Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File:                     UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier:          II8wBuef93l7nt67EC/DDmkAFqAgq+1qCuu009hJfNA=
Subject key identifier:   1E:73:AC:8A:04:5B:93:71:D4:78:2B:67:19:B3:B6:83:0B:5F:06:0A
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer:       /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial:       0196556E98903DBCD795B105D157CBB5F716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number:          0CC7
Signing time:             Sun 20 Apr 2025 23:00:33 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:33 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:33 +0000
Files and hashes:         1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
                          2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: K0nGRp3ydXjGdlH0Pd4c3GF+KlCJKXuO7jmpy64mz5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:98:90:3d:bc:d7:95:b1:05:d1:57:cb:b5:f7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
        Validity
            Not Before: Apr 20 23:00:33 2025 GMT
            Not After : Apr 21 23:00:33 2025 GMT
        Subject: CN=1e73ac8a045b9371d4782b6719b3b6830b5f060a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:44:8a:31:28:7c:13:c0:bc:25:11:3b:9f:
                    a3:8c:95:5b:df:0e:d7:e6:03:cd:0f:e8:a5:c6:14:
                    83:0a:5e:35:21:bc:58:20:f2:67:4c:77:74:9b:d2:
                    de:34:9b:76:4e:06:fc:a1:bf:68:4d:b0:b6:1d:2c:
                    f7:22:c7:2a:6a:39:fc:fc:df:b0:0a:42:eb:e4:82:
                    9c:3a:88:23:f8:a6:ba:9f:69:90:f6:60:2e:3e:3d:
                    79:21:b1:40:e6:14:d4:ab:ec:0b:ac:d6:6d:16:54:
                    12:80:ae:1b:ae:b2:e2:cd:91:8f:4b:1c:52:fb:74:
                    4b:f7:68:58:df:22:de:33:28:b2:6d:c6:94:23:8d:
                    ec:17:70:de:9e:40:09:69:90:2f:dd:ae:19:72:57:
                    a2:27:f9:ef:c2:41:86:f7:20:26:e0:e7:14:99:9f:
                    20:d6:40:60:e0:d5:4a:54:a3:d5:d9:0a:43:9d:dc:
                    fe:05:47:3c:d3:98:54:a8:34:2a:b1:60:fb:0c:44:
                    f3:18:05:4d:42:19:0f:c6:7d:e9:df:c4:fd:c8:aa:
                    63:9a:8c:f7:e7:e7:2f:ee:cd:c1:70:13:09:c4:ce:
                    06:81:60:8d:80:88:02:b4:3b:22:36:c4:3c:53:61:
                    e7:b5:98:59:9e:00:03:f9:51:bc:39:69:7a:65:f5:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:AC:8A:04:5B:93:71:D4:78:2B:67:19:B3:B6:83:0B:5F:06:0A
            X509v3 Authority Key Identifier:
                keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:33:18:70:2c:f8:fb:de:c3:84:16:22:65:3b:30:38:ec:9e:
         b9:55:36:d6:3a:2c:34:4d:e2:b9:79:cd:ca:4c:52:29:04:4b:
         11:ee:61:a2:65:a2:04:39:f2:72:64:b2:0c:bc:b1:b8:da:80:
         43:27:7f:bd:66:e0:c6:ca:6e:f8:00:66:72:50:be:36:02:50:
         37:17:46:a2:50:83:8f:6c:28:13:18:33:5e:5b:44:32:2b:3e:
         ca:48:7e:f3:68:58:16:18:12:d6:79:2b:b9:3c:24:01:bd:4d:
         b2:ff:99:23:38:10:1c:90:8b:8d:44:17:38:eb:d6:28:c3:0c:
         48:f7:63:d2:47:36:b3:83:48:8a:92:5d:e4:f9:db:5c:83:42:
         e3:0c:22:30:30:5d:18:86:96:4f:31:7d:8d:31:a5:03:7a:1c:
         95:7f:13:4e:79:09:46:54:3c:83:bf:2d:b6:6a:f6:cf:ab:04:
         35:6f:41:e2:3a:a3:4e:a8:0a:f8:89:ec:43:f9:8c:1a:4b:4f:
         e9:f4:6e:61:31:fa:7e:9d:f5:14:a0:36:cf:b0:1f:ab:1f:4d:
         b1:ae:73:03:59:23:3e:a6:70:22:3f:81:85:44:9b:9d:37:97:
         41:be:74:d4:ca:51:94:08:61:a2:40:bd:4a:c2:94:66:a6:f3:
         68:be:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:02 2025 by rpki-client