Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          um04aY5oJ48xNe3bAHvZ/osn6RE3XaV5SfLG/v5IMIA=
Subject key identifier:   36:9F:17:3F:8D:E1:6C:0F:D4:08:45:3E:03:29:D8:90:83:15:FB:0C
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       01974D0DFDC86B73586CAE0DC6BDFF6761B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          04DA
Signing time:             Sun 08 Jun 2025 01:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:51 +0000
Files and hashes:         1: oXndQEWLAi93Q3gStogUAMhpojg.roa (hash: 3yyWwrPlKu/PVm4mmaMjgKzNXRTuMyz0HTS/+PODjNA=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: VvW3oJmI3YkDnka/c7uMRI4LNpFlMaciAWc2cvkBahg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:fd:c8:6b:73:58:6c:ae:0d:c6:bd:ff:67:61:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Jun  8 01:00:51 2025 GMT
            Not After : Jun  9 01:00:51 2025 GMT
        Subject: CN=369f173f8de16c0fd408453e0329d8908315fb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:e7:28:d8:57:51:6a:ed:3a:5b:bb:f0:6b:
                    a3:a4:6e:6a:a6:d1:5f:42:88:0d:09:f2:1f:ab:eb:
                    d6:4d:72:81:c3:d4:0b:6e:4a:82:d3:a9:d5:1a:a4:
                    e3:e5:53:e4:9b:71:fd:02:9d:58:5e:93:c8:62:4f:
                    1e:3f:dd:85:38:ef:d2:07:57:3e:07:85:a7:2b:95:
                    0b:9b:bb:40:3a:92:0a:29:61:dc:52:60:c8:d3:c1:
                    d2:e7:57:4f:58:3c:21:ca:74:3c:ca:ce:c1:e0:5d:
                    64:8e:13:1b:ac:5d:26:13:04:0e:35:56:cf:cd:5c:
                    26:22:47:0b:79:d6:88:9f:f9:9c:99:95:5e:85:59:
                    b5:9d:14:84:60:2d:65:0a:60:dd:2f:1f:54:ad:af:
                    a7:58:65:75:dd:be:31:1e:82:22:5d:89:fc:46:a9:
                    5f:62:10:80:da:90:ed:ba:a3:2d:e2:bf:01:e6:26:
                    6a:21:33:aa:23:3d:cc:88:eb:40:0b:89:e9:10:41:
                    ce:6e:32:12:db:2d:f1:d2:5e:66:0e:53:8b:6f:2a:
                    80:3e:b7:23:f7:74:8a:64:1f:d4:20:ab:6b:fe:25:
                    0e:01:0a:ae:cc:02:e5:a9:19:11:fe:c2:25:96:6d:
                    dd:8d:bb:ca:5d:0b:6b:2b:14:62:76:4f:06:2f:1c:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9F:17:3F:8D:E1:6C:0F:D4:08:45:3E:03:29:D8:90:83:15:FB:0C
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c3:e1:28:d1:c1:61:ed:0a:ad:ef:1a:6c:bb:94:9a:65:5e:
         ec:88:95:85:34:40:01:ec:bd:98:ec:61:c7:24:a7:a1:f7:82:
         9b:1b:67:45:e0:b6:e8:7e:84:ec:6e:5b:2f:ec:ed:cb:23:db:
         a2:1c:14:a0:a1:1a:c5:4f:77:cd:71:7f:99:7e:81:7e:a3:7e:
         fe:01:db:3a:e9:c5:02:62:a7:55:31:5c:d2:8e:df:f4:d2:b8:
         a9:ae:16:9e:e7:99:d3:cf:50:56:7d:48:51:01:1b:6c:c6:ac:
         e5:cb:b8:1c:38:ba:1d:cd:cc:ae:e8:6d:3d:fe:d9:cd:f0:e8:
         6d:a6:f5:4a:36:dc:4e:aa:60:1e:39:4d:56:06:92:7b:10:b9:
         78:8b:5d:14:41:b9:20:b8:74:77:fd:83:2d:77:e1:1e:e4:d1:
         85:33:d8:25:00:4d:a9:10:76:e7:52:ae:02:0c:8c:7c:12:a8:
         8e:82:c3:be:80:30:6f:5e:9a:90:60:90:81:63:89:ad:85:b9:
         c9:8f:77:5d:23:13:b9:cb:7b:a3:96:8e:51:d4:bc:28:e6:26:
         d4:a3:76:94:97:bd:f9:99:b5:04:cf:8b:90:24:08:ee:77:5d:
         b6:98:b0:02:e5:ff:88:e3:9f:2e:d9:16:6f:49:20:2f:9e:0f:
         91:12:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:45 2025 by rpki-client