Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File:                     uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier:          7etBMH1tKzp6K5nxKQZUws7XsYqpOyV1dfb69lDHQVc=
Subject key identifier:   03:F3:B9:2B:04:36:39:31:36:F7:73:05:31:C2:92:90:75:82:AB:8C
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer:       /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial:       019692CCC7D4DC2B385F1DC023F318AFCEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number:          0C3D
Signing time:             Fri 02 May 2025 21:00:16 +0000
Manifest this update:     Fri 02 May 2025 21:00:16 +0000
Manifest next update:     Sat 03 May 2025 21:00:16 +0000
Files and hashes:         1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
                          2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: 3AJZ8wI0ZccIPu+Ovjp9GVk5ulnWzuJ/a6SNmpbkyCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:cc:c7:d4:dc:2b:38:5f:1d:c0:23:f3:18:af:ce:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
        Validity
            Not Before: May  2 21:00:16 2025 GMT
            Not After : May  3 21:00:16 2025 GMT
        Subject: CN=03f3b92b0436393136f7730531c292907582ab8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f2:d9:18:6c:69:f2:8c:45:0a:97:66:c2:45:
                    ce:78:0e:a7:c9:13:0a:fd:df:3a:4a:40:7b:4c:54:
                    4b:56:2e:02:25:f1:02:6c:31:36:98:52:1f:fb:b7:
                    16:7a:8d:94:76:d8:d4:4e:17:6c:0a:ff:5f:2e:7c:
                    47:96:a1:67:c7:08:e1:c9:a0:ef:38:7f:a6:36:1f:
                    89:31:fe:4a:17:14:2d:83:92:61:fa:f2:7c:52:ff:
                    01:f6:ec:b5:a8:2f:a5:ba:2c:81:81:a2:8e:4d:07:
                    73:61:66:fe:45:67:d0:ba:35:87:3a:8f:a2:ec:ea:
                    4c:1d:04:24:a4:50:dc:12:19:ce:5f:ac:73:9c:bb:
                    bc:a6:29:53:cb:6f:5c:47:28:d5:d0:64:ed:82:80:
                    09:32:96:4d:9f:1b:1f:b2:cf:32:bc:1d:92:cc:fa:
                    5e:ca:35:92:00:f7:93:4e:65:85:32:ad:f7:e9:cd:
                    a9:96:72:55:3a:ee:9b:0a:36:a3:02:ae:68:e5:e9:
                    77:5b:d8:16:8b:8f:c6:ea:98:9e:43:bd:e1:0a:a3:
                    e8:fd:4b:7a:d0:2f:28:88:a9:44:c0:13:22:13:3d:
                    6f:0e:87:83:88:51:fd:8c:25:b0:54:1f:c2:33:98:
                    87:1e:b5:e2:8b:17:d5:9f:63:d6:5d:f4:81:f3:3a:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:B9:2B:04:36:39:31:36:F7:73:05:31:C2:92:90:75:82:AB:8C
            X509v3 Authority Key Identifier:
                keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:4b:67:d6:ff:33:b0:4a:10:ac:95:3d:42:76:05:a5:8a:
         ac:00:56:b0:01:e3:23:87:fa:5c:dd:8f:f4:09:6e:36:1e:9d:
         94:3f:8c:6e:71:5f:ac:6d:01:01:e0:0d:3f:2a:09:03:1c:28:
         b7:af:43:df:c4:94:34:51:7b:29:37:04:cf:25:20:57:07:5d:
         25:76:db:4e:8c:72:fd:99:ca:d8:3f:fd:a2:b7:14:74:c0:d0:
         e5:39:2c:13:9a:27:0a:82:a7:2f:5b:d5:07:75:eb:58:46:61:
         2d:e2:19:9b:29:47:21:02:86:17:62:4e:8f:72:91:f7:39:5a:
         33:73:3a:e9:76:b1:94:25:ff:7d:7d:bb:24:8d:62:02:7e:76:
         cb:e3:dc:8e:7d:bd:80:eb:b3:25:bf:f2:24:b0:83:94:3f:6c:
         c7:b2:bd:ec:89:2e:a9:2e:7f:c3:b0:5d:61:7d:9d:49:30:10:
         d1:eb:cb:68:a0:06:eb:41:84:d1:9f:0b:9f:cd:d9:9a:cd:19:
         fb:5b:0d:18:7f:41:f6:2d:de:93:d9:ae:f0:92:dc:13:97:33:
         05:72:18:46:a4:a4:9e:a5:bd:9b:62:fa:63:97:28:7f:53:80:
         9a:3b:10:42:c2:52:7d:07:f4:a8:5a:e5:25:fd:2d:50:5a:6c:
         82:90:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:24:50 2025 by rpki-client