Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          3myeDaBJGXIMhS6Pf6Q+uZsoVkuWkLqO2oUWwlREt9w=
Subject key identifier:   46:77:FB:1E:82:E4:13:16:63:C6:1F:CE:15:0C:C1:F3:52:6E:88:4F
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       01964DB51B776F63AB192386FC39A67C78A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          046E
Signing time:             Sat 19 Apr 2025 11:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:36 +0000
Files and hashes:         1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: 1tMhprjx/wyapw1UsYkcruej4dQoALtvCkQ0AH0hyYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b5:1b:77:6f:63:ab:19:23:86:fc:39:a6:7c:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Apr 19 11:00:36 2025 GMT
            Not After : Apr 20 11:00:36 2025 GMT
        Subject: CN=4677fb1e82e4131663c61fce150cc1f3526e884f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:5b:39:e9:8b:88:41:56:81:18:38:45:30:
                    15:09:a5:f1:2f:b1:b6:02:9e:29:76:3a:7e:5e:3e:
                    3c:89:c4:cb:87:40:ad:f0:00:0e:7a:db:27:4d:f5:
                    74:6d:ad:71:6a:68:0d:ac:18:df:f6:03:4a:e1:df:
                    b8:74:13:60:d1:7b:8a:02:b4:ce:3f:07:6e:aa:0a:
                    26:1d:74:62:23:17:b8:9d:26:c2:5a:19:a1:93:83:
                    5d:06:34:43:1a:ee:6b:ec:cf:60:68:01:04:c8:c7:
                    f2:87:d4:1f:42:14:2e:9d:d2:2d:10:b6:0c:93:a4:
                    86:cf:3b:af:0e:9d:1f:4a:69:7c:87:9e:52:e7:10:
                    21:8c:13:10:f2:93:fd:24:89:28:ca:ab:14:96:71:
                    28:3a:f8:44:58:cd:48:57:1c:71:fe:be:80:72:dc:
                    ff:4d:c7:f1:db:c7:30:70:ed:82:10:89:2b:e4:88:
                    0e:34:62:92:68:05:7c:ac:47:9c:66:83:ba:13:77:
                    79:d4:d5:6b:8a:8e:d4:0b:1c:b3:b5:3b:f7:a0:d5:
                    51:7f:68:17:ba:71:01:45:3c:35:4c:fc:ab:31:e3:
                    21:07:a7:f2:ce:f8:57:05:b7:22:9e:b5:89:91:64:
                    71:93:b2:06:ba:3b:d7:89:5a:9c:47:81:9e:7c:70:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:77:FB:1E:82:E4:13:16:63:C6:1F:CE:15:0C:C1:F3:52:6E:88:4F
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:e8:42:11:6b:c8:d7:12:ee:1d:2c:ae:d3:6f:af:7b:eb:
         43:34:07:11:be:97:4f:84:35:2b:d8:2c:7b:15:a8:57:fd:35:
         33:1c:c4:91:4e:66:7b:e4:e3:0d:e8:f1:67:74:d7:7d:5b:c2:
         8c:3d:13:59:cf:40:64:fc:97:b1:e4:41:3b:de:91:50:de:63:
         44:ac:82:5d:da:16:5a:b9:ed:cd:d0:08:07:10:84:3c:49:0b:
         6f:bd:f7:e1:83:b7:55:95:e4:a0:ba:82:be:73:95:d2:b4:29:
         45:bf:aa:15:e5:b4:e1:97:db:bd:90:b8:0f:82:92:5d:17:87:
         fe:25:b9:86:68:f0:29:ab:5c:78:ef:c1:d7:4d:fa:a9:23:a5:
         9a:5d:56:59:90:00:74:68:56:0b:43:81:07:14:29:81:93:c4:
         7b:bc:de:40:45:3b:d3:9d:62:1d:ac:b8:70:6d:9a:d7:67:bd:
         23:3e:4b:c7:e0:fd:b9:64:5a:55:74:63:aa:c0:78:82:69:4c:
         49:f3:57:45:6a:f3:96:ea:b8:79:0b:15:34:e6:2f:78:c7:ad:
         dc:27:f2:54:3f:92:15:ed:ae:52:51:33:0a:04:3b:55:fd:57:
         c0:08:2d:c0:d9:54:57:6b:43:50:b5:8c:24:33:6a:c7:dd:48:
         0f:65:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:19 2025 by rpki-client