Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          4iRqZBNtW3rKOq0fwXJCr7a/k4YJSYceon3iz+8aRuM=
Subject key identifier:   6C:77:C6:45:7E:60:C7:AD:84:CA:3A:FF:61:16:6F:BB:C6:DE:08:99
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       01974BFB489BC102E4A3E216050F195A29E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          0789
Signing time:             Sat 07 Jun 2025 20:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:48 +0000
Files and hashes:         1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: qLTIJXa4swZDLUmc3y8Rq2LbP+v58c5Kv0UjZhH3HP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:48:9b:c1:02:e4:a3:e2:16:05:0f:19:5a:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: Jun  7 20:00:48 2025 GMT
            Not After : Jun  8 20:00:48 2025 GMT
        Subject: CN=6c77c6457e60c7ad84ca3aff61166fbbc6de0899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:df:4e:fe:4d:ba:3a:59:81:19:29:ec:5b:
                    24:e0:48:68:ef:d5:a6:bc:66:4e:aa:26:4c:5f:30:
                    1c:78:86:fa:96:3e:5f:ee:60:8e:a6:50:20:d1:2b:
                    01:09:f2:f1:f0:a3:95:da:1a:78:64:72:84:77:7e:
                    68:a1:d8:72:69:08:fc:93:55:05:a1:17:d9:69:fd:
                    8b:63:98:a9:bc:74:c3:0b:e5:02:40:4d:eb:c8:51:
                    4b:09:b4:df:51:5a:de:aa:93:5d:5e:52:82:78:04:
                    c6:ac:c2:a7:c8:7d:b7:45:41:ba:26:ed:6b:e4:07:
                    da:18:f5:92:16:ad:0f:03:63:4f:40:8f:04:e4:53:
                    92:78:62:10:cf:47:93:8a:13:80:d5:99:74:c6:73:
                    ed:26:b9:3a:8c:7c:ad:db:3a:88:01:29:86:5e:dc:
                    27:c2:6b:a5:76:f8:5f:d9:7f:7a:0c:28:cd:c5:67:
                    ed:ff:b2:27:83:2d:d9:72:56:02:20:5e:87:9d:97:
                    10:00:50:ca:5b:99:69:9e:d6:e8:33:78:71:a4:97:
                    7f:34:3a:4a:67:e5:6a:e9:aa:1b:63:8e:c5:58:5a:
                    80:d2:ca:fe:cb:84:2c:03:83:d0:08:87:c0:ba:b1:
                    b5:71:c8:db:4d:ab:d5:03:ad:7b:e5:9f:51:08:a0:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:C6:45:7E:60:C7:AD:84:CA:3A:FF:61:16:6F:BB:C6:DE:08:99
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:60:4b:b6:e5:71:d2:0f:03:a7:04:30:80:93:61:b2:eb:01:
         8d:d3:d8:80:ac:d1:3a:33:a4:50:21:ee:2c:d7:38:6e:23:2e:
         5a:fc:b3:47:ea:e9:5a:a5:7b:f9:2c:43:a2:3e:21:1a:7b:fd:
         81:83:ed:ad:f9:de:cd:1a:bf:2c:65:c1:33:b4:33:f0:ba:97:
         99:8f:85:8e:a2:e9:29:0f:6d:cc:ef:7d:09:73:5f:8c:1b:aa:
         1a:0d:cf:54:af:4f:38:8c:94:19:a8:10:b5:c8:77:77:da:dd:
         36:48:37:3b:4f:88:d4:dc:73:44:03:3e:b6:4e:de:c4:75:18:
         c5:a4:87:17:ec:b4:b3:8d:46:d7:ae:70:6e:98:fc:89:e5:de:
         8c:b8:12:18:03:4b:94:67:54:1e:75:51:f0:cc:66:e6:e4:c5:
         91:fb:62:ab:22:c7:b8:7f:ad:6b:b3:10:6e:ec:e7:79:6b:8e:
         70:9e:a6:94:0e:d8:b1:27:aa:e3:90:d3:23:a3:33:48:eb:a7:
         cd:72:5a:fc:5c:14:7f:28:5b:0b:37:3c:30:54:c0:c5:b8:b0:
         f6:b5:a7:6f:31:24:54:6c:88:5d:58:d6:05:c2:06:c3:37:10:
         16:58:e3:62:ec:4a:e6:46:35:58:35:34:ea:e6:59:cb:28:01:
         87:82:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:47 2025 by rpki-client