Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File:                     UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier:          sUTQ2m6ZIQ/Lerg21PJla8AX5VjCmTOIo+audBE4pyI=
Subject key identifier:   C1:C4:D9:15:75:FE:E1:F9:1D:69:C9:AB:1E:4D:CA:D0:C6:65:8A:72
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer:       /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial:       01967ED8471E20EF4211BCA053BFC5E6D2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number:          1454
Signing time:             Tue 29 Apr 2025 00:00:25 +0000
Manifest this update:     Tue 29 Apr 2025 00:00:25 +0000
Manifest next update:     Wed 30 Apr 2025 00:00:25 +0000
Files and hashes:         1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
                          2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
                          3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: Wlpu8vhnssan73hqnLlmITBrZBJaLiyebSkub96yhUc=)
                          4: zGd05-NZw-sJTwuBu02tPsH24pE.roa (hash: ofSwbMcGSKnZ4x4xLzhpGhAWtlZ8SB33VsUVqo3M7tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:d8:47:1e:20:ef:42:11:bc:a0:53:bf:c5:e6:d2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
        Validity
            Not Before: Apr 29 00:00:25 2025 GMT
            Not After : Apr 30 00:00:25 2025 GMT
        Subject: CN=c1c4d91575fee1f91d69c9ab1e4dcad0c6658a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:e8:06:f4:2f:4b:d2:6f:c0:ad:cc:29:85:
                    d7:7c:e7:28:20:3b:d6:d6:77:6f:83:31:14:83:1d:
                    09:a1:3d:67:36:82:9a:91:1f:90:da:4a:58:9b:48:
                    79:2c:06:23:21:ee:9f:2d:a6:e8:a2:5b:55:35:bb:
                    93:f4:57:50:97:c7:1e:76:32:00:aa:00:37:5f:fd:
                    99:43:5f:5c:a0:41:55:3b:e4:1d:1a:85:5c:e2:7e:
                    e9:8a:8b:1b:9e:72:7a:cd:d4:be:c2:b5:c7:9f:0e:
                    d6:91:b0:e2:83:46:c7:6d:76:7a:a1:cb:96:87:c5:
                    7d:a7:8b:c1:88:8f:b4:e6:cb:a0:44:74:ee:2a:65:
                    23:b5:d1:6b:cc:5a:d1:57:5b:26:0e:6a:07:31:4e:
                    60:ad:75:5c:cf:9b:da:96:bc:3b:f5:6a:92:51:f4:
                    ee:9d:ee:93:d4:9c:b1:58:4f:cc:5a:fd:35:f1:37:
                    84:6e:64:92:54:34:e3:36:a0:21:87:be:ea:ce:78:
                    92:c7:61:4a:d5:dc:8c:31:06:1d:bc:61:cd:aa:12:
                    19:e5:34:9b:c5:c8:bb:e5:12:b2:0c:64:3d:6c:80:
                    4a:16:7b:83:fb:d8:6a:8b:70:60:3b:d8:8e:ac:16:
                    44:c3:3a:92:5f:b3:20:02:a1:9c:3e:c7:3f:e9:85:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C4:D9:15:75:FE:E1:F9:1D:69:C9:AB:1E:4D:CA:D0:C6:65:8A:72
            X509v3 Authority Key Identifier:
                keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:57:5f:bf:d2:87:57:f7:02:93:29:93:0b:42:39:63:08:1c:
         cf:75:15:5a:e4:9a:9e:2e:45:50:b2:db:a3:a1:8c:2e:cd:2e:
         70:55:ed:01:cd:c6:f3:7c:10:a3:87:1e:e1:f4:66:5f:34:0f:
         73:64:05:0c:cb:6e:54:08:ce:85:c8:84:3e:07:37:03:5b:db:
         95:c6:3b:2b:4b:0b:29:5b:64:3d:36:63:99:84:39:1f:a4:3d:
         69:9d:3c:e9:e3:2a:37:a5:7e:76:b2:8b:34:eb:19:58:8f:a5:
         63:1d:42:5a:73:20:63:2e:2d:36:2c:04:f1:10:d1:02:c9:d9:
         ba:8c:d6:d5:ec:42:a6:33:ea:d6:d1:3b:b5:8e:4f:e7:7a:30:
         a6:41:b9:04:34:4d:54:b0:de:ba:5a:1f:b3:7f:26:fc:cd:28:
         47:c1:9b:76:c8:60:85:b3:b6:76:45:7c:89:e8:05:bb:a0:ed:
         f7:ad:de:17:7d:9c:66:0a:8d:a0:3a:f5:d9:ac:91:cf:09:91:
         91:0c:39:94:52:8b:74:23:cf:86:10:97:0c:de:0f:dc:1c:5a:
         d9:4d:02:ff:ad:16:cc:c9:5b:34:08:1c:25:f2:50:fe:49:33:
         67:54:e2:ac:dc:ef:9b:2d:c9:c8:1d:a4:1c:da:ff:2f:d7:26:
         ed:76:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:33:29 2025 by rpki-client