Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File:                     uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier:          th5bGA2ySX+tXJgiB76c7otX5wD2ETnWl+FxT76bFpI=
Subject key identifier:   9A:F1:03:F2:D5:75:90:BB:62:4B:64:34:49:48:08:93:B2:47:5E:37
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer:       /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial:       019751217B348463DE0ED79A493787E346EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number:          04CC
Signing time:             Sun 08 Jun 2025 20:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:38 +0000
Files and hashes:         1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
                          2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
                          3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: ukoTLv9JI38lGulupJ0rUfpISYg827JVpwK4upX9y84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:7b:34:84:63:de:0e:d7:9a:49:37:87:e3:46:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
        Validity
            Not Before: Jun  8 20:00:38 2025 GMT
            Not After : Jun  9 20:00:38 2025 GMT
        Subject: CN=9af103f2d57590bb624b643449480893b2475e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:04:58:e7:ca:78:14:0f:71:a0:b6:02:50:
                    ce:5e:d1:cd:3c:42:2e:c3:94:66:2b:62:a1:65:11:
                    9a:d2:2f:d8:47:6b:83:34:26:c8:10:04:a3:08:d8:
                    3a:f9:14:30:46:cb:b4:f4:c7:45:02:eb:d5:ef:c0:
                    f0:78:cd:e0:32:b0:ca:7d:bb:98:bd:d6:ee:6d:0e:
                    b3:79:7e:ae:e2:6e:85:35:2a:af:6b:1b:e4:29:8c:
                    ba:41:80:82:b9:a6:fd:c9:ae:17:0e:a2:ab:88:2d:
                    a1:8f:5b:0c:50:d3:b2:6d:79:fb:53:2b:a0:e4:7f:
                    77:49:8e:ab:e2:d7:31:b7:dd:d0:c4:53:75:13:f1:
                    53:9c:24:c9:0f:43:65:ce:86:d2:4d:76:22:5f:ab:
                    f9:7e:f5:44:d0:cb:e0:88:53:7b:6d:16:b8:71:b4:
                    36:f8:04:df:bd:b2:16:ce:a9:b6:ef:01:ed:58:20:
                    cc:27:c8:4a:4b:ed:13:ed:9e:7b:04:0c:f8:9c:8c:
                    7d:92:ee:10:b9:29:3e:ca:7c:50:1e:90:71:40:49:
                    da:95:45:d0:18:b9:ea:a5:83:c8:43:1f:48:66:69:
                    fe:7f:44:05:7f:07:3a:3b:69:9e:37:8c:26:28:31:
                    a3:fb:b8:66:d0:f3:61:3f:b1:8f:99:1d:5f:77:26:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:03:F2:D5:75:90:BB:62:4B:64:34:49:48:08:93:B2:47:5E:37
            X509v3 Authority Key Identifier:
                keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:80:89:b2:34:56:f7:1b:09:1e:9f:7d:78:c3:ef:1a:3a:4a:
         d0:5e:68:07:ba:03:9f:c4:d5:bd:2a:bd:68:72:64:c0:be:31:
         38:89:47:bb:8b:a0:58:5e:d7:6e:28:fe:3d:b0:f4:96:4c:93:
         8e:e9:3a:f1:0a:51:7e:e7:60:9d:2b:09:b8:31:d6:82:69:99:
         18:52:6f:44:99:3e:73:c6:0e:f0:53:53:ed:8c:68:e8:74:82:
         6e:f1:db:8c:e8:7a:50:95:76:ba:7e:73:f7:ac:f3:71:42:7d:
         57:31:33:10:b3:9a:d9:3d:6f:b5:2c:79:88:00:3f:76:10:89:
         e1:e5:55:08:d1:5d:99:10:f4:68:72:a1:e7:94:f3:1a:7b:f7:
         a1:59:ec:92:41:a2:32:7b:3c:be:64:2c:1f:c5:b9:ff:4b:1b:
         2c:52:70:07:dd:01:11:58:27:4c:1a:dd:9f:36:e5:77:b5:e8:
         dc:f2:69:4a:ab:52:26:e1:a1:20:0e:fd:0b:07:14:d4:00:97:
         95:b8:2b:fc:86:47:d1:76:7b:a1:30:d4:b7:93:92:81:d6:2f:
         c8:b0:e2:d3:2c:3b:cc:09:91:9f:a0:c0:fe:ae:e8:12:da:3f:
         6b:ec:ae:b1:70:75:55:60:e4:33:9e:e3:0e:ab:1b:6e:0a:8c:
         cb:8a:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:47 2025 by rpki-client