Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
File:                     1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft (raw, json)
Hash identifier:          aIDD3TrdVyCFVyHwjZdDPYBSH22yHw/WAAanAccjKts=
Subject key identifier:   B0:D6:AE:ED:35:A0:5C:28:8F:B6:87:AD:B0:E4:3B:F4:05:24:C7:90
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Certificate issuer:       /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial:       0197466726886C03404AE50AC3A703970A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
Manifest number:          150C
Signing time:             Fri 06 Jun 2025 18:00:54 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:54 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:54 +0000
Files and hashes:         1: 1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl (hash: U2BNioYqvZz8zfRO8b+7FAcSSdRg3NSa35aGJTTJFa0=)
                          2: z7Y6upJ_TkHMEGYoplQxNU1SqZQ.roa (hash: g8ersIEKF+DbLZ7cbrjxi/sIsUM2GOmUMJe3QIftaDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:26:88:6c:03:40:4a:e5:0a:c3:a7:03:97:0a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
        Validity
            Not Before: Jun  6 18:00:54 2025 GMT
            Not After : Jun  7 18:00:54 2025 GMT
        Subject: CN=b0d6aeed35a05c288fb687adb0e43bf40524c790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:1d:af:fd:4f:61:06:a6:bb:fa:7a:64:91:
                    ee:e1:10:11:92:e1:fe:b8:d9:80:30:59:88:37:ba:
                    78:6f:38:85:8b:67:e9:10:01:b9:6b:2a:6f:c8:4b:
                    3d:3f:3d:66:3e:44:af:3c:7f:cc:d9:43:1d:26:ae:
                    12:df:80:06:0a:f3:01:79:3b:4c:65:dd:39:e3:0f:
                    74:26:0a:09:d9:47:57:39:48:70:39:cd:8f:8e:85:
                    8f:84:d0:5f:c9:bd:ba:1f:96:2f:3a:06:4d:07:d0:
                    54:36:06:6c:dc:af:d3:00:0e:ad:e2:59:ee:3f:1b:
                    24:0d:7f:b7:9e:a7:96:30:2e:dc:89:6f:d7:97:12:
                    e0:dd:30:08:ea:36:b8:36:6d:cc:9d:15:09:04:2a:
                    72:94:17:3c:3c:2a:5c:56:59:e8:f0:35:48:4d:f9:
                    f5:d8:79:4d:58:ff:1d:11:82:75:d5:99:b3:e2:46:
                    c8:c9:c6:a6:ed:1e:48:2a:ca:c8:d5:33:06:19:ab:
                    5e:e8:60:dc:d0:fb:a4:8c:37:fb:d4:1f:ae:88:a1:
                    90:e6:e8:2e:a5:ae:02:e1:cf:6d:ed:9e:6a:0d:0f:
                    50:78:93:ec:58:76:38:e1:a7:31:90:11:52:3a:d4:
                    8a:bc:92:94:98:1d:05:45:bd:61:13:43:1f:fa:1c:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D6:AE:ED:35:A0:5C:28:8F:B6:87:AD:B0:E4:3B:F4:05:24:C7:90
            X509v3 Authority Key Identifier:
                keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:a6:47:8a:e6:c0:58:41:07:ad:f6:5e:f3:a3:8c:10:0e:
         d2:b0:d1:3e:77:bd:c5:6c:73:68:95:9f:e5:40:f1:3e:e4:5a:
         88:f7:16:e7:b8:7e:8d:a4:28:0f:18:b5:c8:b4:c8:ea:46:b6:
         7a:76:7f:8b:94:ec:3d:4a:eb:13:4f:8b:eb:ca:d7:93:4a:cf:
         8d:03:34:b8:e9:ba:8d:70:6e:2d:34:9a:89:e3:f1:8f:24:2b:
         86:c0:ba:c9:56:df:d4:a6:68:8e:04:9c:a2:96:6b:40:1c:bf:
         a1:5b:ce:f3:68:fa:fe:e8:6a:53:8b:41:32:d2:99:2c:b1:fd:
         b0:2b:79:02:71:d2:2f:47:8a:79:5b:76:28:d9:59:54:8c:d3:
         13:c9:72:d1:7d:6e:6b:4b:6d:95:d3:4c:95:4f:7f:ce:28:6d:
         82:43:85:40:71:b8:2e:21:23:41:7c:94:47:73:5c:76:9d:f2:
         05:24:75:45:6a:44:68:37:92:51:bc:0a:14:02:66:b7:a9:6d:
         e0:dd:bf:be:09:dc:6d:6c:99:a2:09:dc:21:33:4d:3b:59:57:
         9c:88:d9:75:96:32:83:5e:ff:1d:80:e9:24:a6:4b:c0:b2:25:
         03:c9:dd:d6:3d:d1:d2:98:00:cf:8c:73:1f:a9:bb:66:16:7c:
         2c:c2:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:30:24 2025 by rpki-client