Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File:                     umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier:          s8fcOYccfpD2dwwfPkb2FqVbhh6YURL/cLS8wUJ4Ekc=
Subject key identifier:   B3:A7:09:C5:78:A3:1A:CB:A2:57:12:C3:43:04:0F:C1:8A:50:83:5C
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer:       /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial:       019676B12F2298DCB6BF530547B38C9573BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number:          151F
Signing time:             Sun 27 Apr 2025 10:00:45 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:45 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:45 +0000
Files and hashes:         1: 5U4MEYVwKErq9FhOsJB89ZvBBuA.roa (hash: NDCcRzRMP/wHXoUUOEq/IXJG3IgwKCj1GS7rUpsjlXY=)
                          2: 60lbisj9EBvEk8CkvIEbp4prM3I.roa (hash: cqYnW2I6KAO2XW2NYFnEXuAIZkVjJlu5WB2aqpTSh88=)
                          3: bHZh-gl2BV9HaE6gMvNJJyeNKUs.roa (hash: sDUjjxYqPfgF3z6qcjo8Ch8x8GHsvhm9yqvWs72G0WI=)
                          4: koXm2_p4F4KWKYlIu0UQERaNMQ8.roa (hash: zXAmEZonvu8xaYLE77bD6JgXELMdseALDrYiTNuQR1E=)
                          5: qerWJ9N0klhuhzcIgvZSrAumV_Y.roa (hash: /vwvzpt6A9BdPc1JxUloTrK4LVtePi7FvbqVFdA3VF8=)
                          6: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: ABPuTwwMcK44HzotqT2PQrsF9PElJ6Uj1XYEtjbMESM=)
                          7: zMnP4SbXXtzO5Qz_HmHXST-lJbc.roa (hash: x/mXpix8fyVF7pfT27hYA7xsa5opQzKkRx7F0dXWqMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:2f:22:98:dc:b6:bf:53:05:47:b3:8c:95:73:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
        Validity
            Not Before: Apr 27 10:00:45 2025 GMT
            Not After : Apr 28 10:00:45 2025 GMT
        Subject: CN=b3a709c578a31acba25712c343040fc18a50835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:f8:24:26:56:05:30:31:81:df:7c:a5:98:
                    38:54:5c:d0:ad:b7:a2:1e:16:86:f6:0c:cc:fe:71:
                    69:24:90:f1:05:e0:73:e0:e3:d2:19:db:ba:f9:2b:
                    81:26:ba:bf:fc:fc:df:06:e6:90:a0:fc:cf:33:40:
                    27:ef:22:74:df:f6:4b:3a:ac:46:cb:04:35:46:58:
                    db:15:24:9e:00:01:4a:b8:55:31:7c:c8:6a:29:fb:
                    1e:ce:6b:04:ea:95:66:76:2c:73:96:b3:8b:09:93:
                    42:44:94:14:ea:1e:37:89:c1:25:cc:c0:78:89:c3:
                    26:0d:ad:c3:d4:54:65:67:bd:32:7a:e1:27:d3:1d:
                    15:04:18:79:2d:cd:22:2e:13:d0:24:d8:fb:2f:85:
                    c9:4e:e8:96:b0:13:f2:ab:54:41:74:06:f0:1f:e4:
                    a9:96:8b:92:8b:99:55:6b:81:d9:49:11:e1:56:e3:
                    4b:dc:6b:80:0a:32:8a:e2:a5:13:a8:43:8d:9c:1d:
                    56:2a:13:d1:7d:5e:e4:57:4e:1a:b2:98:1d:47:29:
                    52:0e:c8:97:83:59:51:14:a3:56:b0:21:fe:f2:af:
                    9c:01:ed:29:49:7a:71:ec:34:dd:d4:b4:97:11:0e:
                    d5:d7:dc:28:0a:52:8b:2e:ad:09:30:a4:d4:1f:0b:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:09:C5:78:A3:1A:CB:A2:57:12:C3:43:04:0F:C1:8A:50:83:5C
            X509v3 Authority Key Identifier:
                keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:5e:6d:e5:1e:48:bc:2f:5b:5b:cc:fd:e6:fa:95:c4:03:
         c6:f7:15:b4:47:ce:21:ff:d5:fa:8d:d0:74:ce:51:19:a9:db:
         a5:96:d7:7d:55:aa:db:9b:88:8c:10:c4:8f:fc:b9:fa:4c:d2:
         9a:3d:fc:b1:1e:79:70:be:67:53:a6:2a:cf:93:a7:55:c5:b2:
         dd:dd:18:0b:f5:43:ed:a4:30:3e:05:01:a7:fa:40:7b:a5:d4:
         07:52:ce:53:16:1b:a8:4d:f7:44:a7:85:b0:71:fa:c9:8d:4d:
         13:2c:ea:eb:38:de:57:c3:c1:fb:75:0b:28:72:34:a5:e8:e2:
         17:6f:cf:fc:18:3e:68:4d:ea:f8:59:a2:64:94:bb:39:7b:52:
         66:ad:51:5d:73:6b:3a:65:ab:63:31:41:0a:b4:75:8a:4c:45:
         0d:68:f2:da:88:c3:ea:59:ce:1f:64:2d:c7:56:c8:8a:2d:e9:
         a3:a1:d4:de:3e:0d:10:b4:0a:2a:a7:1b:ed:85:33:8e:e3:77:
         dd:f5:12:12:66:39:94:c3:2d:1a:ac:65:ef:48:17:44:cf:6e:
         23:4e:50:b0:e1:7c:5f:d6:70:2d:f2:88:5b:60:d2:9e:aa:44:
         f7:f6:62:28:e6:7f:11:68:bc:e3:35:32:e5:9e:73:ee:f4:50:
         b2:8a:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:18 2025 by rpki-client