Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          j/X79zdr7Fa9O7BEcDJUnk9lMiubD1H9Z+beDaWHOlo=
Subject key identifier:   E9:20:70:27:16:06:CC:1B:70:7E:65:58:FD:7A:90:94:E2:27:B6:9D
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       019671F859ACC40976A62880A535B0F504E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          12F6
Signing time:             Sat 26 Apr 2025 12:00:23 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:23 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:23 +0000
Files and hashes:         1: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: DyuR1+Aw4Cqudn597gBXZRj05n05bIO3ka5/d6+jscg=)
                          2: Xbs_--8RTj7NVNdnHjguAeVIjoo.roa (hash: wMCRs2Eg0y2oiiX2U9OgxEoMnX9Jd9Ptutf57Q4oqbI=)
                          3: dnwf0B7ghFQhubHpkV_b6aRmfaU.roa (hash: /ZpiVEXwKVsBxeMoy/4YPuoiF3m8c7Z0eTdmKuo2JTI=)
                          4: hhpnOw16P4QOaI6Yj27PCQwfLVA.roa (hash: ig3aG6IluBzRhUfWEo3gM6opkDOech5g/k8SP7esT2A=)
                          5: t5-UWdTdiMSI20SfoWThGHmUmkI.roa (hash: u89CpCdmqr7rKA71HZJcUjE6g736IrSgJ+2hOF705ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:59:ac:c4:09:76:a6:28:80:a5:35:b0:f5:04:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Apr 26 12:00:23 2025 GMT
            Not After : Apr 27 12:00:23 2025 GMT
        Subject: CN=e92070271606cc1b707e6558fd7a9094e227b69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:b1:2e:30:e3:f1:ac:98:13:31:c5:d5:57:
                    9b:f1:1b:f4:4e:ae:7a:59:66:79:9a:45:04:24:28:
                    0d:5b:da:2e:40:8d:3c:ca:48:18:f9:2c:79:a8:33:
                    1d:8a:cf:fd:36:47:88:ee:49:f9:75:86:65:64:27:
                    7a:08:e2:7b:d9:10:94:12:6c:1b:38:8e:8a:24:f7:
                    a1:a5:59:a0:1f:eb:8e:d0:d5:08:51:b0:c3:cc:a6:
                    92:a7:c1:0b:b3:fc:4e:d8:a2:91:5a:c9:f6:a1:6d:
                    e7:22:78:87:e9:51:03:28:f3:d3:93:a4:f2:20:33:
                    c9:19:2b:78:80:e6:ce:69:a0:3b:e1:ec:6e:3a:8e:
                    ed:5c:56:15:76:e7:4c:d1:ca:8f:da:ad:90:4d:54:
                    09:c1:c9:7a:c8:1a:33:a3:71:7b:8d:43:ed:c6:0b:
                    89:aa:27:08:12:0a:89:f9:4b:51:99:9e:92:40:88:
                    e4:dd:69:5a:45:75:1d:47:7d:1a:05:4e:85:cf:ab:
                    dc:34:36:d1:5b:a8:1f:5a:f2:20:d0:17:f8:40:e8:
                    11:55:6c:ad:2c:ff:cd:f2:14:b4:85:3c:60:1e:14:
                    3a:93:24:6a:72:75:b3:64:c3:05:e5:f9:a4:85:d5:
                    93:5c:46:ab:e8:ed:a6:87:76:9f:5d:8d:6b:4a:82:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:20:70:27:16:06:CC:1B:70:7E:65:58:FD:7A:90:94:E2:27:B6:9D
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:37:2e:58:54:99:63:66:41:a0:96:dc:ae:1b:7c:2a:9a:
         f5:43:21:28:d8:bd:34:0e:b1:0b:a0:56:e2:3c:2d:35:ac:8a:
         3d:c3:0c:a6:7f:7b:51:8e:0c:a9:67:b5:5d:b3:03:20:05:1c:
         92:2e:a0:7f:50:d0:7a:75:06:c9:4d:5d:24:f1:66:2d:0d:61:
         f1:a5:8d:21:45:b0:d5:3c:85:b2:24:4d:66:9e:55:cf:96:3b:
         26:51:5e:83:21:7d:05:8d:a6:1f:8b:01:ce:61:00:14:73:d5:
         ea:0f:12:cb:5b:f0:60:aa:dd:86:48:7b:40:d5:2c:1f:3f:9a:
         c7:71:20:8d:43:00:23:85:8e:a1:55:d5:a0:5d:05:e0:a6:8a:
         be:6b:e7:2d:92:af:38:4c:ca:22:44:dd:9b:d4:97:2a:04:fc:
         2d:05:9a:b1:a7:9b:ff:88:d2:c3:f5:03:05:04:51:f2:1c:36:
         c4:3b:cd:37:17:93:25:15:79:f4:8e:0f:8d:b7:ae:a8:da:15:
         88:c6:32:62:c6:46:44:d3:a9:b8:8a:b3:96:d6:ec:e8:38:5e:
         e9:0a:5b:8c:4a:32:c8:7f:38:02:75:2e:f7:78:89:86:63:21:
         91:16:0f:8c:63:d0:54:e3:78:c8:a5:d3:2b:2d:df:35:6e:87:
         94:25:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:34 2025 by rpki-client