Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          aP1kDqdjcmZjYAziNgEPSiF+tZaFN5gX80FOY7h3HHc=
Subject key identifier:   4C:8F:35:15:77:89:28:7D:F5:43:7C:7F:51:10:48:3B:03:DC:8E:3F
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       0196767A8271B4EF91147ADECA62B09AC88C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0C3E
Signing time:             Sun 27 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 27 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 28 Apr 2025 09:01:02 +0000
Files and hashes:         1: 3NDpUsqPhJcxz3A4C7fxd4qK490.roa (hash: seRjEjrca1U020SOwQkEAWYH1YXwwlJnTmGlO6JWc44=)
                          2: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
                          3: JY70469X8sbUfsNnk7SUuu0w3Kc.roa (hash: Hfl/rx8Ob8X8Add7OXxmiGI9Zx3Lz3uXO4BW73Yc3+A=)
                          4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
                          5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: iOgawAtWD2vCVl9p5POJEHgptpPKP79uebkJ1Gls6to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:82:71:b4:ef:91:14:7a:de:ca:62:b0:9a:c8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Apr 27 09:01:02 2025 GMT
            Not After : Apr 28 09:01:02 2025 GMT
        Subject: CN=4c8f35157789287df5437c7f5110483b03dc8e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:0f:0e:45:6e:8b:b2:af:e3:55:fb:5d:31:
                    13:ca:9d:8c:cd:7a:6e:83:85:91:08:5e:ea:f5:f0:
                    d8:10:7c:bb:71:00:46:01:83:f4:e3:2d:7b:33:10:
                    8a:3f:27:c4:c6:02:27:11:17:7d:51:a3:e1:6a:e4:
                    a6:a6:1b:db:af:7b:99:60:cb:f1:d4:31:6b:81:f8:
                    b4:b3:c5:40:a8:13:2f:d8:66:be:7f:87:bd:4b:aa:
                    30:32:9e:f2:06:c1:79:c1:d7:c8:5e:36:a3:bd:3a:
                    89:c1:23:1b:c0:8c:90:cd:a5:96:3b:ff:af:4c:92:
                    1d:d3:08:de:3c:9b:74:cb:3b:c7:5c:a3:05:08:f1:
                    39:95:5c:48:5a:68:79:b3:3d:0f:8c:0b:be:c3:cf:
                    e3:8e:24:19:60:e8:d3:e2:52:d5:76:18:44:fb:33:
                    b8:85:a8:e4:c9:bc:b2:13:9b:ef:bc:81:26:35:a2:
                    ac:bd:53:e3:cf:a7:4d:ec:bd:da:b0:4d:bf:6a:9d:
                    53:7c:56:ae:24:cf:9c:15:37:0b:b2:88:8d:5f:8f:
                    5e:ec:d3:e4:c6:62:3c:b0:e8:6a:ef:87:db:c4:20:
                    dd:52:04:15:d2:42:a7:c6:42:06:6b:58:74:00:06:
                    4d:ea:13:c5:fd:52:3b:da:29:f4:73:4c:00:10:76:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8F:35:15:77:89:28:7D:F5:43:7C:7F:51:10:48:3B:03:DC:8E:3F
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:58:2a:13:17:ed:63:08:b7:a1:35:2f:52:b9:bf:e7:9c:
         3a:3d:0d:3b:d5:67:1a:0c:49:93:fd:82:e7:d7:d1:08:73:fc:
         7d:fa:97:bd:59:f6:16:1c:d1:e9:51:72:f1:d2:89:ab:98:3d:
         ae:9e:a0:a1:99:3b:1c:db:be:37:08:d4:54:3a:17:3c:a5:cf:
         75:1c:bb:d1:be:77:07:f6:fe:e1:87:86:0b:5b:97:d0:c6:f6:
         09:06:11:ca:4e:ab:5a:69:2a:39:c2:46:27:22:82:80:ea:e0:
         34:bf:83:74:2b:f3:61:32:49:a8:87:5c:86:c9:09:16:70:d7:
         9a:7c:1f:6c:31:8d:4d:19:b6:4e:a3:b8:d8:dc:a5:53:b8:01:
         9f:ac:bb:0f:14:e8:b9:38:b3:9c:7f:4a:39:8f:c9:60:a4:72:
         10:6e:16:a1:7f:ac:47:59:e7:6f:eb:7f:66:35:93:56:d5:49:
         8d:b3:9c:aa:ee:e1:80:c7:7a:1a:1d:dd:a8:af:c2:57:32:c8:
         96:ad:6d:46:29:24:e4:55:67:62:06:99:04:e7:29:e6:85:01:
         ac:db:98:2f:81:32:61:11:51:54:ba:3a:fe:bd:34:26:c3:c2:
         29:7b:8e:81:c0:14:45:ee:46:ce:07:13:9a:e3:d2:e0:a0:91:
         48:f8:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:36 2025 by rpki-client