Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          4WekMXyy+Z6GJw/iHBNLT7oFIf1zzb7VQi6KwYgm7jE=
Subject key identifier:   DD:D9:54:56:FF:A3:36:C8:3F:9A:A0:D1:50:58:82:47:E0:F1:08:D5
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       01967F0FC1A978E3504D4EF4432CE8B7691D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          0BD7
Signing time:             Tue 29 Apr 2025 01:01:01 +0000
Manifest this update:     Tue 29 Apr 2025 01:01:01 +0000
Manifest next update:     Wed 30 Apr 2025 01:01:01 +0000
Files and hashes:         1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: TgP0sLQZagh0mo6lmgBl1Gq9i+Tl6XwXGXhrf/Eb32s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:c1:a9:78:e3:50:4d:4e:f4:43:2c:e8:b7:69:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Apr 29 01:01:01 2025 GMT
            Not After : Apr 30 01:01:01 2025 GMT
        Subject: CN=ddd95456ffa336c83f9aa0d150588247e0f108d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:6a:1c:83:d2:7c:8a:0a:82:f3:0e:41:1a:
                    1c:da:bf:26:11:7b:ca:3b:e7:74:fd:1f:78:25:0f:
                    76:61:13:e4:22:a7:2a:bb:dc:12:cb:a6:57:02:3a:
                    da:27:74:e2:39:9f:9d:af:b7:45:b9:0a:5a:37:f0:
                    ff:10:e1:80:ee:30:9b:c8:db:f2:a4:8a:07:dc:e7:
                    5d:b4:a9:9d:9a:b3:b1:61:fa:30:3b:f0:69:8c:61:
                    a9:58:d0:28:35:2c:cb:0d:3f:71:33:04:2b:56:1f:
                    f2:90:e7:49:8f:99:ad:92:07:16:1e:8f:49:a8:33:
                    f2:7e:24:ed:ad:61:22:90:5c:b0:08:9e:75:79:06:
                    f3:bc:f0:82:5a:e1:9f:5f:bd:17:0c:da:19:98:5b:
                    93:89:3b:cb:c9:e2:83:4b:e0:ec:09:21:3a:80:07:
                    85:2c:f3:fd:b9:7d:c7:d4:af:42:59:99:31:80:01:
                    14:78:2a:83:f9:31:14:49:a4:d2:f7:e0:b1:66:2b:
                    85:31:11:ee:ac:57:c0:32:80:50:7c:6e:d1:84:a5:
                    cb:1f:60:69:69:cc:85:96:0f:3a:6e:e0:44:59:6c:
                    f3:9a:40:b2:1d:6b:8e:fa:95:f6:78:3f:79:4b:74:
                    06:f3:2f:c7:75:80:28:a4:78:29:bc:07:e9:8b:4d:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:54:56:FF:A3:36:C8:3F:9A:A0:D1:50:58:82:47:E0:F1:08:D5
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:6d:41:f9:f4:35:5b:bb:46:9f:43:0e:f5:af:a2:08:14:
         aa:39:27:fa:cf:6f:8c:9f:42:8a:e3:eb:7c:d4:d9:fd:d3:c1:
         30:02:ee:31:25:18:00:33:0c:17:59:b4:77:f8:48:8e:6a:e7:
         fb:fd:f8:15:0f:75:8c:ee:8d:bc:57:e9:7b:96:ff:3e:f0:2c:
         0e:df:2d:69:26:ee:cc:6e:e6:e7:86:aa:b5:4f:62:26:1c:ad:
         19:ab:ed:a8:af:fd:95:26:a6:6f:88:96:84:db:f5:64:6d:a6:
         4b:ce:2a:fe:dd:05:52:0c:1b:36:d6:65:f5:6a:8a:d4:3a:82:
         c9:f3:c4:50:de:4a:5b:ad:32:69:2d:e5:1e:a1:4a:c3:41:9a:
         7e:e2:14:5a:3a:1f:fb:e3:67:b0:b4:36:6a:c4:e4:a3:e4:8f:
         fa:e5:de:33:85:59:7d:77:fc:f2:9b:df:6c:d8:cb:9e:47:77:
         f2:7c:a4:15:f6:06:31:ea:8d:29:74:42:c3:c6:c2:62:8d:2d:
         35:0f:3b:cc:7b:8a:cd:cf:aa:84:a2:7c:9e:23:e3:c6:d0:ea:
         cb:f2:8f:a6:09:ea:fa:e0:e5:4a:f9:6d:e4:83:f5:e3:2c:a9:
         37:6b:85:de:59:df:21:99:dd:f2:ff:60:a8:7e:e2:0a:7e:48:
         63:b3:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:10 2025 by rpki-client