Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          n3ngz/kDbykqdivwfarhVvi2swBgCYhQ24fte+CeSEk=
Subject key identifier:   60:16:C4:3E:E0:70:5C:A0:F6:E2:3E:6F:4B:F8:77:69:AB:B5:02:20
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       01958B4E0F0533EF3CD65522A3CEBD8A0612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 17:01:43 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:43 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:43 +0000
Files and hashes:         1: AZwj0Iuykway_WQBa3ENsQ_JxtA.roa (hash: Q7rNa7RTxQcsrsOIx/wgjhqBI7OG9HoBnLFXa7zfZYE=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: v43AKjvJDT7EhsfwgNTrMNGS7MpHGhaYM3W00VxYsiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4e:0f:05:33:ef:3c:d6:55:22:a3:ce:bd:8a:06:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Mar 12 17:01:43 2025 GMT
            Not After : Mar 13 17:01:43 2025 GMT
        Subject: CN=6016c43ee0705ca0f6e23e6f4bf87769abb50220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:0c:23:81:76:24:89:c1:e7:f8:de:ab:3b:
                    12:45:35:67:76:2e:16:0c:72:e4:3e:49:87:f9:39:
                    e9:db:9b:3d:99:82:dc:59:93:3d:93:df:ca:60:be:
                    e7:de:bc:36:ea:65:dd:2e:bc:2b:70:c1:68:c1:a7:
                    8e:91:3e:77:c7:47:32:cd:b4:ef:f1:f0:6d:6f:0e:
                    a2:80:c8:a3:fc:5e:f2:a1:da:a5:e6:4a:03:c8:11:
                    2d:21:c5:43:ef:54:dd:d7:ca:83:0c:44:6d:85:78:
                    98:6d:49:c9:64:2f:06:e3:34:c2:06:97:a7:86:f4:
                    4a:a4:50:32:d5:b0:17:11:33:b9:c0:30:22:b4:66:
                    93:2f:12:56:cf:22:e7:7c:3f:31:00:e3:80:be:d0:
                    ac:1d:30:0a:b1:08:96:6b:d9:5a:cb:65:32:a9:4e:
                    e7:4b:cc:bb:44:9d:1c:48:7c:e4:d5:a1:4b:34:7f:
                    14:d1:2b:cb:9a:a8:84:cd:60:c6:64:20:2c:3f:ec:
                    64:4e:76:ce:9b:95:02:fc:d7:28:69:6f:2e:a9:44:
                    6b:27:7d:b8:87:36:09:ee:aa:0a:62:95:f4:92:f2:
                    eb:6f:6f:db:c0:a3:17:ac:1a:b2:fc:5e:22:5c:f9:
                    40:fb:58:8a:0e:c3:ab:0f:60:28:c1:5d:92:1f:7a:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:C4:3E:E0:70:5C:A0:F6:E2:3E:6F:4B:F8:77:69:AB:B5:02:20
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:52:b6:61:41:d6:bf:47:b7:5c:d5:f5:05:2d:ff:a4:ea:
         a7:c0:f0:27:81:d3:b2:2c:38:2e:0b:1a:41:89:cb:4f:ac:1e:
         14:b8:34:a6:41:e6:88:bb:bf:74:80:8b:7d:77:bd:d9:72:a7:
         dd:31:39:19:07:d0:ba:8f:2b:6e:fc:ab:eb:40:16:c2:cc:ab:
         16:13:9e:14:df:f1:2d:a5:4a:e8:4f:37:fb:3b:1d:0a:2a:15:
         67:dd:8e:2d:09:8c:15:25:c7:cb:d3:2a:af:32:a4:43:df:c3:
         7a:8f:2d:a4:ab:3e:7e:b7:cf:21:cf:71:66:e7:21:02:15:cb:
         1b:29:e6:1b:ee:00:4c:ef:4d:ce:76:ba:5d:99:25:56:e9:0c:
         b5:25:36:26:eb:7b:9b:fe:2b:54:8c:37:80:cc:61:b1:a2:df:
         65:0b:67:45:89:2d:56:af:93:1a:4d:20:e8:3c:7d:7c:86:69:
         06:f1:e6:92:e3:a9:9c:e8:91:6e:da:42:4a:f3:3a:66:75:71:
         10:10:e9:5c:ce:61:08:41:03:f0:a7:84:51:e1:bc:53:49:50:
         16:2e:c1:ce:99:1c:df:cf:4a:08:a4:7f:c4:bd:64:47:6d:be:
         3d:ba:be:0d:3b:5d:a2:91:c1:7d:ef:e5:8b:96:69:86:c7:07:
         ff:0e:ec:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTg8FM+881lUio869igYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGI3NmVmMGFiNTU1YmM4YjA3NjFmNjA2OGE0NGUxMGIy
YjMxZjcwHhcNMjUwMzEyMTcwMTQzWhcNMjUwMzEzMTcwMTQzWjAzMTEwLwYDVQQD
Eyg2MDE2YzQzZWUwNzA1Y2EwZjZlMjNlNmY0YmY4Nzc2OWFiYjUwMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvkMI4F2JInB5/jeqzsSRTVndi4W
DHLkPkmH+Tnp25s9mYLcWZM9k9/KYL7n3rw26mXdLrwrcMFowaeOkT53x0cyzbTv
8fBtbw6igMij/F7yodql5koDyBEtIcVD71Td18qDDERthXiYbUnJZC8G4zTCBpen
hvRKpFAy1bAXETO5wDAitGaTLxJWzyLnfD8xAOOAvtCsHTAKsQiWa9lay2UyqU7n
S8y7RJ0cSHzk1aFLNH8U0SvLmqiEzWDGZCAsP+xkTnbOm5UC/NcoaW8uqURrJ324
hzYJ7qoKYpX0kvLrb2/bwKMXrBqy/F4iXPlA+1iKDsOrD2AowV2SH3rQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAWxD7gcFyg9uI+b0v4d2mrtQIgMB8GA1UdIwQY
MBaAFFMLdu8KtVW8iwdh9gaKROELKzH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTct
YmZmZmM5MWZkZTNjLzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTctYmZmZmM5MWZkZTNj
LzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiJStmFB
1r9Ht1zV9QUt/6Tqp8DwJ4HTsiw4LgsaQYnLT6weFLg0pkHmiLu/dICLfXe92XKn
3TE5GQfQuo8rbvyr60AWwsyrFhOeFN/xLaVK6E83+zsdCioVZ92OLQmMFSXHy9Mq
rzKkQ9/Deo8tpKs+frfPIc9xZuchAhXLGynmG+4ATO9Nzna6XZklVukMtSU2Jut7
m/4rVIw3gMxhsaLfZQtnRYktVq+TGk0g6Dx9fIZpBvHmkuOpnOiRbtpCSvM6ZnVx
EBDpXM5hCEED8KeEUeG8U0lQFi7Bzpkc389KCKR/xL1kR22+Pbq+DTtdopHBfe/l
i5ZphscH/w7sZg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:57 2025 by rpki-client