Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File:                     Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier:          bX5V0/FnK6xITZqNIUIs2g2xkltNGArJReB9lszgqiA=
Subject key identifier:   90:91:76:79:8B:C0:B9:4C:46:24:50:CA:14:3F:77:0F:EE:93:8C:97
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer:       /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial:       01958F2A1916FE12FAC4C3C937E0A932132D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number:          139A
Signing time:             Thu 13 Mar 2025 11:00:55 +0000
Manifest this update:     Thu 13 Mar 2025 11:00:55 +0000
Manifest next update:     Fri 14 Mar 2025 11:00:55 +0000
Files and hashes:         1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
                          2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: dVm+8GRK6Wy4ObtLI5SX0D+bRYBp8k291nicWCU7Yys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:2a:19:16:fe:12:fa:c4:c3:c9:37:e0:a9:32:13:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
        Validity
            Not Before: Mar 13 11:00:55 2025 GMT
            Not After : Mar 14 11:00:55 2025 GMT
        Subject: CN=909176798bc0b94c462450ca143f770fee938c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:08:ed:ea:96:2c:15:17:d7:1a:51:96:d7:
                    d5:3d:a1:99:c7:95:33:f0:19:16:36:8f:db:ca:58:
                    9e:af:c3:f1:27:58:f2:07:e6:00:59:ab:80:8e:78:
                    60:30:a3:bd:bf:00:31:34:ad:a6:97:50:22:c1:6b:
                    0f:f7:ee:dd:87:6b:16:45:f7:58:fd:08:12:c6:ae:
                    bb:cf:1a:72:5a:d3:f5:06:d6:1d:e5:8b:73:9a:13:
                    d8:37:ff:8d:27:ec:06:84:c4:c9:40:6d:dd:d4:43:
                    9a:5b:98:2a:1b:2c:df:99:52:2e:3d:be:c8:24:c8:
                    70:4d:16:3f:95:86:e0:ed:2d:54:af:8e:e6:5a:28:
                    ab:d9:1e:47:f6:64:e5:91:f7:01:e1:17:3e:bc:ac:
                    74:2c:a6:ef:7c:e1:d7:1b:74:3b:d0:93:a8:a0:fb:
                    ff:f5:14:9a:f9:86:d7:ee:50:14:ed:ec:53:ff:c3:
                    91:16:31:66:b0:13:ef:d3:25:35:9f:4d:e3:27:02:
                    e1:46:a3:7c:cf:24:eb:b7:73:1f:8d:96:84:c2:d7:
                    bd:41:e9:54:c2:78:e2:bd:5c:48:2d:ed:e5:4c:93:
                    f3:b7:c0:35:a0:f6:84:49:2f:92:aa:35:07:09:25:
                    28:27:21:f0:b1:e0:f2:c0:f8:8a:c6:86:4f:3c:4f:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:91:76:79:8B:C0:B9:4C:46:24:50:CA:14:3F:77:0F:EE:93:8C:97
            X509v3 Authority Key Identifier:
                keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:23:b0:db:f3:ca:33:e8:cf:69:46:c1:ba:3a:ab:d5:e4:
         c1:07:34:5d:bb:d5:1c:df:65:05:7e:75:12:c7:27:0e:23:1c:
         64:72:23:fb:90:ea:4c:e1:9b:e6:cc:76:0e:c4:dc:6f:73:d6:
         49:ae:bc:65:27:53:c1:ad:b0:61:16:d7:35:5c:27:11:bf:5d:
         7c:44:5e:40:8f:8f:f0:f9:5b:83:ba:d0:36:75:62:21:26:da:
         a4:4b:62:44:fe:e5:c8:84:c3:ca:00:11:a9:74:61:f4:68:8c:
         5f:66:9d:db:a4:ba:37:e2:15:a2:10:dd:97:86:f9:0d:de:8e:
         89:a7:ee:7e:fc:0a:81:8d:db:01:83:48:14:e8:e6:1c:0c:52:
         3d:91:ec:4e:5b:eb:39:08:af:99:4c:94:5d:11:62:d7:85:f5:
         5d:6c:d3:5f:99:ce:e3:0a:5a:a8:e0:35:ab:e0:4b:ab:5c:91:
         a6:7c:54:1e:27:29:99:8e:60:a9:e6:f2:0a:b0:cf:3a:0b:fe:
         83:7e:01:a4:d9:15:be:d5:c6:b2:17:12:f5:c9:5b:70:31:9b:
         b2:f3:7b:e6:e1:ad:f4:0e:46:f2:03:94:f4:df:b4:5c:9c:8f:
         0a:48:74:1b:5a:e4:cc:7f:c6:a9:d4:ab:3e:bc:0b:f0:df:a0:
         06:b5:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:25 2025 by rpki-client