Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
File:                     uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json)
Hash identifier:          QHvlrSQu7OYnWJNWXRWPa5pQXtUT4dgz93DAbas+vzE=
Subject key identifier:   E3:DB:C0:2C:2D:D8:4D:3D:27:AC:8A:9D:C0:09:E5:17:39:35:D8:EC
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Certificate issuer:       /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial:       01969002FA77055B68E6A06557614432D3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
Manifest number:          054D
Signing time:             Fri 02 May 2025 08:00:36 +0000
Manifest this update:     Fri 02 May 2025 08:00:36 +0000
Manifest next update:     Sat 03 May 2025 08:00:36 +0000
Files and hashes:         1: Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa (hash: AfRPI9y7vg4qHFtr0NX2m5ItgCXKXzKTz1NVYhVoflo=)
                          2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: 1n6+UICC99hlMy4G7ePc5+K2iGhlXWHUdZFTaDRW100=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:02:fa:77:05:5b:68:e6:a0:65:57:61:44:32:d3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
        Validity
            Not Before: May  2 08:00:36 2025 GMT
            Not After : May  3 08:00:36 2025 GMT
        Subject: CN=e3dbc02c2dd84d3d27ac8a9dc009e5173935d8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:7a:64:22:0d:c0:f5:6a:6d:3a:24:68:d0:
                    7e:a5:d4:df:8a:b9:de:ec:05:fd:fa:c2:36:f9:3e:
                    61:24:ca:06:b5:b3:f4:15:f9:93:a1:bd:0c:f1:b5:
                    8a:84:c1:c0:87:ef:c5:1a:1a:cc:6d:2c:56:f2:1e:
                    03:7a:5a:85:03:b8:1b:e6:86:b4:a6:ee:af:ed:38:
                    48:55:41:42:e3:5d:ac:0d:24:17:93:95:a7:7f:f1:
                    f7:8f:01:88:3e:1c:b0:84:7e:97:93:33:de:d8:b5:
                    e8:55:70:0d:ab:e7:c9:f7:f5:3a:45:1c:07:aa:b2:
                    c0:ef:83:7d:a3:69:eb:69:ef:49:05:e8:65:3d:63:
                    29:28:6b:f8:41:37:94:ee:1c:85:8c:19:47:c3:3a:
                    24:2d:cb:61:02:96:26:8d:95:1b:d9:63:f5:0c:f9:
                    32:5d:04:c0:94:0f:dd:b9:dc:f7:21:53:04:dc:1b:
                    58:6f:01:32:00:58:be:81:77:11:81:12:8c:ab:9e:
                    09:d2:cc:49:74:b0:98:c5:66:77:a4:af:ae:68:21:
                    e0:c8:36:ce:45:ac:fb:6d:bf:b4:ef:dc:c5:6d:c2:
                    73:06:1d:71:fd:5e:f0:12:a9:40:a2:64:d8:aa:4c:
                    1d:ad:93:2f:4f:52:04:b7:40:17:66:e4:57:16:16:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DB:C0:2C:2D:D8:4D:3D:27:AC:8A:9D:C0:09:E5:17:39:35:D8:EC
            X509v3 Authority Key Identifier:
                keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:96:73:80:b8:06:9b:b1:f8:04:aa:16:39:a7:4e:88:a2:35:
         a7:41:8f:58:0a:24:9b:27:85:14:c0:32:0d:2c:b2:b0:31:8f:
         63:82:2c:9a:8d:74:08:75:55:ad:d2:5f:82:d3:c4:ff:86:59:
         9a:6c:b3:1e:c7:f5:15:ea:be:41:c6:21:17:38:0c:19:11:aa:
         93:8f:0f:e4:f9:52:e0:a0:e7:d6:c8:30:29:60:40:19:4a:ec:
         8c:cf:5c:11:f2:f7:45:69:a9:b2:db:e5:fc:e4:01:ad:e3:29:
         4b:55:1b:3e:3f:95:36:86:57:b3:ac:49:f2:73:5d:6e:aa:a8:
         dd:41:fb:af:2c:f2:b9:1d:f0:a4:f9:70:4a:f0:e8:61:50:1b:
         fe:c6:4d:96:4d:21:23:cd:e2:07:b6:c6:27:18:56:de:3f:4d:
         af:af:76:c0:3e:70:a6:48:0a:00:c4:24:f0:ba:7e:d7:ee:1b:
         10:08:d3:bb:3a:79:d2:a2:87:fc:cb:18:7c:7b:bd:33:99:33:
         5e:c5:91:fb:30:8b:0e:6c:36:7f:a9:05:5c:e3:9f:94:fa:70:
         d8:87:49:7b:40:c4:b1:96:00:cb:45:b0:a4:30:16:09:1e:04:
         f8:ed:b4:4d:ff:88:22:48:84:64:df:65:08:3d:1d:92:ef:5f:
         3d:ca:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:51:55 2025 by rpki-client