Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          jSCx1TePE1T5cApthEJp2FhqZTRxNC0YFDp6X86P8LU=
Subject key identifier:   32:5D:9A:2A:85:48:B8:C0:13:8E:20:10:6A:FE:CC:C3:41:60:AD:3F
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       01967379204239422572FC661EE5FD0E5E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          151C
Signing time:             Sat 26 Apr 2025 19:00:40 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:40 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:40 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: CCexitJvJChzBF/qepCsHV4lzsCWYN53UjHFHn2siF0=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:20:42:39:42:25:72:fc:66:1e:e5:fd:0e:5e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Apr 26 19:00:40 2025 GMT
            Not After : Apr 27 19:00:40 2025 GMT
        Subject: CN=325d9a2a8548b8c0138e20106afeccc34160ad3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:f7:81:72:dd:8e:b5:16:a1:de:de:a1:ea:
                    ae:ac:e1:e3:0c:a6:3d:8d:c9:74:a5:93:81:91:a5:
                    6c:b4:d5:3b:5b:cc:5d:94:35:d7:1d:4f:fb:2b:31:
                    9b:f6:e0:1f:0a:7c:58:c3:03:d0:ef:f7:07:1e:47:
                    85:1f:88:a8:09:a5:f0:a4:2d:29:56:71:c7:99:80:
                    81:e4:a9:99:75:58:c4:47:25:3a:e3:69:78:34:6f:
                    7c:b8:63:4d:dd:dd:1f:75:66:95:38:f4:1e:1a:c0:
                    7d:9e:9f:78:18:ad:ae:d3:85:e9:19:21:a5:14:d6:
                    bc:14:dc:3a:26:ff:e0:c2:a2:03:92:53:5c:d8:2f:
                    1b:7c:e3:d8:c2:0e:99:be:d0:f8:87:7c:0e:67:63:
                    6f:13:11:42:52:10:81:48:27:26:ca:7b:95:24:41:
                    84:72:84:52:be:7a:0a:73:6c:ae:cc:41:e7:d0:4c:
                    b6:98:25:2a:08:51:1a:b0:ed:2e:d7:2d:ae:47:68:
                    71:22:80:82:14:e5:e4:8e:0d:f5:73:90:eb:e2:1e:
                    b0:ef:8e:e0:50:4c:86:91:ab:3e:db:eb:b4:1f:e3:
                    eb:29:d7:a1:68:df:88:7c:75:eb:9a:49:13:64:d7:
                    77:fd:47:88:c8:7e:be:1a:92:50:49:d7:8c:70:c6:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:9A:2A:85:48:B8:C0:13:8E:20:10:6A:FE:CC:C3:41:60:AD:3F
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:29:0f:d2:af:95:79:2e:11:eb:9b:9b:23:1b:4e:11:06:
         ef:bb:b2:58:e2:5f:32:d8:74:20:d6:4d:31:12:ac:19:db:85:
         5e:81:b9:bf:2f:a5:a0:cf:23:4a:cf:87:14:4c:5c:99:2d:01:
         37:42:b6:72:9d:5f:36:f6:25:b3:0f:13:3f:e0:0e:5d:60:16:
         a5:2c:a5:47:e4:bb:f6:2d:aa:af:37:11:77:a3:2a:1c:44:c2:
         05:82:73:ec:ee:2b:92:a9:3a:0e:57:3c:ed:52:f6:6b:4f:24:
         9e:07:56:1b:94:b9:db:56:c0:27:39:f1:96:a6:91:34:af:e2:
         89:a8:c6:c7:f7:e5:69:a7:16:fa:1e:bb:ac:5a:31:98:c5:2e:
         ff:c2:c9:67:14:c5:64:a2:29:cc:cb:fc:2f:ad:bd:a1:ae:10:
         2e:0b:e9:3d:23:1a:0b:b4:b2:89:8b:f5:05:b1:18:cd:98:22:
         31:85:27:23:65:2d:e4:fc:1b:95:7a:22:5c:ed:bd:9e:a0:41:
         40:ba:80:0a:53:ff:3e:c7:3e:ce:de:f3:38:9a:70:d9:6c:d7:
         be:43:ee:0a:e8:ed:db:2c:d5:92:6f:a0:ce:35:74:4a:59:c6:
         e3:fb:ab:17:de:b9:19:44:26:00:af:9e:cf:bc:9e:b0:c5:ed:
         cb:5f:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:23:36 2025 by rpki-client