Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          oVYzkHmzci2+VRmWdqEwNTfylbIywtbJeLU9qm1b8NI=
Subject key identifier:   0C:C9:C9:CF:E5:83:D8:22:C7:81:49:E5:74:81:78:8F:BE:34:F1:33
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       0196BE25C07B2EC3AA6BBCBC69634DCDB055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          0490
Signing time:             Sun 11 May 2025 07:01:07 +0000
Manifest this update:     Sun 11 May 2025 07:01:07 +0000
Manifest next update:     Mon 12 May 2025 07:01:07 +0000
Files and hashes:         1: oXndQEWLAi93Q3gStogUAMhpojg.roa (hash: 3yyWwrPlKu/PVm4mmaMjgKzNXRTuMyz0HTS/+PODjNA=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: CiBVytoEMUse59mUYH1P2n2xuSoDxinAS/KUqyeGWSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:c0:7b:2e:c3:aa:6b:bc:bc:69:63:4d:cd:b0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: May 11 07:01:07 2025 GMT
            Not After : May 12 07:01:07 2025 GMT
        Subject: CN=0cc9c9cfe583d822c78149e57481788fbe34f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:ac:68:c0:c5:18:94:21:8a:cd:ef:50:5e:
                    f4:0c:b2:a9:ab:3b:c0:2b:59:bc:eb:f3:1b:b1:8b:
                    3b:25:b6:a0:99:b9:e0:be:c1:ea:a8:0f:cd:d7:2d:
                    c6:16:cf:b9:b0:4c:c7:42:34:0a:8e:e7:99:30:44:
                    4d:4c:bc:e5:6a:d1:a1:ec:85:ce:05:0f:72:ca:fe:
                    2c:ac:c6:1b:c3:5e:93:a6:bf:ab:c9:bb:cd:d9:2a:
                    e2:49:dd:c4:b6:66:5f:8f:f1:0c:64:2d:db:a0:6c:
                    ab:ab:42:87:40:15:57:70:34:1f:39:91:00:0b:df:
                    bc:f8:9d:d4:71:2c:e7:7e:84:b0:13:df:52:12:a9:
                    ea:f3:c4:47:3c:55:52:54:7c:4e:58:04:51:35:4a:
                    5f:f2:05:00:ae:0e:71:6b:b7:27:42:08:8d:de:30:
                    ee:89:b5:c4:12:2c:ec:b0:c8:29:5d:31:9e:03:91:
                    f8:81:32:82:a3:08:d9:f6:cd:27:62:b5:59:5a:ae:
                    c5:f5:90:9e:63:17:42:f1:1d:e5:ab:bb:84:45:93:
                    6f:14:df:7b:90:11:83:46:cd:38:d2:b2:d9:7f:7b:
                    db:f4:2f:95:9f:2f:b1:49:53:0f:40:c2:e4:c5:84:
                    4a:78:a3:f7:1d:08:70:7d:c1:bc:9c:42:3c:50:90:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C9:C9:CF:E5:83:D8:22:C7:81:49:E5:74:81:78:8F:BE:34:F1:33
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:33:01:44:79:09:94:aa:e2:8b:bf:ba:77:99:86:fa:26:
         99:d3:04:c6:3b:08:b0:05:72:c2:03:87:d9:82:5e:94:cd:90:
         f5:9e:07:4a:97:f7:0f:65:d2:57:50:77:e5:19:e7:96:d5:dd:
         0a:1a:eb:06:b3:8d:5e:f2:3d:64:cd:6d:84:3c:27:a9:88:b3:
         41:66:f4:23:65:17:be:be:4c:80:eb:31:70:54:ae:15:06:af:
         f2:f0:78:f9:28:f2:e8:84:c9:e6:44:d5:97:41:da:a7:64:83:
         89:0c:49:22:47:21:aa:22:c7:0d:78:9f:dc:33:f4:13:b5:e0:
         09:f8:c5:e2:d1:73:02:fe:32:4d:2e:ed:fc:df:ce:eb:57:b7:
         e9:d3:45:e4:5e:fb:8a:27:d2:49:5d:76:d4:0f:d7:db:53:ba:
         1c:f3:08:4b:00:0d:2e:f4:88:da:49:c1:10:d8:4a:6b:29:dd:
         ec:b4:ca:60:87:9e:55:55:b6:a0:3b:3d:d2:d6:9e:57:9a:fa:
         e5:a9:d0:0e:f4:2b:47:fc:17:bd:14:5d:86:4c:6f:7a:51:dd:
         63:2d:1b:6a:eb:25:85:ea:5b:96:08:0e:40:98:31:79:e5:bf:
         af:a5:06:5c:34:e3:96:13:5d:9a:c9:8d:84:d1:6b:61:0b:56:
         20:8d:3a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JcB7LsOqa7y8aWNNzbBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDYxOTg3ZDAwMGQ4ZTYxODg1NGNlNGUzZmY4MTlmZjhm
NGQyNDQwHhcNMjUwNTExMDcwMTA3WhcNMjUwNTEyMDcwMTA3WjAzMTEwLwYDVQQD
EygwY2M5YzljZmU1ODNkODIyYzc4MTQ5ZTU3NDgxNzg4ZmJlMzRmMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx+saMDFGJQhis3vUF70DLKpqzvA
K1m86/MbsYs7JbagmbngvsHqqA/N1y3GFs+5sEzHQjQKjueZMERNTLzlatGh7IXO
BQ9yyv4srMYbw16Tpr+rybvN2SriSd3EtmZfj/EMZC3boGyrq0KHQBVXcDQfOZEA
C9+8+J3UcSznfoSwE99SEqnq88RHPFVSVHxOWARRNUpf8gUArg5xa7cnQgiN3jDu
ibXEEizssMgpXTGeA5H4gTKCowjZ9s0nYrVZWq7F9ZCeYxdC8R3lq7uERZNvFN97
kBGDRs040rLZf3vb9C+Vny+xSVMPQMLkxYRKeKP3HQhwfcG8nEI8UJDv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzJyc/lg9gix4FJ5XSBeI++NPEzMB8GA1UdIwQY
MBaAFLlGGYfQANjmGIVM5OP/gZ/49NJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWIt
YWUxNzk5YTNkOTE0LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWItYWUxNzk5YTNkOTE0
LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvAzAUR5
CZSq4ou/uneZhvommdMExjsIsAVywgOH2YJelM2Q9Z4HSpf3D2XSV1B35RnnltXd
ChrrBrONXvI9ZM1thDwnqYizQWb0I2UXvr5MgOsxcFSuFQav8vB4+Sjy6ITJ5kTV
l0Hap2SDiQxJIkchqiLHDXif3DP0E7XgCfjF4tFzAv4yTS7t/N/O61e36dNF5F77
iifSSV121A/X21O6HPMISwANLvSI2knBENhKaynd7LTKYIeeVVW2oDs90taeV5r6
5anQDvQrR/wXvRRdhkxvelHdYy0bauslhepblggOQJgxeeW/r6UGXDTjlhNdmsmN
hNFrYQtWII062A==
-----END CERTIFICATE-----
Generated at Sun May 11 11:41:09 2025 by rpki-client