Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File:                     UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier:          YHi0QkElRF/ibj43mfHa2sUAC0gNKhrwm4DixLa7oJ8=
Subject key identifier:   E0:DA:B2:B6:F2:14:4C:95:30:CB:C3:3B:9B:D0:D3:DE:DC:22:66:F2
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer:       /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial:       019758A4559B262ECF190C3E36B9CC80C395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number:          14D6
Signing time:             Tue 10 Jun 2025 07:00:54 +0000
Manifest this update:     Tue 10 Jun 2025 07:00:54 +0000
Manifest next update:     Wed 11 Jun 2025 07:00:54 +0000
Files and hashes:         1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
                          2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: zCx9/M5UKFbUC4hrtq3DqKiOgm73gdMbcdLDzSUuK5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a4:55:9b:26:2e:cf:19:0c:3e:36:b9:cc:80:c3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
        Validity
            Not Before: Jun 10 07:00:54 2025 GMT
            Not After : Jun 11 07:00:54 2025 GMT
        Subject: CN=e0dab2b6f2144c9530cbc33b9bd0d3dedc2266f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:89:4f:c8:98:83:31:06:16:06:c3:7a:68:
                    67:c6:62:6b:95:bc:77:9e:fa:7e:fb:b3:fe:17:2b:
                    4d:b9:01:e5:d5:6e:fb:f5:95:ad:71:76:90:22:e3:
                    42:a6:3f:b8:60:b2:41:66:ce:81:85:f2:b8:83:94:
                    e2:70:51:ca:34:69:c2:20:9e:d9:67:17:e9:13:76:
                    6f:d2:41:be:34:82:f5:e7:44:00:1c:f6:52:c2:54:
                    98:67:d4:83:ec:c1:ef:24:1d:c1:9a:ec:58:33:27:
                    c4:38:8a:b4:49:2c:a6:42:f1:16:36:2d:5b:ef:c1:
                    df:1e:35:b3:7f:76:7e:a5:a7:32:c7:6c:2e:21:21:
                    cb:8c:3f:3e:a0:47:ce:52:0c:86:43:c3:71:d7:44:
                    2c:49:d3:45:f3:14:79:fb:3b:d5:55:70:a5:97:19:
                    1a:58:2d:34:e4:0e:a9:27:c6:09:37:2f:28:79:58:
                    4d:a3:37:a5:ca:57:07:85:39:92:0e:c3:f6:51:a5:
                    31:f5:13:58:03:4d:d8:f3:55:23:ec:a4:37:28:6e:
                    56:55:20:d7:0f:01:b0:c1:5a:e3:be:bf:1a:eb:97:
                    54:e7:3d:fd:ab:ae:57:0e:8e:02:2f:0c:e7:6f:e1:
                    cd:2f:60:eb:1a:4d:e0:fa:6b:df:0c:ea:bb:87:0e:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DA:B2:B6:F2:14:4C:95:30:CB:C3:3B:9B:D0:D3:DE:DC:22:66:F2
            X509v3 Authority Key Identifier:
                keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:29:be:36:68:b8:ab:b0:3c:f3:26:95:e4:87:58:f2:27:
         86:a1:8f:07:d8:b2:dc:dc:fd:a9:53:bf:a6:56:27:81:ae:d4:
         b1:e2:a8:70:5e:de:a2:51:39:70:c7:14:0e:ac:ae:0f:fe:50:
         33:0a:6f:a6:91:1b:e5:76:14:05:88:83:47:d1:14:9c:57:53:
         94:e9:13:13:f6:53:98:25:55:9e:9e:eb:d6:ca:ed:1a:e7:77:
         89:d3:1b:aa:76:ac:d7:40:92:74:8d:f9:b7:9d:6c:a6:8f:0e:
         16:06:e8:15:a1:4e:e6:37:4a:62:9d:7d:03:67:cc:ef:5e:d3:
         41:79:ad:7e:06:9d:a3:aa:11:9c:a4:2e:37:a9:89:f0:25:29:
         16:01:03:ac:ca:f3:14:5f:af:82:7c:e4:cd:d5:92:67:a5:43:
         02:a7:32:f2:7a:b8:31:bb:f1:db:8d:fb:97:64:97:a2:a2:06:
         ed:79:52:9a:c4:ae:4e:b5:b6:49:80:77:ee:d1:c5:13:43:18:
         91:09:b5:5f:a7:c0:b4:f0:6b:b7:85:4d:89:a0:12:c4:4b:42:
         69:48:83:b3:4d:1e:df:d0:c1:42:f0:62:07:b2:97:64:ed:e7:
         22:53:d9:ac:ae:11:67:b1:b1:1a:d5:ce:5c:db:37:32:d2:bc:
         5b:40:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:41:22 2025 by rpki-client