Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
File:                     1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft (raw, json)
Hash identifier:          P+xt9LRWYNw2lzF/c3xnz86iJjUOgLIMMvRe4tstCD0=
Subject key identifier:   30:C2:CA:A0:96:D3:75:08:69:A8:D4:03:4C:21:0B:34:6F:80:C6:FB
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Certificate issuer:       /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial:       019675D571D4310072A17384B424D6A69E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
Manifest number:          14A0
Signing time:             Sun 27 Apr 2025 06:00:44 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:44 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:44 +0000
Files and hashes:         1: 1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl (hash: mTix0Js5INe4v4u4yosOaVjQ2BpFW1fTvOFvneHxu0k=)
                          2: z7Y6upJ_TkHMEGYoplQxNU1SqZQ.roa (hash: g8ersIEKF+DbLZ7cbrjxi/sIsUM2GOmUMJe3QIftaDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:71:d4:31:00:72:a1:73:84:b4:24:d6:a6:9e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
        Validity
            Not Before: Apr 27 06:00:44 2025 GMT
            Not After : Apr 28 06:00:44 2025 GMT
        Subject: CN=30c2caa096d3750869a8d4034c210b346f80c6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:04:48:3a:4e:71:cc:68:25:10:bb:47:e2:
                    cc:85:ee:2e:e0:65:6f:a2:bb:16:d5:c5:78:9b:74:
                    cd:5c:a6:5e:10:09:19:6c:cf:bc:9f:2a:ed:d2:4b:
                    57:d9:2e:b9:db:b8:7d:86:16:0c:e2:e1:ed:55:ad:
                    31:2b:c4:a3:11:75:61:52:64:82:cf:e2:3b:5e:78:
                    d1:75:aa:77:b2:46:1c:09:f6:6b:21:fe:2f:29:13:
                    a2:37:c0:13:7a:44:dc:7d:9f:5e:82:97:76:9c:76:
                    aa:e0:ee:8a:4d:29:95:6b:d6:e1:d1:29:aa:24:a0:
                    01:81:69:f2:b5:d4:9b:46:e7:12:4d:f5:a8:e4:cf:
                    3e:c7:b6:cc:50:e3:22:87:79:67:89:b2:d1:bd:f1:
                    b8:67:5d:d6:67:f8:99:d2:8e:89:e6:4a:1a:71:ae:
                    6a:11:f7:5c:44:95:40:77:4c:47:8a:2c:a2:b7:a9:
                    97:a2:60:c3:17:99:b0:c2:9b:dc:9a:cd:f0:e4:8b:
                    90:2d:0c:a5:a0:b5:1b:af:aa:82:43:17:9c:31:bc:
                    d0:da:1b:22:af:f8:01:10:37:75:6e:c5:11:3e:64:
                    c2:ef:1c:a4:89:77:dd:aa:10:e9:bb:26:14:50:e3:
                    d8:a3:ab:6a:84:43:68:b1:fb:47:fa:a8:a3:56:58:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C2:CA:A0:96:D3:75:08:69:A8:D4:03:4C:21:0B:34:6F:80:C6:FB
            X509v3 Authority Key Identifier:
                keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:d7:80:87:e2:4c:3f:15:17:ca:07:b3:f0:18:f7:d4:db:
         3f:01:0c:b9:a9:df:ae:5e:66:e3:22:2e:05:cf:22:79:1e:07:
         ce:46:ad:06:93:2d:9d:df:75:85:16:2a:d2:02:ad:54:81:a8:
         23:2a:c9:64:70:62:32:7a:cd:ad:c4:9f:01:ea:9c:5f:b8:a1:
         ed:47:14:f4:76:e6:6a:d5:14:44:f4:5b:69:aa:cf:1d:20:5e:
         e9:aa:ec:b3:36:9a:7c:da:67:a9:84:2b:8c:3d:16:c4:ff:e9:
         dd:2c:c3:e6:dc:db:66:8d:7e:10:3a:bf:82:26:ac:14:5c:40:
         83:a9:e3:ab:68:2d:f8:b5:ff:34:a4:44:6e:53:2c:fd:b5:52:
         ac:7d:72:2b:0c:4f:cd:e7:0c:78:df:fa:a7:b0:df:3e:dc:18:
         48:5f:7a:96:2a:ad:8c:3a:a3:51:7c:1b:e1:93:ae:a8:b5:03:
         b9:f8:60:f7:d6:91:17:37:7c:5a:69:b2:93:0e:43:69:40:b5:
         89:ed:cf:08:9d:7a:e3:45:6f:4b:a9:97:ff:1b:5e:4e:4e:53:
         22:f1:01:1c:a1:22:93:44:33:0d:d4:8b:32:fd:c4:43:dd:97:
         2e:69:80:97:9e:cb:58:a4:c5:1c:20:ba:2c:07:19:a3:5a:b6:
         32:a8:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:16 2025 by rpki-client