Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File:                     Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier:          JsXwctGnWp152PFuFkFDJhNrSX/7bb69Rkpg2Cxd98M=
Subject key identifier:   2A:40:D6:C2:AD:7B:DA:7C:96:E7:2A:31:79:5E:E5:3A:42:C1:28:A6
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer:       /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial:       0196789FCF7BE643F4D21162C4DCFAB93C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number:          07CD
Signing time:             Sun 27 Apr 2025 19:01:01 +0000
Manifest this update:     Sun 27 Apr 2025 19:01:01 +0000
Manifest next update:     Mon 28 Apr 2025 19:01:01 +0000
Files and hashes:         1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: zgg8mU37whXnbmAJFm1y4kVLUh8OwR2MHpIMkIaWp9I=)
                          2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:cf:7b:e6:43:f4:d2:11:62:c4:dc:fa:b9:3c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
        Validity
            Not Before: Apr 27 19:01:01 2025 GMT
            Not After : Apr 28 19:01:01 2025 GMT
        Subject: CN=2a40d6c2ad7bda7c96e72a31795ee53a42c128a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:68:9f:e4:03:a6:e5:96:f3:15:6e:35:77:
                    d8:69:4d:4e:61:7d:b1:0e:0f:1b:47:64:b7:31:83:
                    c1:3c:bf:44:40:ec:73:2d:cd:a0:ae:0e:aa:4e:d1:
                    ae:d7:a8:a3:6c:0f:04:2d:68:1d:6a:9b:19:84:d7:
                    2c:19:50:aa:ad:4f:b6:15:f4:b2:b4:d6:ab:c4:f4:
                    34:63:c8:6e:69:9f:99:88:fb:6d:9c:5e:56:88:80:
                    21:e2:d9:5f:8c:b9:0e:c1:34:da:97:8c:62:ac:ce:
                    31:7c:79:fa:03:38:97:21:95:6d:6f:6c:52:92:83:
                    8e:0d:c8:a6:90:95:ce:e6:8e:3b:86:47:8e:56:97:
                    83:30:e1:23:12:ef:01:cf:16:1d:91:10:be:7f:38:
                    47:90:dc:cd:44:d9:12:85:fb:c9:75:4c:0c:3f:1c:
                    0d:1d:09:a2:d6:a8:71:bf:81:0c:c1:c8:6e:46:67:
                    6d:99:2f:1a:4c:fa:95:ae:fa:cc:f1:cf:2c:14:de:
                    b0:f3:0a:5d:e5:96:ef:54:f3:a5:25:d4:44:d1:df:
                    dc:2d:6b:fe:95:18:c7:63:96:6c:7a:1f:43:45:d3:
                    80:ad:ed:94:13:b2:93:f3:51:84:08:3f:db:ce:14:
                    14:26:75:58:aa:f2:58:d2:e3:a0:17:52:5e:a1:d4:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:D6:C2:AD:7B:DA:7C:96:E7:2A:31:79:5E:E5:3A:42:C1:28:A6
            X509v3 Authority Key Identifier:
                keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:23:1d:b5:d6:a1:40:37:16:04:54:f8:34:da:88:e9:ad:
         0d:ce:25:49:1e:b8:6f:02:fe:b9:a9:9c:50:3f:b4:61:cb:09:
         2c:aa:32:9f:ff:79:71:0a:97:3e:37:20:1f:eb:90:7b:a2:5c:
         f5:f6:39:fa:fb:f6:f9:9c:e3:80:14:fc:24:8c:b5:86:b4:c3:
         6a:ea:16:4e:cf:7d:6a:9e:5f:19:12:c5:17:0e:14:e2:c7:77:
         bd:27:1b:b9:06:6e:00:9b:80:69:0e:05:13:9b:55:70:c3:05:
         d7:dd:b0:05:48:09:f5:ce:6c:f2:6a:56:f6:35:6e:7f:d9:4c:
         d9:0e:2c:c3:a1:93:52:17:67:98:9d:76:48:ed:42:2b:8f:65:
         98:a1:a2:9b:90:33:4c:07:4a:48:7a:44:ac:c3:cc:23:69:97:
         e4:99:ea:07:59:ea:8d:49:ad:ae:be:21:50:3b:04:ba:48:e6:
         56:b4:1e:16:cd:40:38:ab:71:f9:15:45:ee:64:05:4d:b8:af:
         13:f5:b8:53:0a:71:09:ba:5f:1b:44:1a:8d:8d:2d:fe:bd:a3:
         cf:35:50:73:ad:22:c9:e1:0c:7c:34:1a:a2:fc:da:3a:88:55:
         1a:0b:c5:41:81:2a:86:23:06:c0:f9:ba:bb:d9:da:03:c7:20:
         06:37:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:56:15 2025 by rpki-client