Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          jHSZ0f7G3QSvGc8iwdrXCChy1Zdc8wVq4xTJounvYI8=
Subject key identifier:   F8:CA:A3:4F:E7:CD:6D:DF:F9:52:74:68:29:9F:EC:5B:19:6D:3C:AE
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019638E4FC808043854F3FAF778A19B4377E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          C9
Signing time:             Tue 15 Apr 2025 10:00:52 +0000
Manifest this update:     Tue 15 Apr 2025 10:00:52 +0000
Manifest next update:     Wed 16 Apr 2025 10:00:52 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: 9BI6YZGiFxRTCfZ9fFFmgSGWswVWQgPI5m/uYWf5QeM=)
                          2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:e4:fc:80:80:43:85:4f:3f:af:77:8a:19:b4:37:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Apr 15 10:00:52 2025 GMT
            Not After : Apr 16 10:00:52 2025 GMT
        Subject: CN=f8caa34fe7cd6ddff9527468299fec5b196d3cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:19:68:d4:d2:6a:b7:f7:26:80:26:6a:8b:
                    c9:10:4b:0c:dd:1a:27:c3:ba:49:a8:d1:9e:22:06:
                    ec:48:9e:a5:28:d2:20:83:a5:30:ec:76:16:25:90:
                    27:18:8c:cd:49:e4:a7:e5:5e:1e:27:15:4b:b8:b0:
                    99:06:34:96:ef:56:13:8f:64:db:72:86:16:59:f8:
                    1c:2e:0d:e3:ed:37:fc:ec:79:8e:39:81:f6:34:68:
                    42:9d:b1:d8:e2:fd:7b:6a:d9:99:5a:a0:89:25:e2:
                    c0:77:45:9f:f0:52:f0:cd:4f:5f:cc:9c:a5:01:49:
                    55:01:b0:50:ab:88:51:97:3b:ed:a7:5b:42:e3:1f:
                    96:cc:e4:cc:eb:a0:93:e0:c5:0d:33:48:c9:5e:4b:
                    4f:62:36:6e:4b:96:e6:d0:7e:c8:62:df:c4:48:d1:
                    fa:db:0a:7e:61:04:5a:72:69:4b:f4:63:04:f0:0a:
                    c6:42:62:df:1a:a8:23:4e:18:85:65:63:86:f7:1f:
                    fd:18:7a:4a:a0:c3:10:62:91:df:b7:f0:fe:15:9a:
                    9a:03:c8:7c:19:d1:45:0b:0d:c2:db:8c:ee:c4:57:
                    17:9e:a4:23:c2:bb:ea:36:7d:ef:b6:73:a4:04:b6:
                    82:c7:33:fd:a1:14:d7:cd:6b:3d:d3:51:a9:e4:f9:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:A3:4F:E7:CD:6D:DF:F9:52:74:68:29:9F:EC:5B:19:6D:3C:AE
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:64:4b:57:5a:d9:ec:f6:f6:7f:c6:e2:23:80:6b:99:46:
         5b:1b:b3:e0:7e:b2:82:25:2c:a9:93:89:2b:ab:8c:aa:9f:61:
         6a:29:29:72:86:78:f7:3a:9c:0b:af:81:14:2e:29:cf:3e:c0:
         f7:ad:ad:70:c5:55:f8:de:ec:67:2f:39:0c:3f:b9:c2:8c:27:
         f2:7c:79:06:fb:16:53:ee:2b:f7:cc:2b:35:0d:bb:6f:10:e7:
         4b:39:fe:84:63:8f:df:a0:5f:1b:6a:97:96:d9:02:08:e9:03:
         e3:7e:f9:f0:bb:d0:d2:4c:c9:6b:04:c0:e9:44:71:2e:c2:22:
         f2:90:af:cf:16:0f:73:a2:2a:67:fa:93:85:d0:53:76:cc:16:
         64:b4:1d:2d:dd:43:db:2d:5d:46:5d:89:a6:9d:b8:23:52:8e:
         18:d2:93:ef:17:53:94:83:88:f2:94:6a:ce:5b:f6:78:8d:5a:
         1f:83:ea:1d:da:5e:6d:3b:83:e8:0b:c2:80:66:99:96:f3:17:
         9c:0d:5b:d4:0c:c2:e0:a6:5d:10:2f:d6:45:bf:c4:e6:22:37:
         6a:df:5f:01:8e:ba:86:ba:0a:67:69:1e:53:78:93:2a:ba:8e:
         1f:81:95:11:89:60:c2:ea:36:b3:17:bb:c0:2c:ff:55:f2:ef:
         02:76:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:28:00 2025 by rpki-client