Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          SUwQqCzBQzchfi0/E4s+VC2sQd62LEFgcp+wpGRxSfw=
Subject key identifier:   74:26:23:5C:53:81:4F:3B:AF:D5:1D:FD:F1:86:F7:C7:7D:6D:FF:24
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       01967266777BC0700AB01DE00AF94999A2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          150D
Signing time:             Sat 26 Apr 2025 14:00:39 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:39 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:39 +0000
Files and hashes:         1: 1-PxoxI0pjeoIhSSKerY6tOEWuoI.roa (hash: lBboLe7L0MERYDzzwiB1Vs/DVbFyBwYxqUhr24nvp7g=)
                          2: Q6c7o6uPHQhvoxwmQLzyhtDVMdE.roa (hash: zg0a7LCWPIx/36rTK801mypOCjtsncvR5b3j9h5SrdE=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: 5gi7YXFbvhlBMUGen24RojN5Qut3+sU90K4LFfSCJ00=)
                          4: VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa (hash: AKl6rPAajDxxJI7lqm70ylWzJOjVOPio/I4CI3XKjZk=)
                          5: najBQqT2olWE08kevELmXwGT57k.roa (hash: jNHLSsFQzYHW7iCGieIcoIMgADSGMSuS0qYYEJ2UrZ0=)
                          6: qaBXI4wwGXreuW0Ec50OaM6eig8.roa (hash: QyvTL1zDVNiNDlo1UO2uwprzV09ftV1cWpvfl0kl1WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:77:7b:c0:70:0a:b0:1d:e0:0a:f9:49:99:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Apr 26 14:00:39 2025 GMT
            Not After : Apr 27 14:00:39 2025 GMT
        Subject: CN=7426235c53814f3bafd51dfdf186f7c77d6dff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:73:6e:1f:d5:28:ad:01:d6:42:00:e6:2e:
                    8b:3e:43:56:8e:fd:e3:2d:4c:e9:07:43:f5:54:89:
                    3a:62:dc:01:53:e6:57:fc:52:56:7f:a6:4e:80:b8:
                    ac:cb:c1:f3:a3:33:8b:05:68:7a:4a:7f:4d:64:d4:
                    be:2d:44:78:f9:e9:d0:10:58:b5:45:b2:50:79:f0:
                    00:97:2f:ff:82:e7:ad:02:0c:ae:c4:0b:91:1a:5f:
                    0d:58:d6:5b:cc:ff:4d:e3:ac:11:d3:5c:50:a4:b9:
                    83:02:74:ec:f1:18:4b:71:69:5c:28:ab:3f:e5:9e:
                    88:b1:4a:43:ab:38:93:40:9e:a7:ae:7e:e5:db:bc:
                    67:29:6c:1f:9d:28:c0:53:2f:9c:fa:96:3f:c1:ab:
                    aa:5b:8c:0b:e7:08:06:c1:45:a4:ec:04:d7:2a:b2:
                    f0:4a:4a:d9:92:55:4d:9d:30:31:ca:3c:f6:e2:62:
                    73:62:9f:69:f0:57:7d:b5:94:39:1a:e1:59:6e:f8:
                    c5:3d:18:83:c0:86:99:a0:60:cb:28:32:0d:be:fa:
                    ac:a2:41:00:16:2a:35:5f:24:a7:05:b7:4c:cb:29:
                    28:a4:ce:32:05:e5:66:d4:47:74:41:3a:06:e7:68:
                    df:d6:44:55:34:e4:01:db:6a:be:17:6f:8c:cd:ca:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:23:5C:53:81:4F:3B:AF:D5:1D:FD:F1:86:F7:C7:7D:6D:FF:24
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:3b:94:01:e0:35:9b:67:24:4e:50:e9:49:cb:bd:3a:0b:
         1b:5a:95:2d:87:17:be:c0:2a:16:1a:5b:bc:89:e7:08:8c:fc:
         84:16:33:b4:8c:46:32:28:32:f7:7f:86:58:11:5b:76:5d:40:
         35:fb:d5:e9:76:e8:a2:d0:ef:32:21:f6:3f:6c:34:23:ff:03:
         c3:41:43:8b:b9:dd:db:a8:fa:1e:c7:aa:19:21:f3:f5:84:27:
         21:7d:3b:83:1a:e1:e3:33:cc:34:05:d2:b3:49:26:1d:eb:dc:
         c1:11:f5:79:94:46:9c:03:54:20:c5:a4:b7:ba:68:78:b5:fe:
         df:98:38:5c:15:86:78:40:a9:69:c8:3d:29:c7:ea:e4:7c:20:
         10:0f:cf:c3:6c:65:fd:98:b4:a3:bd:78:1b:75:5a:f0:d6:86:
         70:32:97:ef:2e:5e:3a:26:d6:b3:8e:cd:56:cb:bd:53:92:cc:
         1b:2c:a7:b9:ad:11:dc:dd:a3:26:52:9f:ea:ed:cc:07:f2:d2:
         9b:a8:00:75:9c:64:d6:e4:78:1b:b6:cc:3c:04:eb:40:85:52:
         06:05:66:18:1d:b8:05:9c:b8:2b:53:de:aa:98:1c:2f:e5:75:
         9e:c7:9a:bd:d2:20:6f:f2:54:5f:96:e6:96:ef:fe:2b:5d:fa:
         3e:49:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:32:46 2025 by rpki-client