Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.mft
File:                     UMTCS-jV778GQv0Y47a3yNIsxg8.mft (raw, json)
Hash identifier:          yBiJqxmc3H4ol6XIQ7sTidkRuhspjyIYtKXdLmUS9S0=
Subject key identifier:   4A:74:4C:5A:BA:63:C5:6E:D7:67:5C:DC:72:99:19:39:CF:2A:E9:9A
Authority key identifier: 50:C4:C2:4B:E8:D5:EF:BF:06:42:FD:18:E3:B6:B7:C8:D2:2C:C6:0F
Certificate issuer:       /CN=50c4c24be8d5efbf0642fd18e3b6b7c8d22cc60f
Certificate serial:       0196737931EEB3E820DAFBF87C9C891CCDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMTCS-jV778GQv0Y47a3yNIsxg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.mft
Manifest number:          0498
Signing time:             Sat 26 Apr 2025 19:00:44 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:44 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:44 +0000
Files and hashes:         1: QDGA21LmVzzWtSRex_sCeXEDV5A.roa (hash: m7W8ZFAbJJ4dXcLCBduMK2RD2Sxp3AhEaNHbKnvx8io=)
                          2: UMTCS-jV778GQv0Y47a3yNIsxg8.crl (hash: q/fY2HoLUzm2S1nmiQs+KBFybW/xarch66l/30lxbXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMTCS-jV778GQv0Y47a3yNIsxg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:31:ee:b3:e8:20:da:fb:f8:7c:9c:89:1c:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c4c24be8d5efbf0642fd18e3b6b7c8d22cc60f
        Validity
            Not Before: Apr 26 19:00:44 2025 GMT
            Not After : Apr 27 19:00:44 2025 GMT
        Subject: CN=4a744c5aba63c56ed7675cdc72991939cf2ae99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:5c:33:88:f6:89:6e:ff:4d:9f:49:f0:9e:
                    09:de:66:06:c0:e5:1c:8f:bc:c4:9b:86:fd:06:25:
                    81:84:13:90:74:01:dc:d8:b4:f1:e6:b4:d5:a7:37:
                    fd:18:8f:f5:0c:6d:27:a0:a8:3a:e0:8a:13:d8:4f:
                    4c:b3:15:67:ce:22:ba:ae:47:5a:f8:17:2b:70:98:
                    c7:0a:a6:8b:1e:00:42:5d:bd:c6:9e:03:55:6a:1a:
                    c9:70:44:ef:7e:34:32:d2:78:9e:30:29:2a:bb:15:
                    0c:72:48:40:64:73:83:a9:91:c8:0f:ad:01:5e:cd:
                    ba:17:25:8a:a2:47:9f:ec:cd:bf:7e:67:2b:f5:b9:
                    5c:4e:26:67:a9:e5:15:0e:b9:05:6f:2c:2c:be:45:
                    dc:6f:f8:fe:24:e9:fa:0b:c7:8b:11:5b:f7:a6:46:
                    98:30:f1:63:a4:43:c6:a4:42:e1:c1:a2:0a:5c:a6:
                    0a:ce:8e:8c:63:e8:c4:ef:e5:5a:fe:ec:58:20:aa:
                    f3:da:5b:11:30:63:ee:53:ab:ee:6f:9f:1e:8b:39:
                    a9:f4:20:39:64:a5:db:34:3f:d5:9f:19:6e:5d:b5:
                    18:67:96:69:de:6d:b4:05:ff:34:ff:05:e5:58:eb:
                    7b:bf:a0:3c:bb:44:dc:e5:34:3b:9a:76:89:c7:25:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:74:4C:5A:BA:63:C5:6E:D7:67:5C:DC:72:99:19:39:CF:2A:E9:9A
            X509v3 Authority Key Identifier:
