Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File:                     UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier:          6yYa3TVbbn9vldl/fgKiDsS5p04Nifq3xjC9vEjLFKs=
Subject key identifier:   93:98:68:42:A2:4E:4B:9F:AA:88:A4:7B:5D:42:D9:F3:A3:2B:42:4F
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer:       /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial:       0196846D02F45CA74249FFD23D88F5B0C9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 02:00:58 +0000
Manifest this update:     Wed 30 Apr 2025 02:00:58 +0000
Manifest next update:     Thu 01 May 2025 02:00:58 +0000
Files and hashes:         1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: LW33w+xx2UK658V0iiV9tRTf/i3xyzTEFqtuA6UVY1Y=)
                          2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:6d:02:f4:5c:a7:42:49:ff:d2:3d:88:f5:b0:c9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
        Validity
            Not Before: Apr 30 02:00:58 2025 GMT
            Not After : May  1 02:00:58 2025 GMT
        Subject: CN=93986842a24e4b9faa88a47b5d42d9f3a32b424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:94:df:63:b0:10:02:d2:50:69:62:96:c0:
                    56:9c:27:e8:a4:97:ba:fe:43:bc:47:6d:e0:45:2a:
                    63:ea:ae:8a:c9:8a:93:ca:e2:d9:98:39:d9:dd:b7:
                    67:9a:31:9b:b2:95:b1:31:bc:82:cb:27:ed:c7:84:
                    49:6f:6f:47:05:5b:11:7f:29:4a:96:d1:be:a6:e3:
                    06:de:bb:c6:eb:57:a0:a5:9f:11:e3:bc:7b:21:42:
                    20:e2:c7:16:f7:66:8f:ca:7c:2d:99:33:44:ac:32:
                    f0:d4:7a:e1:a7:99:96:cb:e0:fd:7a:14:67:0a:0e:
                    7e:f4:60:45:ef:67:ee:65:f0:59:15:dd:4e:25:b7:
                    1d:bb:c3:99:2b:ce:49:3c:a4:a8:8f:f4:41:27:b0:
                    dd:d6:9b:64:a1:c9:43:d7:3c:b2:69:e2:72:90:ee:
                    49:21:83:74:f8:78:14:46:fd:e0:39:0a:42:8b:14:
                    63:93:b9:95:df:e1:45:df:de:af:13:d3:d9:21:4a:
                    f0:09:b6:6e:b1:12:21:f3:c8:40:13:65:1d:d0:7f:
                    55:16:8a:32:b0:35:d8:ce:5a:6d:21:33:51:14:78:
                    4e:7b:5d:83:78:88:8c:55:10:1d:29:bf:c2:33:58:
                    7e:53:69:d4:b2:b7:92:5f:d5:b5:79:f2:f0:db:02:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:68:42:A2:4E:4B:9F:AA:88:A4:7B:5D:42:D9:F3:A3:2B:42:4F
            X509v3 Authority Key Identifier:
                keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6d:21:74:85:fb:8e:9d:0e:40:1d:5e:1d:0e:f0:42:f8:14:
         a3:8c:1f:1c:13:85:ec:fe:73:56:64:8d:5c:e4:93:71:2c:8b:
         79:c0:75:df:f9:24:33:36:f6:1b:56:03:92:a5:a4:11:e6:1f:
         99:e5:ef:cf:38:06:48:40:96:7b:21:88:5f:d1:8c:01:8d:45:
         73:36:28:b0:32:8e:9a:a4:40:46:21:3b:7f:f1:5a:f1:a3:53:
         03:76:dc:84:28:d9:4e:24:2b:64:71:41:39:df:c3:3f:56:e9:
         08:ed:2f:61:7c:45:9a:bb:7b:48:22:62:8a:0d:50:a1:aa:17:
         c6:4a:e2:cf:f9:a2:82:5a:86:74:9f:d6:02:12:66:6e:17:7f:
         71:5c:b8:87:bb:08:d6:f2:a7:9f:bc:f1:78:71:64:b7:c7:05:
         e2:e8:22:17:24:ad:4d:c7:ad:90:35:ec:0e:ee:1c:6a:08:a7:
         f1:b0:f9:39:a5:17:62:5f:68:aa:12:9d:2a:51:e6:53:45:72:
         3b:22:5c:02:58:63:bd:40:f6:16:a1:ed:53:aa:4a:dc:39:36:
         57:98:d5:6b:3f:b2:0d:b0:82:f0:64:f5:b2:cc:b4:81:20:f7:
         93:5a:95:81:0c:05:54:24:71:cc:ae:25:88:f9:96:aa:bb:9b:
         ed:05:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:14 2025 by rpki-client