Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          2wa0ikUouSq3RPa0tHxT9HHXGKXYkBSrfQEtJBk9UBw=
Subject key identifier:   61:51:29:96:2C:8F:0C:C5:CE:7F:30:94:85:F7:AB:76:16:30:6C:F3
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       01974D0DEB5800F56B9C45CD96CBF44E84B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          08EC
Signing time:             Sun 08 Jun 2025 01:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:47 +0000
Files and hashes:         1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: wtaTxprd0ehdZCOE4QWaEwFF0l1h0cx7h2Me0d2KUTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:eb:58:00:f5:6b:9c:45:cd:96:cb:f4:4e:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Jun  8 01:00:47 2025 GMT
            Not After : Jun  9 01:00:47 2025 GMT
        Subject: CN=615129962c8f0cc5ce7f309485f7ab7616306cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:9a:57:5a:aa:81:fe:ac:34:a3:14:5b:41:
                    81:36:f8:16:dd:93:b7:4c:75:46:18:94:81:22:86:
                    6f:14:a4:d2:74:c0:f4:d7:9d:c1:7a:23:ea:3c:fe:
                    e6:9d:60:7b:85:90:80:e6:64:a0:1e:2e:c8:97:d9:
                    18:7b:3a:82:cc:66:54:42:30:3e:82:bb:cf:4c:02:
                    80:f5:f8:99:37:88:c2:b3:9c:ea:dc:b8:91:96:25:
                    b5:d5:42:76:39:26:a6:a9:65:47:87:a4:18:da:6d:
                    47:0c:b7:85:2e:ef:be:55:f1:f3:62:ac:ef:9d:88:
                    40:a1:65:dc:cb:ee:4c:0b:a1:6e:bc:0d:98:ca:93:
                    60:69:41:0a:5f:2e:bd:eb:3c:fc:46:39:39:ab:95:
                    9e:e1:0e:b4:0e:d3:ea:7a:9d:7d:ab:9e:fa:d4:40:
                    90:d2:b1:d2:a5:46:31:2e:b9:9c:8e:88:47:18:77:
                    1a:a7:f6:54:0d:f7:27:bd:14:41:f4:a9:59:dc:1c:
                    86:7b:11:0f:3a:f0:1b:2f:b0:7e:e1:9f:79:18:c0:
                    5c:12:91:7a:06:66:08:1a:7e:21:68:b3:00:51:a8:
                    f7:61:da:5c:df:bf:00:7b:f6:92:c8:d8:cc:f6:4e:
                    ac:56:e5:d1:6d:c0:8b:22:14:df:54:24:86:73:2f:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:29:96:2C:8F:0C:C5:CE:7F:30:94:85:F7:AB:76:16:30:6C:F3
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:29:aa:9b:31:5f:93:ee:6c:a2:47:5f:06:c3:6b:77:80:
         8e:a4:df:ed:09:f3:d5:70:c3:7a:44:d1:45:1f:99:e9:ea:1b:
         82:15:95:61:8b:07:44:d2:2b:05:22:a5:6d:a4:00:7b:17:18:
         ee:79:f0:f8:9c:40:1c:57:f2:a2:b4:34:1a:2b:01:ac:4a:2f:
         3d:83:1b:be:96:a7:1c:35:04:90:67:d5:36:92:12:1b:34:3c:
         3b:4b:5d:ce:44:b3:12:0c:e9:9b:43:44:de:67:32:60:a8:5b:
         92:08:8a:17:0d:d8:9f:a0:2c:06:d6:f1:fa:f6:1d:8e:7c:a9:
         8b:9c:68:6a:34:bc:0e:6e:1a:bc:17:61:10:c5:87:5c:7c:b4:
         b7:8e:e4:4a:68:19:20:c7:0f:89:84:03:b7:5b:e6:8a:ab:fa:
         e8:7c:f7:b7:ff:f1:f5:87:c0:9f:8f:8e:ae:2a:84:00:18:46:
         b1:63:8f:75:ba:65:fa:3e:8a:18:7a:fe:2b:8a:7e:01:6e:f4:
         c0:75:ae:8a:c7:61:87:e6:4f:5e:f6:b1:96:09:33:fa:0b:ed:
         b4:1b:a7:03:85:8b:41:1e:e1:a4:91:10:4c:cf:52:95:83:d5:
         ec:03:2c:de:5c:d9:ab:60:98:2c:bf:e4:33:22:28:67:46:d6:
         d3:81:9a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDetYAPVrnEXNlsv0ToSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx
ODVlYjEwHhcNMjUwNjA4MDEwMDQ3WhcNMjUwNjA5MDEwMDQ3WjAzMTEwLwYDVQQD
Eyg2MTUxMjk5NjJjOGYwY2M1Y2U3ZjMwOTQ4NWY3YWI3NjE2MzA2Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUiaV1qqgf6sNKMUW0GBNvgW3ZO3
THVGGJSBIoZvFKTSdMD0153BeiPqPP7mnWB7hZCA5mSgHi7Il9kYezqCzGZUQjA+
grvPTAKA9fiZN4jCs5zq3LiRliW11UJ2OSamqWVHh6QY2m1HDLeFLu++VfHzYqzv
nYhAoWXcy+5MC6FuvA2YypNgaUEKXy696zz8Rjk5q5We4Q60DtPqep19q5761ECQ
0rHSpUYxLrmcjohHGHcap/ZUDfcnvRRB9KlZ3ByGexEPOvAbL7B+4Z95GMBcEpF6
BmYIGn4haLMAUaj3Ydpc378Ae/aSyNjM9k6sVuXRbcCLIhTfVCSGcy/8YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFRKZYsjwzFzn8wlIX3q3YWMGzzMB8GA1UdIwQY
MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt
NWE3Mjg5ZWY1ZjYzLzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz
LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6Ypqpsx
X5PubKJHXwbDa3eAjqTf7Qnz1XDDekTRRR+Z6eobghWVYYsHRNIrBSKlbaQAexcY
7nnw+JxAHFfyorQ0GisBrEovPYMbvpanHDUEkGfVNpISGzQ8O0tdzkSzEgzpm0NE
3mcyYKhbkgiKFw3Yn6AsBtbx+vYdjnypi5xoajS8Dm4avBdhEMWHXHy0t47kSmgZ
IMcPiYQDt1vmiqv66Hz3t//x9YfAn4+OriqEABhGsWOPdbpl+j6KGHr+K4p+AW70
wHWuisdhh+ZPXvaxlgkz+gvttBunA4WLQR7hpJEQTM9SlYPV7AMs3lzZq2CYLL/k
MyIoZ0bW04GaJw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:09 2025 by rpki-client