Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          nZXpFEKIh/n6ubot/ex2++0JLWoTsMWGhR65nM0gOVU=
Subject key identifier:   87:F0:FB:31:A8:A6:BD:FC:52:43:4F:54:51:DF:EC:3C:0B:DD:97:DD
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       01974EC5169F4F757A71632C5E88A705F9E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          08B3
Signing time:             Sun 08 Jun 2025 09:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:28 +0000
Files and hashes:         1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: JX7aAeZo3IAPBbrxaFuzanyo4jkyLJyknrTZJvVwPn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:16:9f:4f:75:7a:71:63:2c:5e:88:a7:05:f9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Jun  8 09:00:28 2025 GMT
            Not After : Jun  9 09:00:28 2025 GMT
        Subject: CN=87f0fb31a8a6bdfc52434f5451dfec3c0bdd97dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:0b:1a:69:6e:03:bd:f0:9c:89:b2:41:23:
                    9d:6a:40:6f:16:c3:e8:54:87:66:b8:8d:69:f9:20:
                    89:92:d5:bb:73:fc:bb:c5:a8:98:30:88:e9:f4:a1:
                    1d:4b:13:b0:79:df:2d:c4:95:78:9a:57:aa:00:37:
                    fd:54:9d:e9:6f:ed:bb:05:5b:5b:af:a1:53:93:b8:
                    0b:7e:cf:fa:55:e0:99:ec:0c:0b:05:c5:b3:e2:0b:
                    83:cc:86:12:10:bb:b6:76:80:e9:bb:14:ff:73:c8:
                    1e:88:5f:20:9e:05:8b:36:4f:17:75:dd:95:7e:0c:
                    67:21:02:d0:4f:a0:f1:0f:63:43:79:ca:c8:f0:f6:
                    62:a3:b2:16:ff:e4:9e:a1:3f:37:96:d5:21:cc:1e:
                    8c:cc:82:d0:c8:ee:6c:91:02:6e:e7:3e:21:d3:21:
                    54:b1:65:00:b8:54:f6:b1:ef:d8:5f:69:2b:56:22:
                    6a:69:8f:fe:35:3f:59:08:dc:15:55:4c:5a:43:fd:
                    15:31:8d:d5:b2:93:9b:52:02:47:c1:42:bb:0b:14:
                    07:a3:11:46:c0:78:0c:71:24:d4:68:93:8c:b0:32:
                    1c:57:88:4f:f1:3c:c8:8f:78:5e:8c:c3:55:e8:7a:
                    c9:fb:9f:a6:b5:c9:ba:9a:ed:d5:fd:14:a3:a8:68:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F0:FB:31:A8:A6:BD:FC:52:43:4F:54:51:DF:EC:3C:0B:DD:97:DD
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:f3:ca:09:ef:c1:d0:f9:11:45:dc:5f:43:63:52:74:84:
         88:1e:84:b9:53:1f:59:92:70:2a:07:d1:9c:b9:f9:80:ce:6a:
         a6:b5:67:a6:2a:52:ea:4c:78:d3:60:e1:35:7c:9c:80:6b:62:
         09:2f:48:a8:f8:48:31:68:12:17:f2:76:fd:6a:0d:57:d7:e1:
         3c:41:0c:72:17:11:51:aa:b7:2c:57:55:e0:83:66:cf:bb:16:
         7b:19:50:b6:a1:3e:18:84:a0:8f:ac:ea:6f:00:7a:42:a9:fc:
         9a:a9:54:3a:14:f0:b8:24:43:b5:11:3c:bf:5a:02:43:dd:85:
         95:d6:0c:1e:75:d5:b8:9a:96:f5:36:b4:13:b3:d0:a6:55:76:
         9c:81:6c:98:3c:bd:b5:2c:14:7c:0c:f6:a8:1e:c6:45:b1:83:
         bc:67:a6:a5:b5:37:18:73:74:86:b2:60:fd:2c:6a:e5:cf:d8:
         11:26:e4:cc:25:15:fe:e7:07:c0:55:70:66:2e:b9:2e:78:95:
         9f:15:21:2f:1e:ac:61:3b:24:2c:86:46:b0:a1:5c:38:65:d3:
         1e:fb:46:48:6d:2d:17:e2:67:a9:76:62:61:5d:64:30:ec:d7:
         40:4c:82:cf:b5:92:35:fb:dc:09:e4:b7:84:62:79:66:94:71:
         9f:c2:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:15:26 2025 by rpki-client