Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          bzlp/zjpyndCx0AbrYKSIdNTzCfhKJ9xbArZ7vIhVqE=
Subject key identifier:   B9:76:D8:FE:95:81:2B:8A:34:94:4C:54:58:63:68:D5:BA:ED:B2:97
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       019676431F904BF3C27D2EBCA37D2572E499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          04A5
Signing time:             Sun 27 Apr 2025 08:00:32 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:32 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:32 +0000
Files and hashes:         1: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (hash: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: +Du98QgWgS8ANTGjD/ZVSx0HappNJZ3xjQWRlgcj9RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:1f:90:4b:f3:c2:7d:2e:bc:a3:7d:25:72:e4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: Apr 27 08:00:32 2025 GMT
            Not After : Apr 28 08:00:32 2025 GMT
        Subject: CN=b976d8fe95812b8a34944c54586368d5baedb297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0b:0e:1a:6a:f0:80:03:81:4e:cc:ac:b4:75:
                    c2:c4:10:b2:f9:22:e9:5b:58:58:d8:2a:6b:11:9d:
                    8d:fd:6b:6e:d6:fe:ab:a7:42:9c:23:b3:29:98:b1:
                    d1:1b:90:e9:38:8b:71:ee:ce:05:1b:69:47:8f:54:
                    d1:90:a8:7f:86:07:ac:76:e1:75:66:ed:d8:aa:b9:
                    d5:a9:3d:d5:a0:f3:69:85:91:f1:bb:22:18:a3:1c:
                    13:dc:6c:fe:9a:7c:8c:66:12:c3:cd:74:04:a2:69:
                    17:88:1a:ec:98:ce:6d:2e:99:fb:1a:cf:1f:45:01:
                    94:52:48:d9:ea:b8:0f:81:b0:36:6e:27:63:43:d3:
                    85:1b:51:a0:20:8a:48:d9:3e:fb:9f:2f:ca:13:93:
                    ac:9e:90:e2:97:a6:f0:5b:ef:7e:b3:71:78:48:ca:
                    ee:03:86:c2:08:34:42:9f:4e:d7:39:a6:5a:cb:a6:
                    e5:07:19:50:a4:19:9c:35:e0:bc:cd:ee:1e:bb:6c:
                    84:71:80:0e:4c:fb:f9:c1:5b:65:dc:75:5b:cc:d2:
                    4f:af:e8:4d:e2:3f:bc:73:ff:b3:12:91:0f:1e:8e:
                    08:65:8a:87:4a:da:b2:df:29:e8:fb:b4:20:6b:2c:
                    7d:77:9a:ba:d1:83:e2:93:38:5c:b2:b4:42:10:6e:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:76:D8:FE:95:81:2B:8A:34:94:4C:54:58:63:68:D5:BA:ED:B2:97
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:07:2b:1c:f1:83:32:9f:8c:20:c4:57:9f:b7:66:51:93:
         39:a4:be:22:ae:9e:d7:2b:6d:a6:61:ad:d3:46:af:c2:5d:9a:
         40:c2:bd:61:93:ec:51:16:01:ac:4b:cd:61:3b:55:8b:fa:07:
         87:a2:b4:e3:d4:58:e7:e9:4f:1d:3e:49:24:61:4f:0b:90:29:
         54:6f:d4:e6:dc:fb:d3:e7:f7:2c:57:79:90:7e:9d:f5:b6:ba:
         fc:e8:df:b0:4b:43:46:97:a9:61:25:c9:31:24:10:3f:f7:fe:
         f1:88:f3:1a:da:0d:26:b3:ed:3d:81:6f:39:4f:e9:7f:44:56:
         4a:61:27:1f:98:d9:19:82:54:69:9e:46:0d:5c:20:5b:2f:0e:
         72:d1:5c:bc:e8:5d:e7:3b:e8:13:9f:de:98:68:9b:21:b4:30:
         9e:5b:c4:9f:08:da:3a:63:5c:a4:30:7a:9d:f4:b7:70:b6:81:
         21:fe:19:9a:09:ca:a5:96:31:51:bf:68:a0:d9:65:d3:a4:7d:
         02:ed:56:9a:55:86:ce:e2:66:52:49:3d:5b:72:8d:e9:39:74:
         9d:96:e7:36:c3:94:e9:00:81:09:dd:29:16:12:d0:8b:00:2f:
         94:ee:9b:b2:df:fd:58:e7:97:17:7b:56:8c:7f:3e:b6:67:ca:
         fb:ff:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:14 2025 by rpki-client