Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File:                     uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier:          ObeFpEHqE2xvgf9ZA+maj9PuBqIRIBEcAPyYuwQw82I=
Subject key identifier:   7A:74:D5:8C:6D:EE:19:91:2E:BC:FC:44:65:18:64:77:F1:B0:29:9E
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer:       /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial:       019691BA8C931E8DB13E95941ADA7E5087F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number:          151A
Signing time:             Fri 02 May 2025 16:00:44 +0000
Manifest this update:     Fri 02 May 2025 16:00:44 +0000
Manifest next update:     Sat 03 May 2025 16:00:44 +0000
Files and hashes:         1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=)
                          2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=)
                          3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=)
                          4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: uDu3DbOf0ClW01uL1Ok3eG28bsyALZkcllC0+eEDZww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:ba:8c:93:1e:8d:b1:3e:95:94:1a:da:7e:50:87:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
        Validity
            Not Before: May  2 16:00:44 2025 GMT
            Not After : May  3 16:00:44 2025 GMT
        Subject: CN=7a74d58c6dee19912ebcfc4465186477f1b0299e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:76:a5:ab:76:63:5d:65:0e:7e:e2:2e:4c:
                    32:76:bc:a0:5d:5a:8b:20:09:25:ab:94:79:82:9f:
                    f0:72:ae:ab:a0:52:ba:f3:80:8e:78:18:f2:90:48:
                    44:f4:f0:93:f4:90:26:28:c2:3e:31:c8:34:75:c9:
                    63:f0:59:3a:29:51:e8:b8:ef:f3:88:52:10:31:32:
                    71:bd:49:de:c5:a9:95:e8:78:71:05:2a:95:a6:82:
                    cb:53:51:05:fb:d3:77:17:4e:78:eb:7f:d3:58:0b:
                    84:b1:01:c1:01:0f:7d:e4:d3:7a:5d:58:f7:e4:f7:
                    e1:28:58:6b:b4:28:4f:ad:2d:c0:ed:ab:99:6e:67:
                    a9:e6:0d:4e:75:a8:5e:48:78:6e:7a:eb:fe:4a:b1:
                    ca:c3:60:16:5d:54:51:1f:87:26:ca:4a:58:ab:5b:
                    a9:bd:36:90:ea:d2:f4:5b:03:4e:e6:0b:b5:7f:9b:
                    6f:06:c2:f6:ac:64:7b:c5:be:a7:92:87:e9:1d:11:
                    02:18:dd:79:d5:ff:9f:95:3a:50:44:36:fb:9f:1b:
                    83:37:2c:5a:ab:82:bb:de:73:b2:38:ec:47:8b:16:
                    01:7a:68:17:54:15:da:73:65:bd:07:ec:93:42:42:
                    5b:01:66:dc:65:4f:d6:32:ee:36:75:cd:e1:e9:ee:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:D5:8C:6D:EE:19:91:2E:BC:FC:44:65:18:64:77:F1:B0:29:9E
            X509v3 Authority Key Identifier:
                keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:5c:eb:61:14:1c:f4:ea:93:c5:73:ca:22:6b:ab:fb:c1:
         be:f1:ab:bb:e6:18:66:f6:3e:4f:61:e0:23:d3:cf:cd:b0:3b:
         6a:6f:9e:69:b9:b2:bd:fb:73:54:64:a5:ae:e0:24:ad:13:64:
         10:68:20:fb:02:07:57:99:81:78:66:9d:eb:46:c0:9b:81:65:
         a8:20:c4:b2:0f:d5:a8:46:e6:d4:01:d4:1b:61:fc:ba:10:d8:
         49:b8:e0:16:41:92:2d:4b:99:d2:3f:1b:d1:40:f8:f6:90:9a:
         d0:7b:d8:55:07:8e:30:bd:b9:a4:74:d6:2a:11:f8:53:02:ae:
         9c:81:b0:d9:73:a6:c7:25:b5:de:58:fe:56:16:cc:e6:72:7b:
         b3:e2:58:9e:2e:71:6a:de:f6:a7:31:7b:a1:2f:ad:f0:45:0f:
         9f:59:b9:b2:fe:24:9b:0d:08:3c:b9:8d:e9:69:89:6b:2a:28:
         a6:27:23:46:68:56:a0:75:a4:70:be:8e:1e:d0:6e:9f:a2:4a:
         da:f3:48:79:62:92:28:df:9a:94:24:13:90:3d:61:d8:1c:a3:
         02:76:72:bc:e3:84:09:7f:34:15:b6:be:7c:ff:39:40:5d:a9:
         1c:a2:ac:c8:91:df:24:03:b5:83:a4:8a:6d:02:20:77:b8:91:
         23:3d:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:37:47 2025 by rpki-client