Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File:                     uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier:          xIBx/+0JIWQ5AR4Ceee9k+YvRQpUGgZ2sCHvKGNrxIo=
Subject key identifier:   66:CD:D7:27:F7:89:3E:1C:B3:D6:EC:B5:64:72:AD:13:19:C7:7F:8B
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer:       /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial:       0197470C16E75B92C718441BC8E17F19EE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number:          056E
Signing time:             Fri 06 Jun 2025 21:01:03 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:03 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:03 +0000
Files and hashes:         1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
                          2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: bkEXL64g6hGc/v2Kwp20PXxJAFqq56WrayrvO4K1Fxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:16:e7:5b:92:c7:18:44:1b:c8:e1:7f:19:ee:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
        Validity
            Not Before: Jun  6 21:01:03 2025 GMT
            Not After : Jun  7 21:01:03 2025 GMT
        Subject: CN=66cdd727f7893e1cb3d6ecb56472ad1319c77f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:04:f3:46:18:18:a8:49:02:a0:23:69:8f:
                    91:4b:e9:e7:0f:31:7c:bb:57:c6:99:a5:f8:15:2a:
                    df:ae:28:8e:ad:14:d9:88:83:80:fa:b5:96:7e:84:
                    21:02:d5:2c:90:79:3c:b5:ca:d1:db:8b:b8:67:0a:
                    5d:0b:33:1c:18:6f:0e:cb:18:0f:5e:7f:41:61:7d:
                    66:4c:06:36:c1:49:99:a0:f9:16:d7:49:55:7a:c6:
                    ce:56:f1:37:90:17:ec:71:e1:87:a1:95:61:11:06:
                    7e:31:ed:ce:30:d6:cf:e2:88:f6:b9:99:9b:72:4c:
                    7c:36:1b:7b:fc:46:9f:2a:88:00:c6:e4:2a:05:70:
                    3a:ca:df:a8:1e:79:70:61:50:5a:98:81:eb:65:cc:
                    25:58:43:b3:7d:fa:8e:47:be:ae:2e:1c:4c:be:6d:
                    c2:e1:e7:26:d0:c7:2b:2d:b2:a4:40:bb:a7:88:a6:
                    b7:f5:03:fc:bf:7f:78:37:c0:71:4f:a4:93:9f:ef:
                    09:66:3c:21:4a:41:c9:45:5b:2c:36:b2:7d:22:05:
                    34:ab:e9:2c:79:a0:c8:a4:ce:33:86:aa:0a:f1:4a:
                    b4:3f:8e:97:90:42:4e:6b:a7:c3:1b:13:35:bd:be:
                    9a:36:35:c2:c1:e2:84:6e:0f:64:51:be:be:5c:0f:
                    a0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:D7:27:F7:89:3E:1C:B3:D6:EC:B5:64:72:AD:13:19:C7:7F:8B
            X509v3 Authority Key Identifier:
                keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:39:89:bb:89:13:aa:92:90:9f:2c:f9:79:c9:32:b3:68:62:
         cf:84:f8:93:20:e4:67:a4:c5:fb:e3:06:ab:32:27:4b:38:c8:
         e4:42:ed:fd:7a:19:e9:da:8f:f5:23:24:4a:d5:b9:c1:6a:7b:
         02:af:88:2b:f0:9a:3c:78:2e:39:4d:b0:bf:7f:db:6c:81:d6:
         9c:c6:44:f5:19:64:44:b0:0c:b6:65:48:98:e5:a1:61:73:9c:
         db:d9:57:be:b7:cf:81:9c:5a:d1:1c:6f:1b:d2:96:b2:1a:fb:
         b9:21:31:78:1c:4e:b5:48:dc:ef:e6:20:57:72:86:f6:18:61:
         a8:de:0a:48:4d:19:08:69:28:4c:2c:58:a5:79:21:b2:54:e5:
         70:d0:51:02:2c:2d:9b:0b:21:72:d9:41:17:11:7d:19:1e:dc:
         e7:6e:0c:eb:f5:69:3c:2b:0e:7f:05:84:24:04:d1:b2:e7:ab:
         12:01:40:c2:02:bf:0d:ef:48:fa:b0:de:ba:4d:47:2f:2c:2d:
         cf:c3:a0:81:24:0d:e9:5a:b6:5d:52:2f:cb:fd:ef:ac:0c:f2:
         c0:dd:ba:9a:9a:08:9d:c7:a6:ca:69:67:bd:6b:3d:f2:88:a3:
         3a:a3:f7:c3:82:65:94:00:b2:0d:ea:d2:fa:bb:29:10:23:17:
         9c:dc:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:45 2025 by rpki-client