Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File:                     uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier:          6B1GyFvsTJOuSfVMqKaO9RliRu2HnSi5Ey4H+gA9T+k=
Subject key identifier:   11:82:24:F8:A3:B5:3F:45:D8:B4:28:DA:5C:E5:AA:E7:EE:02:6B:1A
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer:       /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial:       019685B5F9DB5D85CED2C0143986E6742F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number:          1517
Signing time:             Wed 30 Apr 2025 08:00:17 +0000
Manifest this update:     Wed 30 Apr 2025 08:00:17 +0000
Manifest next update:     Thu 01 May 2025 08:00:17 +0000
Files and hashes:         1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
                          2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
                          3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
                          4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: bD5m28hzPAXGxNbXT6lcT02u4HKB/fbBI0R2PhT5eiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:b5:f9:db:5d:85:ce:d2:c0:14:39:86:e6:74:2f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
        Validity
            Not Before: Apr 30 08:00:17 2025 GMT
            Not After : May  1 08:00:17 2025 GMT
        Subject: CN=118224f8a3b53f45d8b428da5ce5aae7ee026b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:0f:3f:93:1c:20:c7:e0:cc:34:6d:ef:8b:
                    a5:74:ae:b4:de:0e:5f:28:02:4b:8b:c3:70:06:23:
                    bc:f6:0c:b3:35:e8:82:65:59:db:66:4d:43:c8:37:
                    1f:d8:ce:40:cc:9c:62:de:4c:76:e6:a6:ac:01:c7:
                    04:a4:6e:e0:c8:a4:08:55:3c:9b:ce:bc:b6:89:5e:
                    f0:ec:99:8e:5b:00:d6:d6:00:3d:8d:7c:5d:5f:22:
                    2f:55:4c:a8:13:d0:2c:8f:e0:e0:aa:34:95:98:15:
                    2b:85:49:6c:4a:af:f8:a8:cb:55:f3:a7:3a:0e:53:
                    9a:7a:36:a3:d8:07:16:ba:bf:b6:a7:67:12:b7:02:
                    80:db:76:09:2d:e8:fd:7a:d9:37:da:f1:37:ad:91:
                    96:af:ab:c2:7a:5a:dc:e0:b6:37:cc:f1:ba:e3:d7:
                    96:47:52:42:cd:c9:f5:b4:07:86:2e:72:6b:cf:62:
                    d5:3d:55:95:fa:42:c1:94:45:99:d3:50:df:2d:e9:
                    62:e8:87:9b:b9:36:35:c1:7f:6b:49:a2:44:ba:e8:
                    e9:d2:2e:79:82:62:51:fc:25:0d:1e:d5:17:02:ea:
                    99:b2:1b:76:31:80:35:47:f7:61:70:e4:8b:be:ba:
                    e3:c2:54:03:64:94:43:bc:a5:96:17:3b:c4:0f:f0:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:82:24:F8:A3:B5:3F:45:D8:B4:28:DA:5C:E5:AA:E7:EE:02:6B:1A
            X509v3 Authority Key Identifier:
                keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:4b:3f:e6:71:51:d2:d6:a2:d2:06:ec:6b:39:00:0a:3d:
         a4:c6:5d:e9:0d:fc:bb:f6:ce:64:e5:60:4f:55:70:eb:c8:bb:
         e4:ab:96:76:d5:cb:08:f1:c5:3b:ef:7d:36:74:52:a6:24:00:
         49:59:e5:a6:86:af:d1:40:9c:ca:86:e2:d0:fa:b8:9e:39:77:
         79:06:35:f7:5e:91:61:04:2a:e3:3f:60:ac:88:25:6f:c2:b5:
         c0:05:c8:49:f8:cc:69:84:00:df:6f:8c:42:a0:de:2c:70:6b:
         79:f2:84:de:f7:30:6e:7c:70:37:21:3a:68:1a:79:a2:e0:ee:
         e9:6d:97:f5:a3:2e:9d:3b:d3:73:0a:ab:03:2a:a1:de:25:76:
         8a:b2:d7:d6:23:a1:bb:e2:b1:8c:c8:b7:d4:52:52:c6:ee:77:
         ba:2d:ea:a9:49:2a:50:36:7c:f1:b8:f8:0f:18:db:79:7c:39:
         99:38:db:86:df:1d:e8:a9:6e:56:c1:0c:b7:df:03:fe:87:2b:
         30:40:30:0d:9d:f1:38:51:cd:af:ff:37:85:a7:b3:62:c0:18:
         82:a7:c8:b2:e6:b4:d6:05:84:49:79:02:68:f7:ce:5c:26:6d:
         75:89:aa:e0:9f:e9:f8:52:fd:e2:04:5b:e6:be:2b:72:9f:99:
         3e:53:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:35:40 2025 by rpki-client