb:8b:12:c1:f5:65:12:4f:0b:76:a8:41:34:4f:4a:
         b3:80:46:8f:30:17:ea:fc:1d:29:cb:f7:20:38:ef:a7:03:c0:
         ab:eb:10:e7:93:d7:5a:54:e2:d3:c2:a6:68:42:1b:4b:fc:c7:
         a8:c0:75:57:26:62:ed:9b:dc:9b:21:c5:78:ee:cb:eb:ac:ff:
         f9:bc:09:96:60:0d:6d:e5:9f:2d:54:41:05:55:97:31:b3:c4:
         a1:0c:34:08:98:0e:59:6d:75:2c:18:97:b2:22:83:65:3f:9f:
         bf:64:4e:f4:be:ec:9b:c3:9c:a1:ec:44:42:12:01:ee:57:9c:
         ca:19:20:0b:b9:1f:d4:7b:a8:de:e8:52:92:bc:1f:a1:22:7d:
         bc:e6:17:fb:8d:8b:5d:15:15:07:31:96:cb:26:13:d4:3f:f2:
         5e:45:57:08:51:61:e0:bb:69:b1:70:46:70:10:3c:ea:e0:fe:
         97:6b:92:a6:33:ee:9b:6c:d4:54:aa:14:38:8a:de:3d:5a:5c:
         02:ca:f6:17:5e:0c:e0:fe:68:65:c9:a7:6b:17:61:77:8a:17:
         b6:0e:5e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:27 2025 by rpki-client