Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
File:                     UiOZwnibGlUE-BZxz_IgwE6vWfE.mft (raw, json)
Hash identifier:          N7SX6xMEXDayY5wh1w+0OS5DbnznpRey9S8JT/65n2w=
Subject key identifier:   6B:97:A6:16:F0:07:F3:84:12:04:41:37:77:CC:23:FA:8E:4D:73:96
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       0196A954E62F7D7ABB741A32E5522C6C4B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
Manifest number:          033E
Signing time:             Wed 07 May 2025 06:00:35 +0000
Manifest this update:     Wed 07 May 2025 06:00:35 +0000
Manifest next update:     Thu 08 May 2025 06:00:35 +0000
Files and hashes:         1: 3wonzEuv12MMdqoQbAGhDT3YzPc.roa (hash: dajuIMLWo+SZXmFUF060/f20zcAO9itEEMxKmJRUhMM=)
                          2: Fu6U86lHSXot6auCvOJjkcO_3lU.roa (hash: 81J22UZIBjq2zoACe1x9LIbFai428I4/vjRJ8Aat6TI=)
                          3: SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa (hash: R2OQhDOkjCw4D4/knxrU8/GjfDnxF4+KIOHcbLgJk/0=)
                          4: U_ILU5oPE2-q5-3kf6Hi6fdungg.roa (hash: DMhgoBAGxtdMHwCNE+yJXSK5/lKBz1bY2a8Z9IrOZZs=)
                          5: UiOZwnibGlUE-BZxz_IgwE6vWfE.crl (hash: oWcvoZbQgq+4JzP6pgNoyqFJxMFs5xoK3ZY37Xs5pYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:54:e6:2f:7d:7a:bb:74:1a:32:e5:52:2c:6c:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: May  7 06:00:35 2025 GMT
            Not After : May  8 06:00:35 2025 GMT
        Subject: CN=6b97a616f007f3841204413777cc23fa8e4d7396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:a3:77:3e:c3:ff:fa:34:29:9b:8d:1b:cb:
                    0c:a3:6a:f5:8c:1c:fc:47:eb:eb:71:e5:2a:4c:ea:
                    c6:c2:2d:87:7c:3c:d6:db:b7:c4:27:48:fc:23:64:
                    e6:5f:3d:e2:4b:df:46:89:6f:90:47:7b:e5:ad:f2:
                    15:be:55:31:ea:0e:88:bb:16:50:9a:6f:70:93:11:
                    8b:6a:e0:0b:51:3b:17:2e:ef:7e:fa:d1:dd:98:b2:
                    53:3e:ec:e8:0e:67:6a:d5:32:42:d1:02:b2:94:c0:
                    e5:33:6a:3c:49:4b:77:15:a6:a5:36:ac:06:a8:5a:
                    b1:62:3b:5c:c0:26:e1:de:10:9e:54:56:b3:3e:85:
                    69:45:69:7c:47:3a:89:a7:36:f5:fe:f3:be:a6:a9:
                    92:fa:af:fc:f9:31:81:e3:60:88:3e:ac:a9:7c:30:
                    96:23:b7:23:5e:57:0a:76:38:a7:42:76:71:e0:cb:
                    7b:d4:f1:d3:91:d3:5f:7e:f3:0a:18:f1:90:d6:81:
                    5f:e8:72:ef:88:82:5a:0b:63:06:07:7e:61:1f:07:
                    2c:20:be:90:e7:60:55:1d:e8:25:18:78:11:80:35:
                    25:06:d5:7b:92:5f:35:d9:51:9d:25:fe:ff:51:ca:
                    78:01:f9:70:c4:7d:b2:b6:c9:86:cc:0a:1e:01:8c:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:A6:16:F0:07:F3:84:12:04:41:37:77:CC:23:FA:8E:4D:73:96
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:85:db:c4:3b:90:51:e2:2b:7c:e8:f1:30:66:f3:ad:6a:0e:
         e2:97:6a:d0:e0:55:48:8f:49:6f:b1:22:5d:67:0e:cf:51:a0:
         29:3c:f7:50:15:4b:3f:12:2d:78:67:0a:ff:5b:b5:af:cd:0f:
         b3:86:12:b0:71:b6:90:54:f6:29:1c:0e:70:0d:b3:d5:12:46:
         58:8e:6c:1e:53:10:38:ff:29:9a:03:f7:6e:5b:c1:21:0c:6c:
         c3:85:25:38:c2:af:ec:1e:bd:4f:b1:00:45:85:6f:77:ab:ad:
         36:17:8c:4a:aa:5d:0a:7b:23:79:0c:82:9e:a1:f3:96:ac:7a:
         f7:02:d4:1e:6e:ea:b7:dd:aa:77:38:3a:b4:ca:c2:bc:eb:b5:
         a2:97:47:34:fb:55:bd:a4:9d:b2:c2:1d:d8:a1:aa:0e:bf:64:
         b2:d0:c0:13:86:4d:c8:d0:99:1c:81:db:84:35:67:9a:d7:03:
         38:e6:9f:a3:0a:ea:4b:ee:79:c6:86:bd:29:a9:32:69:06:46:
         d4:4e:57:1d:8a:6d:7b:6b:ec:1a:ba:da:6d:16:76:53:dc:c5:
         25:b2:68:e9:4f:5d:0f:02:11:8b:bd:42:d5:55:86:54:71:fd:
         d3:84:f8:e0:1a:42:3c:df:4a:aa:94:4a:9e:d4:04:53:b4:ec:
         2d:6f:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:44:50 2025 by rpki-client