Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File:                     uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier:          SMy22NtDoQ8g5sJwkigaWwq5K6vjX/BiMHZbX0FKjYQ=
Subject key identifier:   BA:E2:A6:3D:34:AA:65:2F:D7:D1:D3:6B:A7:0F:73:85:88:9F:6B:B2
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer:       /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial:       01974EC5D93EE474F76EE9B5AF6A397D53AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number:          0C47
Signing time:             Sun 08 Jun 2025 09:01:18 +0000
Manifest this update:     Sun 08 Jun 2025 09:01:18 +0000
Manifest next update:     Mon 09 Jun 2025 09:01:18 +0000
Files and hashes:         1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: w8UbE99q9aXNV4sxFKciMtbHauv71LmHt3rps/UuqHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:d9:3e:e4:74:f7:6e:e9:b5:af:6a:39:7d:53:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
        Validity
            Not Before: Jun  8 09:01:18 2025 GMT
            Not After : Jun  9 09:01:18 2025 GMT
        Subject: CN=bae2a63d34aa652fd7d1d36ba70f7385889f6bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:15:3f:91:17:ce:c2:1d:02:b4:57:65:25:
                    24:b1:4c:af:d9:09:c2:1d:95:e0:f5:1f:fb:eb:04:
                    cd:22:22:df:8a:6a:7a:9e:91:ba:31:5c:b0:ec:99:
                    2f:01:15:97:f0:03:56:e6:69:9c:43:b1:bc:05:7c:
                    30:77:0b:ce:b0:98:35:23:d3:53:bc:be:02:f4:f6:
                    8e:db:66:9b:1f:79:82:5e:44:66:2b:92:95:50:53:
                    1f:a1:35:8e:59:7d:62:a6:51:af:d8:21:67:87:2f:
                    9d:68:d6:ab:18:6b:26:5b:b8:2f:43:06:93:bb:51:
                    b0:8c:15:ae:61:0b:4b:f8:13:42:61:5a:1a:ca:c2:
                    81:a0:29:ef:0a:13:cf:c9:76:9f:d0:3e:25:52:45:
                    a7:2c:ef:a0:00:3c:26:b1:3f:fe:ba:a7:3f:c6:36:
                    4b:66:c2:1f:ad:51:ae:e7:90:d3:e2:43:60:03:a8:
                    a0:45:48:80:ff:9e:78:7d:19:47:9c:8f:ec:fe:b0:
                    d5:57:a4:a7:e1:82:24:a7:b9:91:9c:90:e3:62:a4:
                    a1:fd:e9:c1:35:89:33:77:7f:0d:b7:12:99:d4:3e:
                    15:39:9d:7a:df:0b:ed:42:47:38:b2:29:38:ce:0c:
                    28:68:d8:9e:c0:bf:db:73:a8:53:5c:73:60:2e:d1:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:A6:3D:34:AA:65:2F:D7:D1:D3:6B:A7:0F:73:85:88:9F:6B:B2
            X509v3 Authority Key Identifier:
                keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:a8:28:c7:27:35:0e:3f:ea:12:37:2f:f2:44:be:72:1a:
         0d:d2:47:40:27:c8:18:76:fc:4d:c5:cf:88:9b:a5:39:bb:3a:
         42:48:e2:e0:aa:8f:9c:69:72:d4:15:d3:32:b5:a0:8c:a5:2c:
         6f:6d:d9:c6:13:fa:2e:42:66:ed:45:61:66:42:0e:4b:7b:fd:
         ed:38:8e:e9:7f:7f:26:4a:6a:4d:57:0a:0b:f2:9f:2b:b6:59:
         aa:e2:ce:3f:45:57:2d:5d:26:a3:9b:40:81:29:47:c5:73:55:
         a8:f0:a7:4c:55:24:34:ec:ea:83:ec:31:e4:92:7a:02:7f:85:
         db:ab:5f:56:46:14:68:60:60:fa:32:eb:69:cf:03:32:7a:5f:
         09:f5:c9:cd:f5:64:0a:a9:df:45:0f:88:69:00:52:28:05:48:
         1b:c2:20:ff:0c:fe:00:15:e6:d7:ad:e0:5f:d8:24:4e:22:c8:
         63:87:f0:ec:f0:5f:63:81:c6:90:85:59:e9:93:15:26:3f:7b:
         d3:7e:75:86:70:20:59:b3:8e:45:2d:e7:87:50:50:54:3e:3a:
         1b:49:07:67:19:d7:eb:a2:f6:67:73:48:ea:71:b5:e6:ce:6d:
         7a:41:ea:5e:d8:1f:7c:4e:33:49:88:2f:5b:ac:02:9c:c5:53:
         03:d7:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:07 2025 by rpki-client