Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
File:                     uvzQImt58j3kemr95RRLGynii1w.mft (raw, json)
Hash identifier:          gQeVnK5c0pAuTuEQOfEwyj4nFOqj+E+4aSWVkv6t9/c=
Subject key identifier:   D2:91:2D:AE:EE:17:B4:0F:A2:8D:EB:1F:94:93:21:FA:D9:4C:C8:12
Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
Certificate issuer:       /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Certificate serial:       01968DDDDD1C85DA887DF95CE8019D818FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
Manifest number:          06F2
Signing time:             Thu 01 May 2025 22:00:49 +0000
Manifest this update:     Thu 01 May 2025 22:00:49 +0000
Manifest next update:     Fri 02 May 2025 22:00:49 +0000
Files and hashes:         1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: iUowNV9nNHzqoafIlRHkp0SudL4ZtZovgwmir08L2M8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:dd:dd:1c:85:da:88:7d:f9:5c:e8:01:9d:81:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
        Validity
            Not Before: May  1 22:00:49 2025 GMT
            Not After : May  2 22:00:49 2025 GMT
        Subject: CN=d2912daeee17b40fa28deb1f949321fad94cc812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:6b:b5:11:90:ba:25:f7:37:bc:b6:c5:bc:
                    66:94:04:16:ae:15:ec:69:18:0c:db:a7:5e:f3:65:
                    a7:5e:f0:4c:a7:bc:57:4e:ee:61:0e:2f:3d:c6:f4:
                    98:fb:b1:0e:a4:18:a1:57:e4:35:b7:a1:35:9b:fe:
                    2f:e2:dc:c7:3b:78:a6:e2:e3:ee:f5:1a:f9:6f:c8:
                    86:df:28:e8:a3:3e:6b:be:62:d1:78:ed:38:b2:d2:
                    89:b0:e0:0e:c3:60:88:d2:7c:dc:98:af:77:db:cc:
                    6f:bd:f1:1c:57:b9:cb:5d:70:61:7d:eb:f1:64:b6:
                    1d:20:05:52:55:de:10:09:3e:5b:02:60:5e:8c:64:
                    cd:32:de:1b:99:93:00:2f:d6:5f:fc:6a:c3:c7:66:
                    59:1b:c5:83:d2:4f:7a:e1:8c:7a:e5:86:58:a4:4c:
                    68:2d:e9:0e:b4:29:3a:81:d8:67:37:2f:16:4b:3d:
                    bc:71:b3:fb:d5:fa:68:db:0b:41:06:f9:af:49:06:
                    78:f9:aa:fa:df:07:0d:34:f9:cb:4c:43:33:0b:2e:
                    68:cd:dd:0b:75:1c:a7:4c:3f:ef:14:2b:cc:14:8d:
                    af:ac:17:6f:22:84:c5:17:c1:28:74:2e:7d:00:af:
                    31:d8:04:f6:5b:ba:a6:23:3c:fd:1f:54:ee:06:6b:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:2D:AE:EE:17:B4:0F:A2:8D:EB:1F:94:93:21:FA:D9:4C:C8:12
            X509v3 Authority Key Identifier:
                keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:72:be:96:db:f3:3d:29:f8:71:0d:bd:6b:b1:72:46:df:f0:
         dd:e3:aa:09:58:8d:57:4e:85:1e:02:79:2d:93:c7:3c:98:b7:
         a1:e2:64:0e:27:1f:12:32:31:2d:b7:71:8e:d2:54:33:60:25:
         2c:24:64:9d:d7:5f:82:30:37:7d:19:ce:48:4a:ae:fa:c2:50:
         a9:d0:6b:50:4d:c4:49:d0:14:52:2a:60:95:20:46:64:89:ae:
         f3:1d:99:ff:67:eb:40:51:5c:e6:73:bc:46:78:5c:f3:7b:a6:
         85:bd:41:dd:69:de:3c:c0:fa:05:71:b7:bc:3a:96:c4:8a:d0:
         57:ab:4b:cb:d2:e7:99:56:3b:6e:f8:6f:8e:b7:6b:4b:78:d7:
         92:3f:0f:11:c9:82:b9:a3:d7:28:67:60:3c:1e:8c:60:e4:67:
         01:b3:07:31:7a:e1:c0:64:73:e0:77:f4:8f:ff:49:09:90:94:
         79:b1:05:f3:2d:5e:d0:df:84:93:c4:b1:8a:7f:0f:75:6f:76:
         49:75:9d:fa:5c:cc:ba:58:0c:10:44:3d:ce:e7:41:fb:43:5a:
         8f:04:e7:19:d6:0a:7d:73:c9:1b:eb:fe:73:b5:5a:93:4b:f7:
         72:7a:ec:64:95:b0:c5:af:ba:98:0b:36:2a:3f:9c:6a:28:23:
         80:7d:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:46:53 2025 by rpki-client