Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File:                     UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier:          k4YHTMTniDulcNdXfHP79D91z9K19p+08mlyKBdviFU=
Subject key identifier:   78:73:6E:AF:E4:75:9F:89:DF:1E:BF:ED:62:AE:C9:6F:D6:79:62:0A
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer:       /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial:       01974D448C62728CA5781770E646C7A6ED62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number:          01BA
Signing time:             Sun 08 Jun 2025 02:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:27 +0000
Files and hashes:         1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: NcvmBn1jrqZRvwNwUCAUZ+u/MvtD5o6XJpl806+Q9+w=)
                          2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:8c:62:72:8c:a5:78:17:70:e6:46:c7:a6:ed:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
        Validity
            Not Before: Jun  8 02:00:27 2025 GMT
            Not After : Jun  9 02:00:27 2025 GMT
        Subject: CN=78736eafe4759f89df1ebfed62aec96fd679620a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:b3:09:9a:e0:5b:cc:ba:f8:5e:cf:9f:7e:
                    92:6e:ee:2b:e6:ac:1d:62:63:32:f2:68:1f:12:ee:
                    44:7e:c1:5a:26:33:f4:ba:f5:24:0d:ed:a6:13:94:
                    82:1d:e1:55:fc:1d:b5:12:58:1a:ba:c0:ae:a5:f3:
                    b7:3e:3f:11:4f:7d:d9:67:ba:f6:b4:2b:40:54:a4:
                    24:67:7e:1e:22:32:83:27:26:f9:ed:54:34:04:59:
                    13:da:d0:ec:49:a7:7e:61:bf:0a:64:44:5f:d7:f2:
                    6d:3c:f5:4a:ed:33:fb:cf:6b:40:18:fc:1a:d3:6d:
                    5e:86:55:c3:8f:56:d8:d0:c6:16:99:d9:fa:78:aa:
                    24:89:0c:7e:bb:0d:7d:0a:f4:b3:85:93:fd:34:b7:
                    70:61:4b:16:fa:6e:48:0c:81:11:2c:51:9f:8e:e0:
                    0f:36:73:fa:9b:a4:e2:fd:6e:0a:e4:ee:93:c2:8f:
                    d6:90:c6:5d:45:a2:b9:1b:6e:44:27:06:da:1f:d7:
                    1b:14:c4:3e:21:7a:0e:34:92:0e:3d:6d:f9:76:08:
                    a5:1c:ff:7a:8c:e2:29:e0:dd:db:d3:90:34:aa:21:
                    80:3f:ad:f7:1a:af:cf:f3:63:5b:13:ad:a4:64:cb:
                    fc:db:55:a0:48:e6:c7:67:ee:40:16:15:e2:1d:3f:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:73:6E:AF:E4:75:9F:89:DF:1E:BF:ED:62:AE:C9:6F:D6:79:62:0A
            X509v3 Authority Key Identifier:
                keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:90:47:d1:88:64:df:87:7f:04:28:78:10:b8:63:1e:9f:
         3d:63:ef:c4:3e:c7:0e:2f:ab:82:f8:02:01:5f:c6:fa:3a:91:
         2f:bf:05:ff:7b:5f:54:75:37:ac:ae:87:f0:1a:c4:77:ce:ea:
         f1:83:d0:b9:57:44:62:3a:cd:3f:45:80:e0:94:f6:2f:32:d4:
         88:10:cc:8f:ee:27:9e:f2:64:38:65:60:2a:78:13:03:38:f3:
         1c:2e:1f:ad:62:6c:54:b3:a8:a7:14:4b:9e:82:48:f3:e4:2c:
         e9:48:45:51:cd:19:7f:2d:57:3a:c8:b9:a3:86:61:0a:66:92:
         f5:af:c5:17:c6:71:5b:76:46:6b:ea:53:47:67:35:be:a7:2c:
         d5:9f:3d:1d:85:3f:da:26:f7:1d:94:11:d1:82:04:55:54:2d:
         59:5e:c4:2b:6d:49:fa:b1:71:a2:82:09:43:c3:57:b1:c7:50:
         66:fb:01:98:8b:37:0f:05:3a:52:4f:0e:48:af:b9:3c:d6:7b:
         a1:2f:33:cb:ef:3b:c1:78:35:eb:6e:ed:12:fc:76:fd:e9:fe:
         c1:e9:f3:3e:bc:bb:0a:5e:ee:26:5e:2c:ed:94:df:0c:e4:c9:
         aa:74:e0:17:74:07:3d:0d:05:a8:d5:e1:c1:14:73:38:04:8e:
         8b:5d:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:47:46 2025 by rpki-client