Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File:                     ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier:          rAnZO4LtJUjVA17SCKEZIbShWtsJtOr1FjE3ISuJapk=
Subject key identifier:   94:E4:CC:26:C5:72:77:FD:2E:1A:29:A3:6D:D4:AB:41:41:A7:BD:CA
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer:       /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial:       0196372DBECE4F1836262271203FA1A310C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number:          13FF
Signing time:             Tue 15 Apr 2025 02:01:06 +0000
Manifest this update:     Tue 15 Apr 2025 02:01:06 +0000
Manifest next update:     Wed 16 Apr 2025 02:01:06 +0000
Files and hashes:         1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
                          2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: 2CXw3R2WxOMoliVSZsgkrD89B8ZQBqI9WaToaCnL+30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:37:2d:be:ce:4f:18:36:26:22:71:20:3f:a1:a3:10:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
        Validity
            Not Before: Apr 15 02:01:06 2025 GMT
            Not After : Apr 16 02:01:06 2025 GMT
        Subject: CN=94e4cc26c57277fd2e1a29a36dd4ab4141a7bdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:56:4a:52:43:a7:92:b2:54:3f:1c:c3:65:
                    4b:7e:6e:f7:f9:5a:71:d4:68:2c:1d:80:76:45:f4:
                    9d:3f:bd:aa:83:2d:12:f8:b4:db:b3:5b:db:59:e7:
                    60:a3:63:84:4f:1a:14:80:c3:9c:ed:d9:aa:47:2c:
                    83:37:5f:79:23:cd:86:8a:1f:5c:4f:28:ab:b0:c6:
                    d6:33:0a:cf:84:e0:b8:e1:d2:76:73:ec:ab:11:f4:
                    c3:cf:70:4f:f2:9b:08:04:6b:b6:26:54:75:3b:cb:
                    ca:5f:f1:7c:ee:34:64:10:0e:af:59:57:60:6a:a1:
                    2e:22:70:5f:3a:18:20:43:5d:d5:a9:09:1c:4f:b3:
                    5a:40:56:ad:a3:f4:7b:15:05:8e:4e:0f:e1:bf:8b:
                    2b:12:75:a2:88:6c:14:e4:c7:19:35:cb:f7:42:23:
                    05:73:18:6e:a5:e2:7f:70:9c:23:0e:e0:30:56:c0:
                    e3:4d:99:35:89:eb:bf:08:ba:57:86:c7:bd:85:a7:
                    49:24:0e:c6:27:77:32:ba:c7:43:9b:f6:d4:07:dc:
                    ab:f3:95:5c:f4:ec:c1:87:01:0c:65:bd:ab:d4:0a:
                    07:c2:8e:ef:52:d8:da:15:7c:99:05:6c:5b:7a:f3:
                    ea:a9:c2:ab:a8:08:f4:4f:ba:3d:9d:40:21:17:57:
                    67:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:CC:26:C5:72:77:FD:2E:1A:29:A3:6D:D4:AB:41:41:A7:BD:CA
            X509v3 Authority Key Identifier:
                keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:be:55:32:21:cc:d6:7f:0e:77:3d:2b:21:d3:b2:36:8e:
         63:26:72:df:37:73:e9:33:72:d1:ab:c0:40:11:1d:6d:7a:12:
         60:ef:cc:92:bf:9f:eb:db:86:1f:14:d8:12:d2:21:ab:50:c4:
         40:fc:ab:eb:aa:2a:50:c2:f5:e8:7f:20:ae:45:52:b2:1a:1e:
         80:0d:e4:81:9b:4e:ec:01:a6:e9:e6:e0:c2:3e:05:66:fb:12:
         c9:52:ae:5f:b8:2f:42:a2:e4:5d:59:f6:1a:0d:ec:83:f1:db:
         0a:a3:ff:36:4d:78:12:83:99:bc:d5:55:8f:1b:c9:23:be:c2:
         5c:60:d2:2f:e2:db:ed:af:c5:a1:79:0c:b9:31:fe:f6:eb:f6:
         5f:9e:5a:11:aa:56:de:0d:fd:49:c5:04:bd:bd:e8:73:d2:12:
         d5:48:b9:5b:b6:f5:b8:63:58:43:e9:d6:e8:2f:a3:e8:e7:bd:
         0d:c4:9b:ed:a5:28:ba:f3:38:fc:94:d8:be:26:0d:5d:41:80:
         2e:7a:1a:54:e4:3a:72:14:a0:79:e2:c8:12:f0:ca:bd:22:a0:
         17:be:47:ba:53:f0:96:f7:2c:90:ca:25:d8:97:45:37:1d:3b:
         9c:13:d6:e2:14:8a:a3:a3:7f:5e:c3:3b:59:bb:7c:aa:b5:39:
         59:4e:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:26:28 2025 by rpki-client