Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File:                     Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier:          nCVnUfDSH3R6mMDymMJ6L2OELXedju+8/GrRLDwWPRM=
Subject key identifier:   6F:5E:A4:1A:25:39:E5:88:79:9B:D4:8F:48:E8:E5:77:CE:6D:DE:68
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer:       /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial:       019677FB05EF269FC6BAC90B3657076E0B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number:          103A
Signing time:             Sun 27 Apr 2025 16:01:01 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:01 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:01 +0000
Files and hashes:         1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: hHSa7pRA1UK96FsPq9jvtvUlKBzMX6NgpVZJmhy5dyE=)
                          2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:05:ef:26:9f:c6:ba:c9:0b:36:57:07:6e:0b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
        Validity
            Not Before: Apr 27 16:01:01 2025 GMT
            Not After : Apr 28 16:01:01 2025 GMT
        Subject: CN=6f5ea41a2539e588799bd48f48e8e577ce6dde68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:e1:d9:e7:b4:f5:a3:27:69:44:e6:87:c0:
                    0e:fb:db:52:76:64:9f:64:92:80:9d:93:94:bb:0d:
                    f0:86:88:2f:57:05:32:bf:09:c9:ca:00:a4:e6:38:
                    0b:03:21:5c:b4:af:29:4d:bc:ac:7b:41:3e:f8:60:
                    2c:15:35:b6:ec:a3:48:2d:12:59:6b:7e:3c:d0:f8:
                    4b:35:25:18:29:34:f6:52:c7:2e:cc:da:51:af:52:
                    0f:d3:8d:ae:d8:df:b6:80:51:04:22:86:db:a6:ba:
                    e8:ba:8e:27:fe:87:34:20:3e:fc:83:b7:6b:fb:b3:
                    1b:ea:5d:09:4a:d9:da:87:b4:be:78:ed:b7:d6:df:
                    00:bf:ac:34:89:a9:65:5e:d2:bb:b9:dd:73:eb:60:
                    de:39:3e:ed:cb:f8:35:24:8e:5a:ba:3e:5e:30:df:
                    95:ba:1b:62:eb:34:b3:e5:c8:fe:5c:b4:56:16:a4:
                    0e:1e:08:a8:3e:f5:be:19:16:30:5f:ea:90:12:36:
                    f3:62:b3:03:c0:de:c7:52:6c:98:1a:36:56:84:b5:
                    18:b6:6f:0a:a6:3f:ae:fc:73:2a:f9:0d:25:a2:13:
                    4d:d4:8c:fe:f9:4d:2a:6c:64:6d:b8:30:58:a5:8c:
                    7c:f4:26:bb:0d:3c:5a:3a:37:8e:46:bf:c8:13:6b:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5E:A4:1A:25:39:E5:88:79:9B:D4:8F:48:E8:E5:77:CE:6D:DE:68
            X509v3 Authority Key Identifier:
                keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:35:07:f3:fd:3c:61:20:85:a0:81:65:0a:00:69:60:a1:
         17:6a:5f:ba:8d:d7:79:09:08:db:cd:2b:a3:a4:d9:47:fd:e3:
         35:7a:3d:6b:41:80:65:d1:f4:54:cd:f2:2e:2c:25:53:b4:37:
         db:df:02:e6:fa:32:b0:ca:60:82:5c:d8:0f:a7:4c:cf:f1:49:
         66:fa:c8:11:7f:78:a2:8d:d9:41:a4:e3:93:a8:08:ae:48:00:
         b8:00:cc:42:45:a4:20:e8:a6:86:c5:ae:ac:b8:32:9b:54:45:
         cb:2c:3d:77:d3:6c:b7:e1:47:a0:a3:71:8c:43:0e:27:43:63:
         62:e8:e3:83:f5:4c:12:80:5a:5d:0f:9b:81:05:03:ae:92:f5:
         fc:b6:0f:c9:5f:a7:77:88:51:75:e5:7b:20:4b:f9:07:45:f2:
         df:8b:ff:2b:2c:bc:c6:cc:0e:25:ee:dc:92:63:ac:68:0f:ce:
         15:72:92:43:24:3b:b8:c2:40:71:dd:d4:36:01:18:83:19:35:
         e0:aa:a5:46:c6:90:75:64:68:90:34:8c:75:44:b8:01:42:a1:
         0b:68:dc:8d:81:0c:a0:89:c0:1d:bc:03:8e:6c:1b:ed:ca:fb:
         31:87:27:e8:74:de:51:17:f4:7b:77:52:d1:57:53:dc:b0:d7:
         59:c0:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:35 2025 by rpki-client