Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          rZ4MNt8GdrPF2g8PF36XIhkZ7ubfDgcPeYeVAHuKMj4=
Subject key identifier:   0F:54:8E:9B:88:98:33:CF:3F:00:8D:06:D4:6E:C0:B1:E3:D8:59:09
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019683914016B4E51ED3EAC32572E05CC876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          0564
Signing time:             Tue 29 Apr 2025 22:00:56 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:56 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:56 +0000
Files and hashes:         1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=)
                          2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=)
                          3: 7_z910fyUdS3UV3iXZAalmMZpHc.roa (hash: Ccdq640YY3YzbW+naDaW3oCRMsiBEyNstC2n1WOXCqI=)
                          4: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=)
                          5: cKixBdA2YsQGbECfVrRBeHDlXYw.roa (hash: qJETwYzXO3XeLPn/+rF185rIfriEwSzO+xMEVnrI5/g=)
                          6: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=)
                          7: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=)
                          8: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: i+Q0mEIj5gaeh25HIWGkhjJyrcg5l2lh99FB9qP3U34=)
                          9: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:40:16:b4:e5:1e:d3:ea:c3:25:72:e0:5c:c8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Apr 29 22:00:56 2025 GMT
            Not After : Apr 30 22:00:56 2025 GMT
        Subject: CN=0f548e9b889833cf3f008d06d46ec0b1e3d85909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:b6:f5:2e:e9:9b:be:47:a5:35:1f:e0:45:
                    1d:5a:9e:38:eb:63:28:ce:14:70:a3:61:55:10:b7:
                    f7:71:ba:fb:06:f4:f4:4d:2b:ec:4b:ec:e0:ec:7a:
                    04:1c:86:f9:30:38:2a:61:cb:06:2f:07:9e:f2:f1:
                    bd:89:13:0a:35:f1:2f:7b:90:3e:95:9c:33:66:5b:
                    c7:22:5d:22:6b:fc:4d:44:20:91:d2:07:7b:49:4e:
                    81:aa:87:6d:5e:1a:66:fd:60:69:0d:24:be:75:e5:
                    82:cb:5d:cc:23:ca:fb:44:1f:62:e4:7c:33:14:84:
                    44:48:02:88:ea:ba:18:00:ec:18:f4:99:8e:7d:8f:
                    04:b5:62:6c:8e:ba:42:77:d1:b5:32:35:db:4b:78:
                    58:7d:32:b0:5e:36:7c:58:fa:09:43:c2:86:3e:de:
                    ae:65:60:6f:7d:70:c9:ce:fc:4a:df:a5:f9:e8:62:
                    ab:b7:14:86:cd:cc:56:52:3c:f7:7e:f4:04:68:09:
                    1a:25:af:44:85:14:a8:16:36:d5:64:30:7b:d5:66:
                    26:cf:7e:e3:ef:d4:8a:36:c2:20:8c:cd:39:ae:4a:
                    9f:6b:b8:1c:69:cd:ff:8d:2e:fa:e5:5c:26:5c:f8:
                    33:5c:42:fd:94:13:2e:d6:05:56:91:1f:fa:a0:79:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:8E:9B:88:98:33:CF:3F:00:8D:06:D4:6E:C0:B1:E3:D8:59:09
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b2:06:94:79:7d:64:da:84:47:d5:f3:48:01:cb:9c:7f:5a:
         d3:4e:0e:5c:ac:32:3d:5c:31:52:37:aa:7b:d0:1d:01:02:a6:
         05:97:cb:50:03:de:b9:ac:ad:3e:d0:1a:64:44:46:21:6d:9a:
         57:81:df:15:a6:f5:f9:cf:46:f9:8d:2b:24:6d:0b:2c:8f:42:
         a4:49:25:04:27:25:90:30:ff:8c:63:af:85:73:43:5e:c8:46:
         8c:e2:6b:0a:0a:7f:7e:8b:91:99:b1:00:31:42:5b:7d:fd:f2:
         92:87:94:e0:0b:08:f5:e6:f4:a4:07:26:3a:c3:25:93:02:80:
         7b:e2:0b:fe:68:ee:6b:fc:f7:25:d9:72:be:d3:d2:19:15:4f:
         dd:0b:06:37:53:bd:3c:c8:bb:2a:4d:9d:63:b7:54:93:84:ec:
         55:9a:98:e0:b5:4f:b9:b3:8b:60:d0:f6:df:a4:1a:d8:72:b7:
         07:d2:a0:a4:48:98:80:9c:a3:11:f4:e9:c0:d7:98:5e:1d:81:
         03:8f:b2:bd:83:2a:2a:50:ed:cb:f5:c6:85:ac:49:66:fa:12:
         f8:fa:f8:f8:d9:b3:17:09:11:a9:c2:7c:1e:07:ac:a5:f0:00:
         4f:fc:c9:ed:58:76:e8:bc:4b:ff:a7:59:a4:3f:e1:d4:b7:dd:
         93:5f:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:31:37 2025 by rpki-client