Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          ZgfpuXWMpUa77asMryB7HIwrBUCTEF9tjL3/8lUIfVY=
Subject key identifier:   99:D8:AD:B3:08:5A:49:83:9B:50:1F:6A:1F:8A:A4:D4:84:92:7A:B3
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       019674C2B7F0AA24362F5FA41F150552F69E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          046A
Signing time:             Sun 27 Apr 2025 01:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:40 +0000
Files and hashes:         1: oXndQEWLAi93Q3gStogUAMhpojg.roa (hash: 3yyWwrPlKu/PVm4mmaMjgKzNXRTuMyz0HTS/+PODjNA=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: joXPpNc8rD58IE/NNWl3I1DPX0rbtkeqDP+V0EYrOyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:b7:f0:aa:24:36:2f:5f:a4:1f:15:05:52:f6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Apr 27 01:00:40 2025 GMT
            Not After : Apr 28 01:00:40 2025 GMT
        Subject: CN=99d8adb3085a49839b501f6a1f8aa4d484927ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:9d:7e:96:3f:b8:5c:b5:df:1e:51:90:a3:
                    08:85:dc:ed:8f:0f:b5:8e:84:d4:a1:2c:fc:10:26:
                    72:41:a6:89:1f:aa:fd:70:1d:9a:da:f1:d4:0c:c3:
                    06:3e:b6:65:a6:98:e1:8d:e4:56:9c:f8:33:2f:b7:
                    42:42:f7:e2:d6:52:92:00:0e:ca:6d:9b:3f:c8:39:
                    8e:02:67:b9:64:7a:cb:88:c2:21:20:85:36:ba:03:
                    1e:51:b8:40:0b:31:55:5e:d1:f5:54:24:4e:4c:a1:
                    f2:48:62:be:30:3b:09:81:0d:8e:47:6d:8e:cf:9e:
                    41:14:1f:b7:4b:7f:2e:1b:a2:58:9f:3a:be:e7:67:
                    1e:02:19:3b:f8:4e:a2:43:35:75:95:c1:a7:2e:99:
                    54:e3:50:47:2b:18:eb:96:e0:6d:06:f0:df:4c:0a:
                    5b:ab:0f:14:2c:85:24:b8:a8:74:aa:76:f8:b2:47:
                    35:e5:c5:b0:06:ce:66:68:0a:5b:13:fd:98:4c:6f:
                    1f:0f:9b:1c:34:2f:e4:ed:95:a1:28:61:71:c5:a1:
                    4f:cc:50:eb:8a:25:94:9c:33:a5:8f:9d:9e:be:7c:
                    1c:15:22:c0:d8:00:6b:b0:6d:0c:3b:ed:cd:57:82:
                    ec:96:db:df:94:33:d0:a1:cf:eb:a7:1a:f1:92:a9:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:AD:B3:08:5A:49:83:9B:50:1F:6A:1F:8A:A4:D4:84:92:7A:B3
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:86:b2:ef:06:98:e9:da:c9:67:c6:67:b8:a7:dc:85:20:1a:
         05:5f:42:96:6e:68:36:6d:c9:0a:73:9a:21:91:a2:72:93:eb:
         aa:a0:7c:86:0d:cb:6d:01:ad:a9:66:66:80:3e:3d:bd:c4:47:
         5b:c6:8d:6b:46:6f:62:7d:7d:19:4f:fd:a1:b7:4d:2b:19:eb:
         f0:db:b0:c0:a1:2a:15:87:40:55:66:83:a6:9f:41:4e:f9:43:
         31:01:82:8c:2c:93:42:20:4e:0d:19:86:4f:72:c2:a0:4b:76:
         18:a5:95:f3:23:87:61:29:68:b6:39:64:cc:9a:97:85:0e:1f:
         e7:73:c5:2b:af:de:f7:fd:4a:9c:ca:37:83:7e:52:11:df:b7:
         6a:07:5b:42:53:07:cb:ed:b6:63:83:bb:5a:9f:65:03:07:ef:
         f9:7b:43:7f:20:59:1f:b1:90:fd:74:7a:e9:ba:50:10:8b:4a:
         c8:fb:fc:01:8c:25:8d:b3:70:dd:29:4f:b0:52:7a:7c:69:9a:
         2c:fe:92:96:10:4d:6b:5f:21:b2:62:12:9b:e3:1e:1d:00:f4:
         cb:de:f3:9c:2d:64:fa:a9:17:6e:7f:25:0e:e0:d4:40:3b:b4:
         ee:9a:f8:a1:74:8f:0b:04:fe:4f:b5:c3:ef:aa:7f:4b:14:e9:
         d9:3a:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:45 2025 by rpki-client