Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File:                     UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier:          HY2wR80IlVL2F+Yc1QdSUXVjqP2J6fFTZEWGOM9Vt1Q=
Subject key identifier:   DF:E6:A6:14:57:0F:2A:42:C6:E2:AD:8C:BB:E1:8B:CC:3A:48:90:35
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer:       /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial:       019748FA563565EE73D4A93CC8EF741B114A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number:          0EB0
Signing time:             Sat 07 Jun 2025 06:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:54 +0000
Files and hashes:         1: EmZGnE3cUctL2ReH5qcX6e_cHZA.roa (hash: /paSeXdGSN8xOjhTUDVjgnMls/gfanO98AsFxJF7eNA=)
                          2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: /0TXzBb7XhJPc57KXptIslS2/8QYGnTYIkZdfrfFiBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:56:35:65:ee:73:d4:a9:3c:c8:ef:74:1b:11:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
        Validity
            Not Before: Jun  7 06:00:54 2025 GMT
            Not After : Jun  8 06:00:54 2025 GMT
        Subject: CN=dfe6a614570f2a42c6e2ad8cbbe18bcc3a489035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:2c:c6:72:ba:5f:8e:93:dc:05:b2:e9:01:
                    22:55:ce:7b:4c:5e:2a:12:84:17:29:ca:e5:d7:cb:
                    87:a2:ae:c0:92:49:f9:5f:53:02:23:5b:8d:02:17:
                    68:b6:c3:b5:d5:4d:09:9b:d3:10:32:63:a5:0b:a3:
                    f4:51:27:48:6e:97:1d:96:b7:7b:c7:16:b6:5e:9a:
                    c5:16:dd:a4:02:04:c7:6e:91:f2:27:a9:7e:bb:2d:
                    bd:23:dc:6c:ab:c6:4b:68:21:b4:93:2d:73:06:c1:
                    6a:ab:9c:a6:b4:6d:e0:db:aa:25:1b:26:65:c5:84:
                    83:eb:c3:ae:36:5f:c5:40:3e:89:9b:5b:ef:86:d7:
                    d4:b3:b1:55:69:a9:be:1a:54:98:e7:92:44:eb:4a:
                    44:7e:bd:57:be:d7:6c:6a:5e:7c:53:98:fb:2f:2b:
                    0c:9f:13:42:16:cf:b3:1e:d9:a3:0e:fa:18:05:ab:
                    77:b5:4e:cd:07:57:12:f7:9a:6e:6a:51:be:20:8e:
                    5a:7e:d6:46:77:76:de:1f:11:64:e9:72:de:15:71:
                    35:59:1e:ca:03:55:9f:fc:d2:89:11:df:51:1f:32:
                    1e:8d:c2:9b:57:a7:d3:74:26:0e:bd:59:e7:53:c5:
                    99:19:2d:e3:70:22:43:a3:85:6b:a9:60:d8:45:a0:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E6:A6:14:57:0F:2A:42:C6:E2:AD:8C:BB:E1:8B:CC:3A:48:90:35
            X509v3 Authority Key Identifier:
                keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:93:be:3e:3d:ad:a9:68:5e:58:82:d8:e8:c5:2c:d2:8c:
         9f:b9:d0:70:8f:fd:a2:14:ec:dc:f6:fb:6d:f4:1c:3a:fd:e3:
         05:6a:3c:b1:43:ce:bb:fb:9e:4b:96:e8:23:ee:a6:d8:ed:a0:
         af:70:cd:1a:bc:5f:24:be:06:91:cd:88:b8:2b:38:70:da:86:
         11:ea:6d:0b:23:69:13:f0:be:80:0a:d8:53:4c:f5:31:2e:fb:
         56:8f:3c:ae:27:72:b5:61:69:39:ba:d2:fa:db:e0:2d:90:5e:
         e5:44:6f:5c:f4:bf:f4:cc:35:8f:14:77:e4:8f:b2:ba:d5:2c:
         43:d6:19:3b:fa:5c:7a:16:28:a8:d3:1a:7e:dd:90:ec:28:4a:
         c2:9f:02:74:5d:cf:30:6d:88:b5:ca:e6:6e:ed:53:30:c0:e3:
         ab:07:1d:cc:43:27:bb:13:5e:92:70:e2:ec:79:9c:2e:e3:ca:
         90:9e:6a:50:a5:ef:ff:ad:0e:36:a8:e4:11:3b:d2:f1:13:71:
         b9:f5:a1:17:d0:f8:f0:ed:a4:88:af:23:72:b3:99:ac:03:96:
         78:23:6f:f7:7c:a4:6d:1f:5b:d2:8e:f4:b3:54:e2:47:97:4f:
         85:c3:25:1f:1c:a8:b4:e4:f5:21:b6:35:47:1c:e1:da:ba:4d:
         be:1e:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:25 2025 by rpki-client