                keyid:50:C4:C2:4B:E8:D5:EF:BF:06:42:FD:18:E3:B6:B7:C8:D2:2C:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMTCS-jV778GQv0Y47a3yNIsxg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d6ae6-5ff5-4ebc-a39c-d10d592279c4/1/UMTCS-jV778GQv0Y47a3yNIsxg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5b:04:4e:08:ae:0e:38:b0:20:39:94:1c:05:50:79:dd:fe:
         7f:d9:ea:94:8b:28:3b:23:ed:7c:d2:0a:c9:d9:13:19:50:be:
         7b:cc:c2:ad:c6:73:01:91:25:b3:fc:95:d8:d2:95:4f:60:dd:
         6e:4b:b9:4e:0c:f4:c4:de:37:bb:65:16:c6:c8:c0:82:3c:b0:
         a6:b0:04:ee:b0:26:79:b6:3b:b8:3d:71:0b:78:36:41:09:ba:
         3a:6f:08:8a:62:53:66:91:12:df:5e:1f:03:b8:f0:9d:d7:6f:
         c5:c0:72:ab:23:ec:bd:b6:c3:42:90:42:87:90:09:46:01:a2:
         64:09:b0:a1:6a:57:7f:05:0c:ab:c3:47:77:4a:72:ba:21:5e:
         d5:a5:c3:53:01:25:f6:c9:a0:17:37:18:37:66:da:88:6b:f6:
         26:f6:02:5d:71:15:bc:04:00:9d:8e:2a:a3:0a:b9:6d:94:03:
         23:03:1b:5a:e8:c4:f4:80:4e:70:10:b6:2f:9b:06:2b:19:6b:
         15:dd:3f:36:0b:5a:42:92:d5:35:4b:55:90:f6:6d:6e:34:a2:
         f1:b3:67:32:57:da:cf:55:45:82:c9:31:71:3b:6b:6b:33:8f:
         28:99:d3:8f:33:75:48:a0:cd:22:be:d5:4c:87:1f:15:25:f8:
         86:99:a5:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeTHus+gg2vv4fJyJHM3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzRjMjRiZThkNWVmYmYwNjQyZmQxOGUzYjZiN2M4ZDIy
Y2M2MGYwHhcNMjUwNDI2MTkwMDQ0WhcNMjUwNDI3MTkwMDQ0WjAzMTEwLwYDVQQD
Eyg0YTc0NGM1YWJhNjNjNTZlZDc2NzVjZGM3Mjk5MTkzOWNmMmFlOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPxcM4j2iW7/TZ9J8J4J3mYGwOUc
j7zEm4b9BiWBhBOQdAHc2LTx5rTVpzf9GI/1DG0noKg64IoT2E9MsxVnziK6rkda
+BcrcJjHCqaLHgBCXb3GngNVahrJcETvfjQy0nieMCkquxUMckhAZHODqZHID60B
Xs26FyWKokef7M2/fmcr9blcTiZnqeUVDrkFbywsvkXcb/j+JOn6C8eLEVv3pkaY
MPFjpEPGpELhwaIKXKYKzo6MY+jE7+Va/uxYIKrz2lsRMGPuU6vub58eizmp9CA5
ZKXbND/VnxluXbUYZ5Zp3m20Bf80/wXlWOt7v6A8u0Tc5TQ7mnaJxyUGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp0TFq6Y8Vu12dc3HKZGTnPKumaMB8GA1UdIwQY
MBaAFFDEwkvo1e+/BkL9GOO2t8jSLMYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1UQ1MtalY3NzhHUXYwWTQ3YTN5TklzeGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80ZDZhZTYtNWZmNS00ZWJjLWEzOWMt
ZDEwZDU5MjI3OWM0LzEvVU1UQ1MtalY3NzhHUXYwWTQ3YTN5TklzeGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80ZDZhZTYtNWZmNS00ZWJjLWEzOWMtZDEwZDU5MjI3OWM0
LzEvVU1UQ1MtalY3NzhHUXYwWTQ3YTN5TklzeGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVsETgiu
DjiwIDmUHAVQed3+f9nqlIsoOyPtfNIKydkTGVC+e8zCrcZzAZEls/yV2NKVT2Dd
bku5Tgz0xN43u2UWxsjAgjywprAE7rAmebY7uD1xC3g2QQm6Om8IimJTZpES314f
A7jwnddvxcByqyPsvbbDQpBCh5AJRgGiZAmwoWpXfwUMq8NHd0pyuiFe1aXDUwEl
9smgFzcYN2baiGv2JvYCXXEVvAQAnY4qowq5bZQDIwMbWujE9IBOcBC2L5sGKxlr
Fd0/NgtaQpLVNUtVkPZtbjSi8bNnMlfaz1VFgskxcTtrazOPKJnTjzN1SKDNIr7V
TIcfFSX4hpmlew==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:09 2025 by rpki-client