Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File:                     rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier:          ckbQu0Pp2DxtNsAHzY01tc0q1lhAryGPf2bD2IBb8BE=
Subject key identifier:   EB:C6:15:67:5A:1E:E1:85:FC:CE:0C:50:7F:9E:30:50:7D:1D:32:1B
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer:       /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial:       01974CA02257944554320E5655358C383ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number:          01A3
Signing time:             Sat 07 Jun 2025 23:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:52 +0000
Files and hashes:         1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: 6BaFpW6SKazUldoKyCJeEY/A6UJIWzINVmFOZbP6Mi0=)
                          2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:22:57:94:45:54:32:0e:56:55:35:8c:38:3e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
        Validity
            Not Before: Jun  7 23:00:52 2025 GMT
            Not After : Jun  8 23:00:52 2025 GMT
        Subject: CN=ebc615675a1ee185fcce0c507f9e30507d1d321b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:aa:50:fd:5c:ec:d9:00:7f:0e:a9:b3:bc:
                    41:25:30:a7:f3:b4:c3:8a:8c:44:67:ee:c1:ba:46:
                    4b:56:84:77:5d:ce:13:58:2a:e0:ba:40:12:9c:78:
                    3f:39:ad:08:33:8b:e7:72:0f:ff:4a:86:b0:0e:00:
                    96:db:34:1d:8a:cd:a5:93:a4:a7:ec:41:87:0e:e7:
                    68:f5:79:48:5d:f9:ee:a6:cd:d4:0a:c7:f5:fa:18:
                    3e:ce:9c:fd:a6:e9:db:78:33:e7:bb:00:3c:d8:62:
                    fe:c7:44:f2:6f:44:f3:18:4a:7c:24:b3:4c:ee:23:
                    15:ff:a9:5e:2e:15:68:2d:bf:eb:45:0f:19:1a:18:
                    4e:c3:18:22:6b:0d:c1:be:2f:b4:c0:8e:d6:15:7a:
                    2e:00:ad:da:0f:6b:3e:ed:05:60:3b:64:ba:2d:ac:
                    5b:c4:6c:3d:b2:6e:b8:bf:3c:94:41:0e:f1:57:a1:
                    cd:1a:e5:ef:5f:42:4d:c4:df:bb:e6:f2:c6:93:74:
                    c5:ed:aa:d7:61:23:0d:63:fb:13:08:5a:93:a7:40:
                    36:7b:c2:d3:2a:4d:a1:2e:c8:f2:22:b7:be:9f:71:
                    40:f0:00:1f:0f:a1:02:54:e2:04:e1:9a:58:fb:f6:
                    d8:24:d1:7b:92:cc:32:06:d9:21:40:48:c3:35:53:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:15:67:5A:1E:E1:85:FC:CE:0C:50:7F:9E:30:50:7D:1D:32:1B
            X509v3 Authority Key Identifier:
                keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a1:6f:88:56:6d:ac:36:3f:57:81:d1:f8:1d:25:ad:6b:9f:
         3a:07:84:94:74:f8:d8:5f:e8:63:5b:c6:0a:cd:c9:8e:a4:9d:
         23:25:82:44:56:a1:16:d3:84:b4:c2:fe:37:66:6b:36:1a:6c:
         d6:3f:55:49:63:d9:26:74:96:72:42:dd:4e:89:cf:fe:34:a2:
         94:b7:e1:f3:09:2f:a0:c6:dc:e1:a1:5b:3b:98:af:32:7f:65:
         52:4c:8d:f8:8c:22:9d:0d:2b:a1:ab:f0:f3:19:4d:57:40:67:
         ec:c4:61:ea:36:17:6d:4a:b8:f3:95:26:22:c7:10:ec:89:c0:
         ae:db:e2:18:14:de:7d:16:d0:8e:2c:ad:63:2f:0c:72:d4:31:
         41:d6:c1:0b:e9:9d:db:06:92:24:d6:52:bb:6b:24:f7:30:96:
         a5:b8:5c:76:82:e8:c5:74:04:ad:75:47:ce:eb:26:a4:4e:de:
         7a:e7:e1:d9:d5:1d:45:8a:e9:33:df:2c:95:88:6b:76:62:5f:
         6b:7d:81:2a:e4:3d:2b:70:f9:ae:46:d5:00:db:80:e4:c9:4e:
         3b:04:66:32:2b:3a:ac:dc:5c:82:3b:40:36:e6:ea:c7:37:18:
         4f:9f:81:c3:ea:63:d2:7a:e3:d4:17:2e:6f:01:fd:70:00:6e:
         7e:10:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:06 2025 by rpki-client