Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
File:                     uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json)
Hash identifier:          yPT1V1tZ1yF8wcBEl+sS8g2wY/D2yy2/kJZg7cXDCdc=
Subject key identifier:   E7:78:70:2F:73:4A:3C:33:9D:D4:0A:8F:3D:69:29:3C:1A:42:74:B5
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Certificate issuer:       /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial:       01964B2243AE18F7E885DE4F55CC7523E8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
Manifest number:          1489
Signing time:             Fri 18 Apr 2025 23:00:58 +0000
Manifest this update:     Fri 18 Apr 2025 23:00:58 +0000
Manifest next update:     Sat 19 Apr 2025 23:00:58 +0000
Files and hashes:         1: dx1DsNdC0zzf80gFyxTg9VFR8p8.roa (hash: wJSJefvy6pAquwxe0d0SzcWI3aTdl65uj7QEQlUElKE=)
                          2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: HLTWXn/SgHCRaDo5ryYKLLf9zOSNHjnMsmT+W4sE5XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:22:43:ae:18:f7:e8:85:de:4f:55:cc:75:23:e8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
        Validity
            Not Before: Apr 18 23:00:58 2025 GMT
            Not After : Apr 19 23:00:58 2025 GMT
        Subject: CN=e778702f734a3c339dd40a8f3d69293c1a4274b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:55:fb:9e:2f:9f:4e:17:9e:11:9c:cc:c0:
                    fa:5a:21:a9:4f:c0:5a:16:17:05:b6:e0:bd:6d:bb:
                    ca:39:a6:75:fc:cc:30:76:7d:65:89:b8:52:9a:62:
                    1d:84:5b:3d:46:02:5f:d5:8c:63:0f:65:5b:ff:72:
                    4a:28:25:fc:c2:9d:38:b9:1e:5e:fa:57:57:15:f7:
                    fa:1e:b9:54:04:dc:8e:b7:8e:72:89:fc:96:b0:4b:
                    58:5a:c8:e1:b0:02:09:69:35:6d:44:70:f1:2e:62:
                    9d:7c:2b:64:a5:8d:5c:9f:0e:6d:26:62:f1:00:0a:
                    ad:f3:fe:24:98:5b:9f:52:4b:07:ca:f1:b1:83:9e:
                    84:78:6a:e5:1a:33:21:34:63:2e:8f:62:55:48:16:
                    d8:37:8a:f2:05:c2:70:b5:5b:46:c9:23:44:f4:cd:
                    f9:71:66:0f:4b:72:87:ce:11:75:41:f5:29:c5:54:
                    0d:02:5e:47:79:74:da:d0:e7:7a:22:94:c3:3b:65:
                    7f:ab:1b:99:28:7e:2f:ab:03:ee:14:53:a7:51:e9:
                    04:fa:e3:ab:b7:d0:c2:35:1d:9e:c6:eb:57:4d:d0:
                    cf:93:80:07:87:33:08:81:89:22:4b:dd:1b:f6:b2:
                    3a:e1:4b:27:a4:1b:76:69:7b:1d:de:6f:ab:f8:02:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:70:2F:73:4A:3C:33:9D:D4:0A:8F:3D:69:29:3C:1A:42:74:B5
            X509v3 Authority Key Identifier:
                keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:68:d5:eb:6b:ef:a3:f3:ab:b1:2e:e2:69:ac:e5:0a:90:66:
         61:d7:99:41:66:53:b7:ff:1f:b6:7f:71:e7:32:dd:f7:e3:41:
         3f:21:66:6e:50:02:ed:42:f5:e0:69:d0:e8:a6:db:b6:45:f3:
         fb:2f:a1:37:ff:34:22:42:29:27:31:9a:0f:b6:f5:d2:d4:99:
         0a:33:c9:a4:30:4f:c4:e5:90:98:d6:5f:37:0b:09:5a:44:15:
         ba:47:a4:21:26:dd:df:6a:ad:ff:19:e2:cf:92:62:2f:69:85:
         cc:85:24:c3:14:ff:a2:21:4e:c3:e0:fa:d0:a9:7d:fd:71:b3:
         33:36:d5:1d:6c:54:31:93:90:0f:f2:3a:71:54:d3:b4:5a:70:
         7b:1c:ff:39:59:bb:b3:22:5c:cb:71:dd:77:4d:c4:ec:59:17:
         d4:c3:80:ac:7a:d2:67:d0:5d:a7:94:21:50:d8:9f:60:67:33:
         71:6c:05:4d:31:4c:d4:e5:15:9e:a8:d3:9a:99:a3:95:47:dc:
         a9:a4:ae:95:da:d2:45:a8:e0:59:44:b5:76:7e:c2:39:de:d6:
         e7:2d:5b:60:73:35:cd:8f:51:15:3a:7d:83:68:a5:e5:0e:e1:
         0e:80:3f:db:aa:f7:3e:f5:05:da:15:1c:cd:3b:e4:e0:ce:a9:
         92:5f:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:45 2025 by rpki-client