Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File:                     U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier:          2FwekcUt9mz4BnHpHQvd3l5nYeEJHUirz4qbSTQi55k=
Subject key identifier:   C4:B6:9A:B4:2B:A4:C8:1C:D4:96:AF:92:C8:6F:8E:37:E0:67:8E:2F
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer:       /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial:       0196789FB131B71B7D230466312CEA1A5DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 19:00:53 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:53 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:53 +0000
Files and hashes:         1: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: 4UVkFhjum0M7jxIixp1Z2I5pJwU0gEaBwoOPtlgbwtc=)
                          2: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=)
                          3: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=)
                          4: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=)
                          5: tKMYskPULHrcExm9t_zqsBHITcI.roa (hash: R31NKmso4WbL0fd7lkKVeCkSUgER4Iw5rjhqu8nTNvA=)
                          6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:b1:31:b7:1b:7d:23:04:66:31:2c:ea:1a:5d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
        Validity
            Not Before: Apr 27 19:00:53 2025 GMT
            Not After : Apr 28 19:00:53 2025 GMT
        Subject: CN=c4b69ab42ba4c81cd496af92c86f8e37e0678e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:91:f3:e4:51:ec:f4:d2:07:36:d8:42:28:
                    75:b1:5b:99:12:6f:71:d5:74:12:4a:2a:64:a4:33:
                    28:96:a4:19:38:7d:02:a8:31:6e:29:e9:0a:1e:d2:
                    d6:e2:76:33:9e:b1:95:0c:1c:c6:5b:de:b4:bf:78:
                    7b:6f:c5:f3:14:85:ed:0a:d4:15:eb:cf:68:df:87:
                    1b:76:a1:1e:93:cb:f1:eb:02:6e:13:cd:ea:f6:fd:
                    ac:e6:eb:f8:70:d4:57:3f:dc:2e:af:62:61:83:ed:
                    4b:a8:11:26:3d:c8:41:ff:4d:27:b6:14:8b:d5:7c:
                    43:d8:a5:ff:6c:aa:4d:c3:a0:72:45:1d:02:6d:4e:
                    6c:90:c6:21:cf:29:e3:7b:6b:c2:07:1f:2f:c5:9a:
                    ce:d0:29:b1:ff:0a:96:c0:5d:e4:53:72:2b:61:c5:
                    e8:e4:cd:a9:ff:16:ec:73:8b:a0:17:4c:81:3c:02:
                    d8:04:cd:51:b7:b7:d3:b3:14:f2:05:65:52:49:e2:
                    4d:00:d4:3a:81:57:ee:02:01:0b:88:77:5f:dc:25:
                    d0:d5:a5:45:d4:35:57:b0:ac:ad:74:33:ae:9f:0b:
                    a5:e5:58:6d:f2:e2:28:e7:7a:9d:9e:7c:e3:d2:10:
                    b9:0d:0d:43:f2:d4:1b:aa:db:d1:bc:ed:f5:c2:65:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B6:9A:B4:2B:A4:C8:1C:D4:96:AF:92:C8:6F:8E:37:E0:67:8E:2F
            X509v3 Authority Key Identifier:
                keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:02:18:b3:83:9d:46:fb:0b:14:c5:a6:09:92:8a:86:74:
         c1:e5:ca:1c:79:da:5e:1a:f7:cb:0e:b6:07:d7:11:f5:67:0b:
         53:59:94:ed:4f:67:e7:c8:fa:c0:32:2e:9b:5d:ac:ad:bd:6c:
         00:2d:a5:e6:8b:2a:dd:93:02:19:ae:01:8b:7f:04:86:04:25:
         71:f2:f7:b8:4f:2b:36:31:34:16:da:41:d0:e6:6e:d4:14:61:
         7b:8f:ab:6c:a1:95:e9:04:62:58:e2:ad:b5:2f:cc:f5:77:cb:
         53:ed:0b:0e:52:43:31:05:37:98:ab:9e:b7:66:42:3c:3e:78:
         98:a0:34:9f:2f:a7:38:7b:92:6b:75:56:4d:6d:2d:c6:0e:7c:
         17:92:7c:9b:49:3a:0e:75:47:f0:8d:42:cc:ff:97:50:df:c4:
         45:10:fa:0f:ee:f9:5b:77:7c:34:6e:04:0b:fe:0c:c4:f6:db:
         24:85:42:a0:d3:c3:47:1a:c8:1d:c9:38:e3:c0:59:c6:93:a8:
         3a:48:10:16:0d:b4:02:a7:3c:4c:b8:02:7d:f6:24:a4:e3:49:
         a1:68:8f:16:3f:3b:8c:e8:4a:32:c3:10:f3:af:10:b5:e7:96:
         9e:2a:e3:11:65:25:7a:29:a9:27:3d:6b:ba:55:a7:25:4e:0d:
         b7:96:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:47:39 2025 by rpki-client