Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          4AnRvFx2cVUW9X6U+oySNlggvHQs0TG7uVYkrvGIDT8=
Subject key identifier:   11:F4:45:F6:3C:BB:05:00:0D:FF:F6:61:1B:AB:FD:82:0F:D5:57:0E
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       0197499EFAC0718FAA3135F88394C998E44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 09:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:44 +0000
Files and hashes:         1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: ZG7L3LjUEgav8l1MSyLEfFgn1/pi6Qp2OVkNiaiwA20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:fa:c0:71:8f:aa:31:35:f8:83:94:c9:98:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Jun  7 09:00:44 2025 GMT
            Not After : Jun  8 09:00:44 2025 GMT
        Subject: CN=11f445f63cbb05000dfff6611babfd820fd5570e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:38:d0:e8:7e:25:ae:8c:50:50:ac:db:a9:
                    78:33:a4:9e:c2:17:c1:b8:d9:df:72:d3:c3:8c:97:
                    45:8a:25:71:26:e7:59:0f:62:d7:04:75:40:5c:45:
                    78:33:4a:36:b7:91:20:eb:19:77:ee:94:aa:cf:3f:
                    35:d1:24:f4:ae:93:66:c1:a6:57:32:cc:48:60:38:
                    66:51:d9:80:5d:bf:28:66:8f:8e:b5:9f:c7:65:f8:
                    b1:f2:98:20:55:4f:99:11:d3:07:54:31:60:1c:aa:
                    76:db:dc:15:f2:94:51:17:5b:f7:c9:77:80:cc:6b:
                    f5:78:f3:31:81:c2:4e:6f:08:68:96:a9:ec:7a:3c:
                    0a:ec:51:5e:0c:18:5a:24:14:f3:c0:11:51:b9:d1:
                    e7:69:51:1f:bf:6f:d5:fa:a6:02:27:33:2a:02:4c:
                    1a:7b:e2:f8:97:96:9d:34:40:da:3b:28:d0:41:27:
                    d3:3a:b9:77:b6:74:4f:54:61:78:39:0b:ae:fe:4f:
                    c6:b1:77:58:5e:a1:b8:e1:47:f8:89:21:73:c3:b3:
                    07:4b:d9:36:68:f3:d9:f2:ef:68:1c:c9:e0:8a:82:
                    cb:0b:be:e8:e2:76:1c:82:34:08:70:13:91:e4:23:
                    46:66:1f:26:99:37:77:80:dc:02:a4:cc:8c:7b:00:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F4:45:F6:3C:BB:05:00:0D:FF:F6:61:1B:AB:FD:82:0F:D5:57:0E
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3f:b7:7e:88:37:82:fd:1d:58:99:f3:1c:48:dc:9f:77:19:
         c5:24:2e:4d:e3:21:f8:f8:9d:f5:99:17:1f:5b:83:ff:2e:bc:
         76:2f:6b:84:26:4e:3d:07:90:33:a2:4e:fc:ef:5a:60:bf:6b:
         0c:6d:06:db:19:ce:43:1d:ee:71:b8:37:75:44:82:b0:16:ba:
         22:2f:ca:e8:05:64:e1:ad:a4:86:28:d4:b9:08:ff:9d:89:f8:
         1c:4e:10:07:61:b9:c9:ee:ce:df:52:56:a1:f0:c8:e3:27:c3:
         13:c2:bb:9a:2e:2e:2e:52:80:d8:df:e6:7c:f5:57:14:24:e7:
         8e:c3:1b:84:1d:a2:87:b0:e9:5f:c0:2f:ab:d4:12:d9:13:06:
         ee:06:5f:1c:fd:fc:1a:8e:12:6f:ec:8e:6c:bc:d3:e6:d5:98:
         4d:72:87:38:74:80:53:a8:52:48:0d:79:dd:27:4a:58:df:a4:
         b7:2a:e3:17:63:d4:33:2f:13:b0:ad:e3:96:3b:1c:94:48:20:
         cf:e6:2e:b3:be:1a:0a:af:e9:41:ae:34:66:82:6f:d1:28:a3:
         1e:57:64:b3:f7:ec:e0:47:22:ce:25:3f:a2:86:b9:91:79:40:
         c6:fe:b4:67:af:78:2b:42:d2:1d:08:a6:c9:d2:46:32:2f:23:
         9f:b3:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:33 2025 by rpki-client