Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File:                     UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier:          uWnXdGBDbB0cOHVRaBfKqsle2NEK68QAFzDtuDLVz1k=
Subject key identifier:   60:60:94:CD:E0:A5:C9:B8:BB:2A:AD:D7:D1:6E:CB:B0:E6:BE:86:FC
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer:       /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial:       01967454F68967F51368B4F6FDE8EC36002F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number:          0C74
Signing time:             Sat 26 Apr 2025 23:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:47 +0000
Files and hashes:         1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
                          2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: h2OWWt9aR4SliKUR/5hjtX5PFSXm544NwpqO6AMsWpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:f6:89:67:f5:13:68:b4:f6:fd:e8:ec:36:00:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
        Validity
            Not Before: Apr 26 23:00:47 2025 GMT
            Not After : Apr 27 23:00:47 2025 GMT
        Subject: CN=606094cde0a5c9b8bb2aadd7d16ecbb0e6be86fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:2e:dd:ae:28:46:e0:1b:b4:64:db:e4:75:
                    31:3d:ea:15:f7:64:ca:f0:8e:41:67:a4:02:a7:6b:
                    09:bb:3f:71:81:1c:c7:c7:b4:64:f0:bb:fa:ef:2e:
                    25:94:6a:4c:2f:eb:0c:e9:41:6f:a2:9f:f2:9c:6c:
                    5d:28:22:f7:e1:62:72:17:ed:50:50:ad:f0:37:9b:
                    70:42:79:09:90:92:b2:b0:a4:30:5d:8e:ee:88:d5:
                    0a:bb:b1:22:aa:8e:c0:d8:2b:1a:2b:a1:4d:29:21:
                    66:e5:ac:38:63:e5:bb:bd:07:c8:36:71:be:0f:29:
                    54:d1:ae:56:28:e6:c1:6a:5f:b8:4e:58:7e:5e:4f:
                    4f:42:ae:61:bf:9b:ec:7d:2c:92:fc:00:7f:08:c5:
                    5e:24:ce:31:dd:be:70:4f:8a:c2:0f:b2:61:09:c5:
                    52:98:d4:0e:d7:53:2b:9e:86:ea:b4:45:43:b1:34:
                    ec:fe:c2:4d:08:65:30:3f:63:63:ec:34:b8:04:ce:
                    c1:30:71:6a:17:e4:52:14:17:f1:f8:2b:3e:0d:31:
                    c3:1e:9a:bb:45:2a:c5:38:e9:cb:a0:81:58:79:2a:
                    04:d2:63:50:d9:d2:1c:f2:9b:51:ec:6f:96:09:65:
                    7b:fa:c6:15:3d:df:bd:29:b8:52:f1:38:3c:c4:0e:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:60:94:CD:E0:A5:C9:B8:BB:2A:AD:D7:D1:6E:CB:B0:E6:BE:86:FC
            X509v3 Authority Key Identifier:
                keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:98:c4:16:ab:d1:c6:e2:a5:1b:8a:c9:15:5a:59:29:b2:c0:
         73:7c:ea:bf:b2:68:18:30:1b:9a:d9:17:fe:01:c1:d0:c4:97:
         b3:f0:2f:96:84:4e:9b:40:72:bd:a4:a9:88:b9:2e:12:59:16:
         2e:74:b5:c4:fc:93:e2:53:ef:13:30:56:b4:ab:cd:63:d3:b5:
         07:a8:8e:0d:a4:55:10:79:9e:3b:fb:b2:c2:17:dd:ff:4d:8f:
         81:8b:c9:d3:01:94:cf:f3:8a:79:d6:cf:79:5b:21:c6:4d:ca:
         37:36:00:e8:e7:5f:51:1a:4f:9e:9e:7b:f7:d2:35:21:a3:27:
         2f:62:fb:77:ff:0b:43:12:9a:17:2e:ec:f0:71:9b:64:b5:78:
         c3:56:fd:61:68:c5:79:d2:4e:95:ea:e1:57:6e:4a:e3:ae:b7:
         d3:69:ff:a4:63:4b:2e:66:de:fc:3e:27:c2:82:1b:99:60:60:
         a4:70:e4:60:4d:b0:dc:03:0b:8e:ce:06:36:40:58:2f:e5:97:
         5a:7b:a5:f0:b3:94:78:82:65:bc:9a:dc:fe:7a:39:65:2d:95:
         bf:ef:ff:29:68:bd:c7:f6:25:47:d3:b2:82:22:50:8f:7a:32:
         1d:f0:52:e9:86:1b:70:b7:d4:de:38:3f:0f:57:b5:50:bd:4a:
         7b:2d:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:47 2025 by rpki-client