Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File:                     ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier:          uRBvbZRw4cMV3rb3QUlGrOnS23pi0X2l40fqljYxs+A=
Subject key identifier:   7F:EA:02:B8:40:51:DF:EB:74:4D:F4:43:DD:77:0D:72:58:D6:18:29
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       01974F330A6267112514241DACEDF72981FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 11:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:34 +0000
Files and hashes:         1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=)
                          2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=)
                          3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=)
                          4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=)
                          5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=)
                          6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=)
                          7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: 130PNtlS4AziWRPlMhV7FaDGqaFbT2jNnZv7xlJpzE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:0a:62:67:11:25:14:24:1d:ac:ed:f7:29:81:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Jun  8 11:00:34 2025 GMT
            Not After : Jun  9 11:00:34 2025 GMT
        Subject: CN=7fea02b84051dfeb744df443dd770d7258d61829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:57:c3:fb:72:50:e0:78:f4:14:d5:62:cc:
                    ee:e5:70:9a:32:81:f1:58:57:4c:52:6a:91:79:62:
                    ce:ff:29:46:0e:fd:e6:6e:75:27:f1:a8:43:50:90:
                    bc:23:8d:85:c7:09:87:38:1c:cf:cb:e4:f5:59:e5:
                    28:dc:c7:62:ce:07:4d:0f:1e:28:81:d2:b6:e7:27:
                    38:df:62:d8:e3:6c:e2:fe:9b:83:1a:8b:0e:05:6b:
                    6a:d2:77:cf:36:45:b5:4b:d2:9f:43:e3:51:6d:c4:
                    d6:66:6f:dd:6d:d5:22:8a:3a:c6:1d:c9:6b:6e:12:
                    28:3b:9d:50:49:de:83:86:bf:8c:86:3a:ca:fd:1d:
                    39:c0:bf:d8:12:8b:67:9f:1d:14:90:09:4e:82:af:
                    b7:d3:33:2d:87:7f:c7:1d:d7:38:94:98:40:de:ef:
                    7b:31:f9:99:69:06:8c:e0:d2:85:f6:ee:33:03:89:
                    a7:3c:b2:88:52:ed:3e:33:eb:c6:11:66:b9:26:b8:
                    c8:ae:70:41:cb:9c:75:fa:24:88:5d:96:ea:39:11:
                    99:15:b3:b3:01:9d:d3:23:b6:f8:29:45:73:55:b7:
                    0d:13:fd:7a:ba:7e:76:a3:3c:3b:f7:19:30:b4:89:
                    c6:99:1a:60:7e:93:22:43:f3:82:a9:3e:ca:ec:69:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:02:B8:40:51:DF:EB:74:4D:F4:43:DD:77:0D:72:58:D6:18:29
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:b8:23:f9:e3:4a:ca:0c:c8:6a:4f:d7:cf:05:97:2a:48:
         d6:41:04:54:15:d9:d4:20:e6:ab:ff:e6:98:a7:60:6f:c2:cd:
         a2:36:f9:5f:58:3d:1d:bc:8a:1a:aa:41:7e:bb:33:71:dd:43:
         b8:a6:9d:f6:9d:3b:72:c4:3d:aa:cc:29:77:76:1b:57:ac:ef:
         02:55:98:23:fc:d7:c6:f4:b2:e0:c7:d4:d8:9b:fd:b7:8a:1a:
         a8:e0:65:8a:26:00:d4:72:14:70:d7:e1:d6:04:3a:02:f8:2b:
         55:fe:cd:40:5a:74:54:6e:e3:3d:9e:92:6b:fb:9e:72:26:2a:
         20:50:f7:08:7f:a1:61:84:c8:55:05:f0:f8:81:c9:5f:8f:fc:
         aa:81:65:15:3a:0c:63:42:9d:69:e1:a2:3c:11:53:f6:fe:db:
         46:94:ef:95:51:cd:6e:3c:04:cc:ef:b1:df:df:2f:10:ca:7f:
         8f:0c:f2:51:85:94:79:df:e3:83:5f:7f:88:a7:1d:89:51:6e:
         16:a6:8c:bc:78:61:6f:a2:c2:fb:2d:9e:43:3d:69:88:76:4a:
         c7:f9:11:2d:82:1a:a0:e8:ed:5a:d5:47:9f:85:27:af:09:35:
         53:43:bf:5e:57:11:dc:3b:2e:ac:82:29:09:f8:a2:59:97:76:
         5c:89:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:39 2025 by rpki-client