Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          EbysKptVwV6mFKmJAfy9+/REA4NQ/ziU7JqKbgB1f0E=
Subject key identifier:   DB:E1:39:B1:10:BF:A7:3E:2E:0F:53:54:49:B9:1E:44:17:FD:D2:63
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       0196B9DACEC93A4E3056D0C78054F7EDACB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          04C8
Signing time:             Sat 10 May 2025 11:00:46 +0000
Manifest this update:     Sat 10 May 2025 11:00:46 +0000
Manifest next update:     Sun 11 May 2025 11:00:46 +0000
Files and hashes:         1: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (hash: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: AEgk80QWsE4E5nXxe5y4mqKktBf1wHpY7qSItoIZpX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:ce:c9:3a:4e:30:56:d0:c7:80:54:f7:ed:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: May 10 11:00:46 2025 GMT
            Not After : May 11 11:00:46 2025 GMT
        Subject: CN=dbe139b110bfa73e2e0f535449b91e4417fdd263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:14:9e:6e:96:d9:84:bc:91:a3:1b:e9:6f:
                    f6:38:fd:b4:9c:92:db:03:59:6a:8a:a3:fc:d4:db:
                    d6:f1:45:b9:9a:28:b3:ac:f7:53:62:31:a6:e6:b4:
                    70:c1:21:e7:2a:16:e3:0c:66:98:be:90:98:ca:9b:
                    6d:73:c3:f0:c5:02:74:7d:c4:b0:0d:6c:5c:e8:33:
                    1a:d4:ef:ab:08:b0:0d:df:1d:cf:6a:3c:04:78:ca:
                    0f:f7:e5:75:8f:c2:c7:82:17:50:b0:52:eb:de:03:
                    99:cd:7c:85:a5:2f:e1:a4:43:74:2f:10:77:bc:12:
                    f8:2d:f5:9f:a4:39:13:2d:7d:31:48:38:71:b7:ab:
                    aa:45:1e:ee:e4:89:6a:b7:39:ec:33:5c:8f:ff:a9:
                    8f:b4:02:62:2b:4f:5f:4b:50:0b:a1:3e:7e:46:94:
                    9e:bc:41:4e:13:93:21:15:4a:ee:b3:74:dc:23:4c:
                    db:0f:c6:18:48:36:58:da:04:ec:96:bf:5d:f5:3b:
                    d8:d0:1c:af:00:23:e3:76:60:04:af:c7:75:f3:e7:
                    94:bb:4c:04:78:ba:31:9e:33:e4:0e:d2:52:4d:c3:
                    3c:fd:78:51:74:9d:1d:9d:80:db:53:1a:ed:e4:25:
                    10:a3:53:3a:01:28:a1:d2:cb:d7:07:b6:04:5f:71:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:39:B1:10:BF:A7:3E:2E:0F:53:54:49:B9:1E:44:17:FD:D2:63
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:bc:cc:c6:5c:1e:76:15:f7:bf:45:93:b2:ad:cc:8a:3d:
         1a:12:52:77:65:24:66:0a:39:b9:03:19:99:9e:ce:8c:6f:b6:
         6d:bc:9a:13:8a:18:7d:ad:31:9f:1d:72:7c:b3:77:7d:ac:52:
         fb:53:db:a8:20:82:77:b4:6f:e0:1a:b1:d0:1c:f9:57:1c:3b:
         ad:72:c1:97:7c:b3:be:d1:26:0c:e2:40:42:ae:14:f7:ab:31:
         81:83:c5:b3:4d:d5:29:af:d3:e4:bf:df:5d:7d:90:b6:74:db:
         0d:40:65:ad:31:1b:be:77:1f:cc:98:14:2d:eb:cb:8d:c8:c2:
         1a:88:78:b0:59:09:ce:ea:0f:6b:6e:04:19:1f:3b:81:d1:bb:
         79:31:c6:3e:2b:af:d8:20:99:50:b0:56:92:e7:9d:ef:3d:34:
         3a:90:57:f8:10:7f:58:42:e0:3a:f1:a6:ee:fb:60:51:85:8e:
         b8:7b:b8:71:78:32:a3:50:8f:a3:3f:7d:47:0b:c3:11:a4:e1:
         5f:ec:13:39:1b:94:0b:34:13:12:a5:ce:f5:42:70:3c:c9:57:
         57:05:90:20:05:70:94:de:71:d5:ce:19:9a:01:e6:84:95:ca:
         af:42:10:66:cf:69:50:ba:39:f4:86:26:78:e6:90:71:8c:5d:
         46:0c:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:17:15 2025 by rpki-client