Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          H9lsfRrgdRi0/AyOe1OjAKChixgZ6gwglqWLnKz4Aoo=
Subject key identifier:   37:BD:87:A3:24:E5:B6:95:B4:3B:60:52:5D:8B:89:53:7B:C4:50:5D
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       01974AE87FB68256CC7D0079E6B4ADEAF1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0CAC
Signing time:             Sat 07 Jun 2025 15:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:40 +0000
Files and hashes:         1: 3NDpUsqPhJcxz3A4C7fxd4qK490.roa (hash: seRjEjrca1U020SOwQkEAWYH1YXwwlJnTmGlO6JWc44=)
                          2: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
                          3: JY70469X8sbUfsNnk7SUuu0w3Kc.roa (hash: Hfl/rx8Ob8X8Add7OXxmiGI9Zx3Lz3uXO4BW73Yc3+A=)
                          4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
                          5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: ED/avDKssH2+waTArvR86t3QVhOzlbyBTA/3+zmg3gE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:7f:b6:82:56:cc:7d:00:79:e6:b4:ad:ea:f1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Jun  7 15:00:40 2025 GMT
            Not After : Jun  8 15:00:40 2025 GMT
        Subject: CN=37bd87a324e5b695b43b60525d8b89537bc4505d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:80:1d:c6:b9:dd:f2:af:8e:c9:12:8e:85:84:
                    2a:52:82:22:57:ae:81:51:f4:6c:1a:50:a2:20:3d:
                    e2:cc:08:1a:28:18:c7:91:bb:77:ca:5a:6e:74:1e:
                    72:0b:22:be:27:b7:98:fa:22:28:73:a5:2f:79:64:
                    d4:ff:13:22:cb:45:18:ee:a3:3c:aa:4c:3f:c2:a6:
                    9b:a7:15:cc:2f:17:e8:4a:ff:19:41:eb:1c:49:3a:
                    bc:7c:e8:f3:31:bd:22:cc:d9:e4:a6:97:03:16:c3:
                    81:72:9a:9b:f3:86:ac:85:94:a4:42:cf:7d:05:01:
                    a9:76:15:14:cb:e6:10:bd:5d:a5:19:8c:74:3c:e2:
                    a9:e5:a8:83:13:ba:cc:cb:a2:ba:fb:3a:c0:f1:5b:
                    de:9c:5c:a1:cd:71:69:04:1c:51:e5:d4:60:5b:d0:
                    8e:85:b8:2c:02:9d:79:f2:5a:4f:b6:b4:d3:f1:b4:
                    3e:f1:e3:41:1c:c5:4a:ca:ad:5c:d3:07:98:43:da:
                    38:52:08:3d:33:c6:6d:fd:5d:9b:23:6a:3a:c8:5b:
                    15:6a:5f:e6:3f:6d:ab:22:bc:45:f3:77:b2:51:90:
                    4e:f2:7c:95:51:c5:94:40:67:ca:24:c7:c3:cf:24:
                    8e:d0:61:24:61:53:bc:ac:63:57:c3:9d:69:92:04:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BD:87:A3:24:E5:B6:95:B4:3B:60:52:5D:8B:89:53:7B:C4:50:5D
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:df:9a:4b:a6:d5:8a:a5:75:eb:db:e8:98:c1:5b:ec:7a:40:
         b5:4a:51:d5:2f:0e:8a:89:db:fa:ba:f5:4b:26:58:d4:a8:ba:
         c4:37:74:78:20:7d:15:8f:2d:4e:f0:39:cd:fd:39:9f:34:b8:
         33:e9:78:07:29:b4:7a:13:d8:5b:de:31:1b:1e:f8:77:65:c1:
         c5:80:ec:e5:01:f0:7b:fd:9e:67:23:32:70:3a:02:52:8a:8d:
         e7:d6:69:5b:44:04:72:91:b7:fe:99:d8:dc:c8:27:9a:ca:95:
         7e:c7:5a:ed:0e:ca:b1:0f:d3:ee:1a:8d:51:c8:cc:56:55:19:
         96:61:c5:09:b5:97:9a:8d:87:79:8e:a3:20:da:84:56:d3:d3:
         a1:ca:18:c3:b0:55:fe:81:7e:e4:8a:3c:82:31:70:bf:96:a8:
         fe:e8:26:36:c4:1f:8e:e7:36:fa:1e:0c:5d:8f:0c:d1:23:c2:
         7f:01:f8:f3:dd:47:46:7b:c1:06:e8:e0:04:17:98:3f:fd:2f:
         9c:ae:a7:d7:25:02:ef:a5:b2:41:60:86:40:5f:d2:9b:9f:36:
         9c:7b:ca:4c:b3:5f:79:3d:c2:5d:92:cc:2d:1f:e8:d8:c7:97:
         b4:a3:d6:0a:3b:42:9d:5a:8f:64:15:d6:78:c5:3b:0b:06:20:
         f5:3a:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:44 2025 by rpki-client