Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File:                     U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier:          7nuP55GmcM30C9G8A6x5WewQ6oPE98xA9PkbROTsnME=
Subject key identifier:   B6:E1:FF:6B:D2:50:23:B0:1F:BD:B1:6D:62:AB:71:C9:C1:21:75:29
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer:       /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial:       01975CB7B47C5082997C92710AF963AE04D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number:          05C3
Signing time:             Wed 11 Jun 2025 02:00:32 +0000
Manifest this update:     Wed 11 Jun 2025 02:00:32 +0000
Manifest next update:     Thu 12 Jun 2025 02:00:32 +0000
Files and hashes:         1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: kBoI9yXx/fbLVuO1prKci7AyOOj0LTMbAwdkYz0K1TY=)
                          2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b7:b4:7c:50:82:99:7c:92:71:0a:f9:63:ae:04:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
        Validity
            Not Before: Jun 11 02:00:32 2025 GMT
            Not After : Jun 12 02:00:32 2025 GMT
        Subject: CN=b6e1ff6bd25023b01fbdb16d62ab71c9c1217529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:a8:af:9c:d8:67:8c:60:75:94:a7:56:f1:
                    fd:76:a5:f7:75:6e:21:f8:c9:b2:a4:11:96:05:16:
                    b6:5d:01:87:0c:77:c5:a9:52:d7:91:3c:f8:3c:bc:
                    e1:fa:95:26:c8:d2:49:4b:2d:91:13:17:0d:23:9c:
                    52:0b:07:8c:07:cd:c6:74:19:49:01:43:aa:aa:1a:
                    e8:77:87:a4:f1:53:9d:e5:28:a9:0d:ad:5d:77:42:
                    33:c6:75:85:72:6a:64:b8:ae:e9:30:9e:9f:2d:64:
                    83:6e:b1:e6:45:7f:68:1b:ed:a3:bc:0d:7f:7b:b3:
                    2b:63:e3:b9:a8:c1:94:e5:2e:08:c9:25:6e:e8:80:
                    54:ef:66:6f:8a:11:29:9b:9b:54:25:82:46:a0:70:
                    b8:e8:61:f1:c7:3d:98:73:65:fc:12:c2:e6:ca:c7:
                    3e:3a:e7:e1:18:2a:b7:48:47:76:32:5d:45:11:1c:
                    fe:cc:dd:04:95:3f:b5:11:3c:5c:e0:3c:10:46:5f:
                    3b:01:24:63:11:18:2e:5b:f9:66:a0:66:43:db:65:
                    89:46:8b:06:5c:6c:e9:4d:2e:e4:db:f8:21:92:99:
                    f8:42:3c:e5:5f:b1:d2:d5:20:d2:58:33:e4:78:38:
                    2d:65:1c:bc:00:12:66:17:d4:b3:c9:a2:fa:04:ce:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:FF:6B:D2:50:23:B0:1F:BD:B1:6D:62:AB:71:C9:C1:21:75:29
            X509v3 Authority Key Identifier:
                keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ef:c2:ac:85:8d:74:f6:0a:1b:ae:95:40:92:13:f9:ed:91:
         ed:55:99:f8:b5:44:a1:85:60:61:0f:c8:07:72:15:d0:0d:d3:
         40:12:39:09:13:4f:ac:a7:82:58:84:1b:2d:06:df:77:00:21:
         54:b3:10:d2:2d:6c:de:e3:4d:40:93:61:16:74:20:ff:31:ac:
         c8:0c:80:52:9f:4d:cf:ec:6e:23:05:4c:81:50:54:ef:1a:70:
         2d:1b:f6:6d:81:96:6f:ca:3c:a0:13:39:c4:5e:4f:d8:11:6c:
         3f:91:9c:c2:58:38:8e:78:be:7f:13:ef:23:de:65:95:11:85:
         6a:8f:6a:bf:f6:19:99:f6:9b:25:eb:88:5a:6b:15:24:ca:76:
         6f:35:c7:e8:e5:64:22:91:0c:f6:49:c1:09:4f:46:a3:9a:38:
         8d:f4:f1:4a:97:26:7a:d6:e0:ff:9b:17:30:a9:e8:eb:2f:7e:
         f7:b7:5b:b2:b1:3b:65:65:8e:a4:e8:a7:65:36:5c:be:18:f4:
         41:ca:0c:f4:55:4b:b7:bb:97:cf:02:45:88:d6:ee:af:f9:98:
         e0:2b:96:19:ca:30:a7:3c:ff:b3:6c:48:12:45:af:48:27:88:
         35:26:08:bb:61:3a:03:b9:10:34:17:21:39:37:06:e7:de:08:
         b7:b9:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:15:46 2025 by rpki-client