Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File:                     uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier:          tD2+8l9tTasZ2AVxb69MPWbRVnNRhcurW0NwH9H1+Ao=
Subject key identifier:   77:DD:C7:99:C4:03:92:B5:E8:F6:77:FE:B6:A2:02:6E:A5:41:EC:E3
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer:       /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial:       0196A1D2C7CF85784BF497BE2414DAE1050F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number:          1308
Signing time:             Mon 05 May 2025 19:01:07 +0000
Manifest this update:     Mon 05 May 2025 19:01:07 +0000
Manifest next update:     Tue 06 May 2025 19:01:07 +0000
Files and hashes:         1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: hTmFVGhL+2XNIHptqX1z3xG1zeD93j+OWeASOEOq/Vg=)
                          2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:c7:cf:85:78:4b:f4:97:be:24:14:da:e1:05:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
        Validity
            Not Before: May  5 19:01:07 2025 GMT
            Not After : May  6 19:01:07 2025 GMT
        Subject: CN=77ddc799c40392b5e8f677feb6a2026ea541ece3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:68:77:4f:7c:c4:42:d1:c7:72:14:66:85:
                    3c:a6:3f:da:5d:6e:79:f7:74:07:56:16:02:68:23:
                    a5:a4:6a:20:a0:cc:ee:dd:d6:56:57:ef:1f:eb:bb:
                    96:ab:b4:b3:09:19:92:9f:b0:ba:e2:0f:35:37:a3:
                    5c:60:6a:21:62:18:c7:99:37:d6:40:62:a2:05:e8:
                    c3:fe:f9:d0:88:03:b0:75:0b:e3:d7:a4:b3:5c:7c:
                    25:96:32:3e:fc:f0:10:e6:0a:52:62:17:96:fa:ad:
                    fe:e7:60:02:ad:96:27:e8:f2:f3:61:c9:46:7c:18:
                    1d:31:d5:90:84:bc:ee:df:0e:49:dc:a5:3c:8d:6d:
                    1f:73:4f:65:2c:c0:48:41:c5:df:d7:fa:f3:09:f4:
                    f6:57:cb:50:a9:4a:f1:a0:51:e3:e3:1a:b0:ba:b1:
                    35:80:b3:bf:ad:54:a1:9b:57:1e:87:8b:70:2e:f9:
                    3e:aa:66:9f:67:ee:c2:6b:e7:b1:53:3e:9e:f8:50:
                    b9:a3:1f:49:6a:fd:bd:f9:af:27:64:32:1f:72:0e:
                    04:c5:7c:60:f8:75:df:d1:92:f2:be:ee:f0:12:44:
                    92:f1:6d:96:b7:ec:d5:af:58:53:e7:4b:05:a0:3f:
                    0d:ef:ac:3f:56:02:58:39:a8:59:e3:71:d7:af:4d:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DD:C7:99:C4:03:92:B5:E8:F6:77:FE:B6:A2:02:6E:A5:41:EC:E3
            X509v3 Authority Key Identifier:
                keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:e9:80:ac:b9:93:bd:4f:67:c3:8d:8e:f4:93:8f:36:f5:
         54:3e:7e:89:58:1b:e5:83:8f:23:6a:4d:2a:67:6f:1d:35:da:
         4e:29:4d:84:8f:a8:e1:8c:5d:e5:9c:91:52:11:b2:b4:89:4f:
         48:06:b3:f0:f5:d5:57:12:9d:71:fb:d0:91:85:15:a3:fd:3f:
         90:4e:32:dd:16:6a:16:26:7f:5a:33:54:40:56:8c:3d:2b:1c:
         11:12:64:ea:9d:31:b0:85:e3:f9:75:ec:d9:6e:43:26:20:cb:
         d4:4c:92:df:02:00:4d:73:a6:5a:e4:72:a9:3f:22:02:dd:e9:
         83:5a:bc:a2:3d:0f:07:64:1c:fc:12:d3:03:69:7c:f7:07:69:
         1b:97:4b:45:b5:76:ee:57:05:b2:44:d6:d1:3d:ff:d7:d4:6e:
         55:8d:13:2c:5c:4a:4d:3c:a3:f0:ba:78:d9:e2:55:6a:93:bc:
         db:2f:57:26:ce:e0:cc:34:ce:a4:4b:ea:47:41:16:9f:00:7d:
         c0:b3:67:f5:b7:dd:e4:b6:07:3b:5a:2a:c2:8b:81:48:df:9d:
         00:6a:51:af:0c:20:da:c0:e6:c2:9b:5a:5b:4a:29:11:67:f2:
         af:f6:17:59:b8:6c:b9:75:8d:9e:92:6c:57:2e:d7:35:f6:7e:
         fe:15:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:20:17 2025 by rpki-client