Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          abjqTbPdjnGo6oS/TU32TJoYGIwjae7wnq8BEnBddHY=
Subject key identifier:   B3:D7:6B:8C:A2:EF:CA:76:C3:21:94:1C:70:9E:45:21:82:D1:18:24
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01975FB8FF458654AB90B29036F4049D310F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0EB3
Signing time:             Wed 11 Jun 2025 16:00:48 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:48 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:48 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: 1ma64B5fR3t5OBke5fuys6hyKKRp9QGj4dvwiEIoJlo=)
                          2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b8:ff:45:86:54:ab:90:b2:90:36:f4:04:9d:31:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jun 11 16:00:48 2025 GMT
            Not After : Jun 12 16:00:48 2025 GMT
        Subject: CN=b3d76b8ca2efca76c321941c709e452182d11824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:91:1b:7e:04:03:21:9d:e3:a4:00:e8:6c:
                    a4:ca:05:c2:d3:c2:bf:d0:bc:9e:fd:62:84:6b:7f:
                    84:7d:6f:5d:f3:d4:de:03:4c:ca:0d:c1:c8:de:47:
                    a5:ca:0f:b0:c4:61:2f:ae:f8:49:be:30:70:78:fd:
                    f7:00:7a:12:bb:65:42:d6:e5:ff:3e:21:9a:a3:30:
                    0e:fc:f2:b5:5d:e4:c9:4b:0c:bb:ca:af:c0:4b:25:
                    f5:57:ca:b9:52:19:f3:b9:c2:9a:a3:a9:8d:24:4d:
                    84:36:36:88:78:aa:37:c6:d0:a7:d7:2a:7a:9d:98:
                    6f:62:30:d7:36:72:1e:dd:5a:8a:02:53:89:6f:e2:
                    f2:73:2a:0c:bd:31:0b:e4:fc:5f:17:7e:c8:d3:c2:
                    71:0e:b7:b5:ec:b7:3c:98:66:20:08:36:b0:41:5c:
                    52:0a:5c:0d:f5:15:1e:d2:d6:2d:08:4c:a8:1b:18:
                    6e:2a:e5:c0:b6:50:1a:93:6f:05:84:ef:9e:5a:a9:
                    59:cf:f3:cf:9f:43:93:96:a4:3e:e7:65:8b:4d:7a:
                    a8:ad:32:f4:08:39:80:62:77:43:d1:e3:e8:36:9e:
                    60:3a:87:c1:8f:cd:b4:6e:49:35:09:8f:19:4a:82:
                    07:e5:5f:c4:f2:a6:f2:bc:93:19:dd:fa:2e:8c:af:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D7:6B:8C:A2:EF:CA:76:C3:21:94:1C:70:9E:45:21:82:D1:18:24
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:1d:bf:3d:1d:83:01:57:ea:ad:63:96:4b:64:26:b6:1e:
         bb:fc:b2:c6:d5:84:15:26:06:1a:5b:11:bb:73:90:e7:92:03:
         a4:5b:99:a8:23:ac:de:09:33:af:71:a2:d4:79:aa:98:06:7b:
         9e:4d:28:0e:8f:ea:b0:fc:3a:c6:c5:d6:73:e2:36:3d:65:d4:
         ef:9b:c6:1a:b8:17:ca:63:7f:bc:8c:80:99:f5:19:d7:5c:30:
         52:62:8d:88:b7:ba:05:e5:a0:c7:c3:b1:2e:63:59:10:60:57:
         a1:ba:49:10:ce:3a:62:63:bc:47:ac:5c:2f:70:fd:9c:57:12:
         99:ef:78:e2:92:73:07:93:f6:be:bd:88:38:0e:93:b0:17:5f:
         ee:00:82:ba:fc:f9:4e:98:b5:39:40:1f:9e:20:e4:a3:44:78:
         a9:c4:c9:2e:e7:4c:c9:ca:70:83:df:03:cc:d7:ec:94:2c:11:
         54:a4:9b:47:12:5d:7d:2a:f8:43:0b:87:41:ff:8f:cd:7b:e7:
         10:ed:fb:e1:05:d7:ef:5c:6a:eb:6e:22:84:c3:f9:4f:20:7f:
         ac:b4:2b:0c:f7:16:d4:03:62:18:72:ea:9d:51:54:20:96:bc:
         ac:68:b7:e3:d7:83:ee:32:ab:84:5d:10:e4:05:84:35:bb:d3:
         0f:0c:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:50:04 2025 by rpki-client