Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File:                     ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier:          6bf1JpdV0H5tZAYdhKemHRBabMJBKwwxTfRKDEaKdVc=
Subject key identifier:   12:B9:3B:75:3B:A3:F2:6B:16:73:7A:D3:C5:77:E5:3E:A3:87:CC:96
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer:       /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial:       0196C7CCFF9E28EB997D2CDB60DE4AF384FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number:          08BC
Signing time:             Tue 13 May 2025 04:00:22 +0000
Manifest this update:     Tue 13 May 2025 04:00:22 +0000
Manifest next update:     Wed 14 May 2025 04:00:22 +0000
Files and hashes:         1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=)
                          2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: PbuA2uL0fVpguLSnq/oYhjog35cOull863+WbXbE1UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cc:ff:9e:28:eb:99:7d:2c:db:60:de:4a:f3:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
        Validity
            Not Before: May 13 04:00:22 2025 GMT
            Not After : May 14 04:00:22 2025 GMT
        Subject: CN=12b93b753ba3f26b16737ad3c577e53ea387cc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:37:af:18:bb:cc:7b:f2:f8:1d:f8:d6:05:
                    e6:bc:45:5d:ff:d1:02:cc:05:d6:ee:71:e6:21:41:
                    cb:7f:3d:b6:ed:93:54:e1:01:fd:8f:b5:0e:3c:47:
                    54:09:de:12:fe:15:64:e0:1d:b2:c2:fa:c5:e8:d3:
                    05:27:f4:9c:f0:6f:33:7b:00:6b:92:d5:20:b8:fe:
                    ed:b5:39:5d:1d:f3:40:66:be:f4:4f:74:dc:43:5d:
                    f3:95:dd:16:00:71:aa:be:f1:a8:b6:6f:c7:91:b8:
                    4f:a8:23:ea:a5:1f:c3:9b:d4:90:05:ad:6c:f4:55:
                    c1:e3:e5:a8:f1:bd:5d:b6:e6:82:3d:bf:cb:2a:73:
                    f1:55:cf:1c:4b:63:38:bc:1a:63:54:98:46:5a:b1:
                    8e:ec:c4:1c:c5:7a:42:a7:4d:bf:b5:93:f2:89:58:
                    85:d1:5f:13:32:06:45:1b:e8:7f:3b:63:51:41:0a:
                    7f:df:7d:56:b2:d4:e8:56:71:47:6a:6a:dc:95:ce:
                    eb:f6:dc:bd:df:01:f8:3f:58:66:91:56:94:e5:82:
                    31:d1:c9:7f:70:0a:6f:7f:10:94:55:2a:75:9a:cc:
                    42:88:f5:e0:67:9b:c4:a1:c8:4a:40:d5:c8:0d:22:
                    7f:04:56:27:b7:ea:04:ed:6b:31:6c:a3:03:6b:63:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B9:3B:75:3B:A3:F2:6B:16:73:7A:D3:C5:77:E5:3E:A3:87:CC:96
            X509v3 Authority Key Identifier:
                keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:5d:e7:fb:87:f6:b1:0c:ef:fb:75:0a:4c:6b:09:dd:df:
         9a:6a:34:67:dd:c0:cb:98:5f:9f:66:51:3a:09:55:6c:46:21:
         b6:fd:54:8e:c4:ac:82:34:ea:55:88:ec:f6:aa:04:5b:38:51:
         d3:66:2a:a9:9f:90:a6:9f:a3:ad:43:d5:27:28:db:11:9e:22:
         b3:2b:fb:74:e0:d1:08:ca:7f:37:58:7e:f6:67:8e:01:38:a1:
         4c:3a:4d:01:d3:5e:ea:48:50:37:bc:01:e5:e8:96:54:b9:2a:
         ad:21:66:9e:6c:c2:39:9f:ec:b9:08:0d:c4:48:aa:be:47:45:
         fa:33:52:71:8e:11:2e:e5:db:2e:6e:ea:20:52:87:cb:a4:fe:
         b4:b2:4f:7c:5a:a1:09:a2:bb:a2:56:9a:8c:8c:0e:43:05:1e:
         f9:b8:ce:a3:bb:34:e5:73:bb:cb:9a:fe:15:c5:f1:34:c8:24:
         45:77:13:86:01:a0:5f:f2:95:40:f3:15:ba:16:a3:73:fa:43:
         85:88:cd:d2:b3:e8:5d:ac:df:81:83:55:b7:2c:ba:57:d9:9d:
         68:20:ed:24:a4:bd:1f:f4:a6:85:12:55:52:11:e4:52:bb:87:
         c7:a5:19:4e:1b:55:ba:cf:4c:89:26:32:e1:f6:f6:66:5c:27:
         bb:73:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:11:22 2025 by rpki-client