Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File:                     uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier:          XyLbzpRlGLqGDcizpDOmUkJM9cQF9GjC6LGR8iMaWXs=
Subject key identifier:   6E:83:81:AC:1D:E2:6A:E7:95:1C:77:09:43:30:2C:29:1E:2F:14:52
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer:       /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial:       0196C4277B0C206D65EE915FEA94DD532616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number:          037D
Signing time:             Mon 12 May 2025 11:00:43 +0000
Manifest this update:     Mon 12 May 2025 11:00:43 +0000
Manifest next update:     Tue 13 May 2025 11:00:43 +0000
Files and hashes:         1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
                          2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: /AeK5yUo+Bvfh6a+jkjixPuiZ+3PgRdKvmRbymkqDu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:7b:0c:20:6d:65:ee:91:5f:ea:94:dd:53:26:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
        Validity
            Not Before: May 12 11:00:43 2025 GMT
            Not After : May 13 11:00:43 2025 GMT
        Subject: CN=6e8381ac1de26ae7951c770943302c291e2f1452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:b9:f4:72:a3:10:6f:07:14:28:4f:50:dd:
                    e9:2c:34:be:9e:7c:3e:06:64:df:44:ba:d5:b8:1f:
                    06:25:d3:92:21:3d:03:32:cf:5c:5c:38:a9:bb:0e:
                    5c:2d:15:47:18:11:34:a0:2a:80:f3:7f:f8:38:91:
                    e7:f0:2a:c5:cc:77:ad:5c:2f:65:0b:4d:ce:da:1c:
                    c8:0e:5e:93:09:a9:b2:28:9e:04:00:c1:c8:4e:61:
                    af:d1:96:f2:bc:5e:3a:c0:89:8a:db:2d:81:f7:a1:
                    eb:cd:2a:9f:3a:bf:16:a6:e8:aa:10:3a:f4:8c:84:
                    fd:70:bb:de:41:8f:2a:d4:0e:15:2a:96:68:aa:49:
                    16:3a:99:2b:fd:40:a8:32:35:13:52:f4:3e:1a:82:
                    b6:dd:f2:7e:8e:fe:0b:e1:49:dc:c5:9e:b8:30:7b:
                    16:e9:2a:16:45:f8:99:57:39:25:03:bf:3e:c5:04:
                    4b:4e:cd:06:a8:b9:92:e9:1f:4f:89:15:2f:78:1d:
                    78:96:95:f9:40:22:02:2f:60:f0:d1:56:19:d9:e4:
                    e1:c8:57:16:a6:43:6a:20:23:7d:f5:96:c0:9f:46:
                    6e:e3:19:3d:b0:15:aa:e5:5f:88:4a:93:6b:a9:e3:
                    8c:c5:a9:ad:3b:63:f6:9c:16:3f:d0:89:68:9e:12:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:81:AC:1D:E2:6A:E7:95:1C:77:09:43:30:2C:29:1E:2F:14:52
            X509v3 Authority Key Identifier:
                keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:90:08:38:c2:60:cd:4f:00:4f:f2:9a:e1:2a:4a:c3:4b:
         03:0a:f3:6a:d8:43:0a:fa:6e:32:b5:77:2d:df:64:6d:3a:e6:
         58:5e:7b:4f:f2:aa:37:91:34:7f:d3:14:f6:fc:7a:40:0c:e4:
         0b:64:bf:26:9a:2a:47:91:9e:99:72:a9:f3:40:58:24:a3:e4:
         5e:31:e9:6f:e8:f9:c5:ce:1f:db:54:3a:96:0a:7d:0f:a5:36:
         9a:c3:a4:15:06:c9:81:42:7d:ef:96:0e:ca:6d:ae:51:b8:e9:
         46:70:af:74:38:53:a7:0a:ef:54:0b:36:82:94:c6:dd:76:86:
         5c:eb:3b:96:24:c1:e7:6b:6a:38:0b:c2:db:66:10:ea:bc:79:
         6b:1f:f7:10:f8:b9:2c:bb:a5:a5:bc:4f:97:11:d0:df:1a:69:
         e4:06:8d:eb:85:5a:1c:e4:cb:5a:9d:ea:20:f8:6b:06:33:38:
         74:13:a4:f4:75:aa:88:0c:28:18:3a:1b:14:8f:b7:48:b6:ec:
         70:f2:0a:51:8d:b5:52:00:c4:28:21:3a:f9:0e:d6:18:52:26:
         c2:b1:43:2c:26:34:c0:5a:4e:95:64:61:08:40:a0:72:2d:37:
         0b:fc:ee:a0:f2:05:98:0e:cb:5f:60:60:f9:bb:46:47:b5:96:
         ac:4d:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:36:32 2025 by rpki-client