Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File:                     RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier:          6HSoV0SiUtM0WyGtdgHH9/+MVBAdxi0V8OcR/SVgAdg=
Subject key identifier:   EE:F8:EF:40:63:CE:48:9B:CA:3B:B9:50:C9:FF:5F:52:57:72:B1:E9
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer:       /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial:       0196C64CCEF1BD56A80C037F0D32FF737BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number:          0FC0
Signing time:             Mon 12 May 2025 21:00:44 +0000
Manifest this update:     Mon 12 May 2025 21:00:44 +0000
Manifest next update:     Tue 13 May 2025 21:00:44 +0000
Files and hashes:         1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
                          2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
                          3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: Tge/IF8wlOAJQx6+XJ7hulCy9BWxgxF80BWGDNB98I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:4c:ce:f1:bd:56:a8:0c:03:7f:0d:32:ff:73:7b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
        Validity
            Not Before: May 12 21:00:44 2025 GMT
            Not After : May 13 21:00:44 2025 GMT
        Subject: CN=eef8ef4063ce489bca3bb950c9ff5f525772b1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:df:fe:93:57:b2:12:21:c7:71:1e:bb:85:
                    69:5f:9d:de:42:79:70:c9:cb:ab:3b:62:ba:36:eb:
                    9e:72:7d:b6:74:b4:41:07:d0:a7:ec:e2:8f:58:d6:
                    37:d9:2d:d7:8d:27:94:b0:0a:bd:36:d4:b9:83:4e:
                    8b:fb:e8:88:ea:8a:ee:92:48:70:b2:00:3f:cf:fb:
                    1e:32:de:3f:03:75:cf:5a:2e:2e:68:d7:71:23:3d:
                    a1:5c:12:f8:ad:03:98:57:04:02:fc:2b:9f:53:08:
                    bb:8e:d4:9d:ea:53:82:3c:0e:aa:47:82:33:84:b2:
                    de:c6:2e:c7:fb:7d:3d:d3:ff:0c:2f:08:01:f4:f7:
                    d1:06:d5:40:96:47:bf:a8:98:b4:85:56:01:9a:38:
                    1a:99:5f:76:57:5c:b9:a0:76:3c:d6:eb:f4:72:a3:
                    14:9f:53:5c:d9:6b:5b:46:e3:03:b4:6d:00:31:ee:
                    b2:fc:da:03:51:2a:72:f5:51:39:c0:07:e9:d5:bf:
                    d5:27:13:71:48:62:07:9d:8c:ea:ff:cb:e1:9c:f5:
                    00:9f:c2:51:6d:b3:b4:0b:95:59:b5:dd:dc:3a:5b:
                    41:c7:00:4f:ae:ae:5b:c0:42:03:f1:50:f2:c5:1b:
                    ab:96:0b:82:77:10:06:bf:ca:07:5b:74:f0:6a:5b:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F8:EF:40:63:CE:48:9B:CA:3B:B9:50:C9:FF:5F:52:57:72:B1:E9
            X509v3 Authority Key Identifier:
                keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:d9:f6:b1:df:c8:e9:5e:fb:9f:a1:90:cb:1c:71:66:fe:
         80:c7:96:9a:e7:9e:72:5d:3a:43:c7:fb:99:d9:11:82:7d:d1:
         a4:ed:3e:96:ed:01:17:c1:4c:b5:2b:8e:9b:d0:6e:0c:5c:6c:
         55:89:31:b2:d8:c7:07:af:c1:35:1a:fc:c7:70:fa:1a:d4:ac:
         dc:6c:4f:28:b0:d4:78:f3:e9:65:64:e4:a2:c8:c6:5c:38:9f:
         56:64:18:43:04:8e:1c:22:ab:18:93:a9:6d:6b:b8:63:cd:90:
         c1:2b:8b:1f:a1:53:7b:85:60:a4:14:96:6d:14:d8:2d:fa:75:
         4d:80:d0:6a:13:b7:82:b4:b5:b8:52:b3:65:db:d6:b6:bd:fe:
         41:7a:3a:ec:ef:fb:08:d8:6a:f3:cc:00:1c:81:95:68:8f:79:
         0f:3a:9b:09:32:e9:d0:74:25:0f:ce:b2:73:54:55:7e:04:4d:
         6e:a9:59:a9:34:1e:d7:01:7d:8e:d4:91:83:00:d7:9c:b6:48:
         e6:3a:61:86:bf:ac:cc:c3:2b:53:39:57:d9:5a:e6:f9:f0:ed:
         5d:42:7d:9a:0b:fc:20:e3:71:ce:4f:52:dc:77:4a:83:b2:a7:
         35:80:ba:1e:b8:ed:2c:01:77:b9:f1:09:a8:ae:a5:40:24:68:
         7e:05:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:50:41 2025 by rpki-client