Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
File:                     UmJQW0iFgcLs11gqNOzlJjLj75Y.mft (raw, json)
Hash identifier:          LXsWMcwt5YTAVvb9TfBwabGkXpT+L7T/F/XXfQQpTtE=
Subject key identifier:   AE:F4:02:7B:47:A3:98:2E:BD:AA:4C:7A:AD:C5:B0:FF:FB:EA:B7:D6
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Certificate issuer:       /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial:       019511356F8FEB689F7F189643B24E19007F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
Manifest number:          0D17
Signing time:             Mon 17 Feb 2025 00:01:09 +0000
Manifest this update:     Mon 17 Feb 2025 00:01:09 +0000
Manifest next update:     Tue 18 Feb 2025 00:01:09 +0000
Files and hashes:         1: UmJQW0iFgcLs11gqNOzlJjLj75Y.crl (hash: Krjnk0QghLP4AsfBeI2oJcCjYU60wFMRlx/DhWGn7QM=)
                          2: YoqdurND-upgcXWxAcpQuefPm64.roa (hash: /491Mi9Fi+bDxakeWh2wlNUupkb90wEk7U//uUYJllE=)
                          3: og6MrC5yBqZd-w_jdnPWOr9coG8.roa (hash: H6FCr41wgfYRZuN4iXgiEuTmqTBZgur449ahw2ZWyrE=)
                          4: zO99S-j_1FZSZc-d3wPOk_r9aws.roa (hash: fbkA7GRWdBwzPVsGQcjMlHBtp/6gNaDm1Z08rE3xQtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:6f:8f:eb:68:9f:7f:18:96:43:b2:4e:19:00:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
        Validity
            Not Before: Feb 17 00:01:09 2025 GMT
            Not After : Feb 18 00:01:09 2025 GMT
        Subject: CN=aef4027b47a3982ebdaa4c7aadc5b0fffbeab7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:4b:71:55:02:aa:67:ba:9f:c5:5c:00:44:
                    50:18:03:70:88:43:ac:11:7b:2a:74:00:17:ae:8a:
                    55:65:21:78:e8:07:3b:74:02:38:7f:14:f7:8f:51:
                    50:29:0e:4c:2c:cb:6f:7e:9a:42:59:bc:07:35:ec:
                    da:eb:f3:03:e5:5e:ca:a3:bd:94:9e:4d:97:fe:9d:
                    9d:8b:30:d5:26:0b:ce:26:43:92:e6:ce:38:4a:cf:
                    42:3e:48:29:ae:57:7d:9e:4f:56:f9:8b:af:b0:87:
                    36:8e:ed:0d:d0:28:2d:93:bc:a2:06:91:74:ba:c7:
                    37:06:e4:4b:2b:45:f4:37:b5:06:9b:aa:02:a1:c4:
                    b5:86:17:99:69:c7:ca:91:fd:8f:0c:40:43:bb:b2:
                    49:12:c3:22:9d:95:1d:b4:8d:e5:c4:c7:8b:fe:c1:
                    71:2b:d4:cd:de:a5:73:d3:1d:29:f5:3b:55:86:1e:
                    42:e1:aa:d2:42:a1:01:d5:f1:49:64:b2:f4:a4:95:
                    9a:a3:8c:61:94:51:40:52:f9:eb:34:e5:56:5a:a2:
                    20:5b:39:13:62:d3:b5:38:d9:5d:2f:d6:8c:8e:53:
                    7a:25:d1:59:84:db:29:09:48:be:67:06:7e:63:50:
                    fe:21:81:a4:eb:4a:f4:09:90:04:2a:5a:b5:56:98:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:02:7B:47:A3:98:2E:BD:AA:4C:7A:AD:C5:B0:FF:FB:EA:B7:D6
            X509v3 Authority Key Identifier:
                keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:61:98:5e:b5:33:13:8c:aa:0c:65:67:4a:8a:dc:35:71:13:
         9e:24:f2:e7:bd:2a:40:24:58:0e:18:b4:5b:d8:f0:87:19:ef:
         b3:d2:31:0c:e4:2e:3c:20:23:04:37:69:dd:f1:ad:26:31:c6:
         6a:7a:66:6d:54:8e:7e:0b:2e:0b:e7:cb:ee:26:c2:48:a5:d6:
         ff:af:97:f6:1a:8d:9b:41:90:63:47:5d:54:22:b7:bd:25:a0:
         51:c4:98:1b:d0:cf:80:22:6d:d3:07:39:84:b9:4c:96:d3:3b:
         c2:e2:65:d8:f3:de:04:55:07:9b:ce:de:67:dd:ac:12:bb:ab:
         f8:c2:67:37:ea:df:03:c0:e3:97:8c:0a:a9:4b:f8:6f:9b:58:
         0a:2c:18:66:a6:06:22:5a:ca:ec:8c:f4:53:c7:5e:13:65:89:
         af:19:b7:f1:ac:6b:e4:97:8a:7f:ad:2c:22:f7:0b:d5:e3:a7:
         ea:24:f2:6a:1e:98:9f:52:38:f0:a8:43:93:a6:a1:00:bd:c0:
         f5:71:6f:89:07:5a:62:bf:1c:68:26:13:ad:a4:87:97:41:3b:
         f7:cb:dc:c0:f4:4a:d5:46:89:8f:a9:a1:c7:d1:d3:a7:5b:0c:
         50:65:a1:fb:60:b9:f2:3d:18:c1:99:ea:03:00:55:ff:5c:0d:
         d0:9e:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:29 2025 by rpki-client