Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          aW/YBtgBHoKmjeos/wzr84/Xxjfl8r/ygYZe14Oc3E4=
Subject key identifier:   B6:1E:7E:C2:BB:47:0D:B0:15:78:1D:E3:3C:2B:18:CB:0A:6A:B7:A6
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       019659B96AD8816A8F578D03E246393A59BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          8A
Signing time:             Mon 21 Apr 2025 19:00:45 +0000
Manifest this update:     Mon 21 Apr 2025 19:00:45 +0000
Manifest next update:     Tue 22 Apr 2025 19:00:45 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: 4xQ+q6auCHSsIKQs6M2aKJQh0FAlayggitUZlhSg2iA=)
                          2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:b9:6a:d8:81:6a:8f:57:8d:03:e2:46:39:3a:59:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Apr 21 19:00:45 2025 GMT
            Not After : Apr 22 19:00:45 2025 GMT
        Subject: CN=b61e7ec2bb470db015781de33c2b18cb0a6ab7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:ea:25:7f:ac:ba:ae:5e:49:97:cb:89:53:
                    56:6b:82:90:49:0b:fd:2e:bf:93:f7:ea:b7:74:de:
                    cf:20:8d:93:a1:24:91:89:3e:7f:1b:31:e4:52:b5:
                    09:cb:4e:b0:5e:9c:2d:77:f9:e1:62:cd:f3:bb:81:
                    39:3c:0f:78:92:aa:e1:77:0d:fa:ae:85:7c:4e:61:
                    88:a0:49:ca:a1:66:b3:be:c2:b3:00:47:d1:63:e4:
                    81:7d:4d:d3:86:af:a7:dd:cf:07:3c:0c:d8:6a:9c:
                    06:c9:86:80:f0:a6:dd:c1:72:20:30:83:b5:80:4f:
                    69:50:35:05:8a:9c:74:77:83:70:6f:46:76:d9:a7:
                    ba:37:a5:9c:e4:47:c6:1e:59:94:9b:01:dd:99:18:
                    d0:d9:d7:37:14:a8:19:90:f5:d9:de:38:7a:66:8c:
                    f8:c2:e6:f8:f4:30:4d:09:a3:57:70:3e:39:be:67:
                    53:e8:cc:71:76:32:77:95:b7:36:54:2b:6f:0f:c6:
                    13:7a:9c:da:7c:51:c2:a5:56:74:58:85:7f:26:6d:
                    26:3a:a8:40:6a:2f:2c:32:1d:19:bd:22:cc:00:18:
                    1c:74:c0:f9:ed:0c:1e:c5:1c:fe:4e:9a:b0:ef:4e:
                    a0:1f:01:18:3c:17:82:8d:2c:55:74:63:fd:30:4f:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:7E:C2:BB:47:0D:B0:15:78:1D:E3:3C:2B:18:CB:0A:6A:B7:A6
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:3a:e1:e9:38:cc:3a:84:43:d6:56:c2:a1:33:39:9b:7e:
         b9:53:86:f3:0f:36:a7:36:35:c2:b9:3f:9d:9a:f3:7d:c7:b4:
         b4:fc:de:98:bd:c0:a1:a1:01:65:6c:4a:11:5d:69:ba:3e:1a:
         48:bf:71:58:f4:b3:a3:f4:f5:f4:8e:5b:3d:9c:51:4b:b2:71:
         37:7a:7b:08:b7:0f:40:97:a6:4d:34:0a:0f:22:e8:46:2d:86:
         1d:40:7d:23:04:8b:b1:06:9e:5c:e4:8b:f1:f1:bd:e0:1f:3d:
         e9:b0:68:8c:b6:c7:a9:7f:fb:7d:37:b8:e8:77:6d:78:3a:b8:
         e7:40:bc:11:f9:35:d0:b3:d5:f2:ee:a2:d4:40:1b:31:a2:df:
         89:ea:a5:55:15:bd:93:14:66:de:eb:8c:29:a5:37:58:64:ee:
         49:e3:35:05:9e:49:39:72:02:3d:2c:3b:e7:c1:64:b0:9a:84:
         f9:53:80:fe:04:46:a0:07:d5:f7:f9:aa:bf:8b:1f:c6:46:67:
         72:ce:71:53:44:52:03:f1:65:ee:0f:f4:d7:32:65:22:c2:75:
         e8:84:0a:b6:68:0f:f2:0e:cd:75:e1:2a:fe:db:48:e6:26:0e:
         9c:f5:8e:b2:56:c4:b5:86:cb:24:48:67:ed:e4:68:1c:dc:d5:
         f0:0b:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:30 2025 by rpki-client