Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
File:                     UUtNPv-4vQsTNu68uCe3fhKeD28.mft (raw, json)
Hash identifier:          4+fg7fHC2pfJMDFShppORXnJxRAQ9JAl+U0jjneAaT8=
Subject key identifier:   11:22:43:67:87:9E:11:EC:2B:F8:78:61:79:B1:04:C8:43:26:8D:5B
Authority key identifier: 51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
Certificate issuer:       /CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Certificate serial:       0196B17C1982ED05E5557711381BB8FBC22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
Manifest number:          0999
Signing time:             Thu 08 May 2025 20:00:22 +0000
Manifest this update:     Thu 08 May 2025 20:00:22 +0000
Manifest next update:     Fri 09 May 2025 20:00:22 +0000
Files and hashes:         1: DkmUUaZoynIEdlR9hMmyYSS3NfA.roa (hash: JaWDKrMwIijsWs6TG8arC0MUQjJ3dz0V76FJO19Gqec=)
                          2: UUtNPv-4vQsTNu68uCe3fhKeD28.crl (hash: CGIahevroEUOYcdgXmn835/vqcsT7n8O7ihXu39qUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:7c:19:82:ed:05:e5:55:77:11:38:1b:b8:fb:c2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
        Validity
            Not Before: May  8 20:00:22 2025 GMT
            Not After : May  9 20:00:22 2025 GMT
        Subject: CN=11224367879e11ec2bf8786179b104c843268d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:55:7d:a6:fb:64:1e:70:89:12:23:c5:d7:
                    a5:bf:7a:19:b5:03:fd:af:11:fb:b2:5a:9b:b6:61:
                    60:b0:05:35:89:10:d4:d8:ef:63:31:f3:f0:01:64:
                    0b:82:6d:d0:72:aa:87:94:0f:d6:9f:30:ac:79:29:
                    77:50:7f:f5:7e:06:ea:a2:65:08:03:9c:e4:c1:76:
                    87:03:7f:e5:81:44:29:fc:99:e5:c1:75:a6:3f:c5:
                    05:67:9b:42:1b:52:cd:95:cd:a3:7d:c2:50:01:8b:
                    66:9e:b8:02:0f:6e:37:e6:ca:76:63:ea:8a:a4:00:
                    5a:89:ea:29:20:f2:f1:21:54:2c:44:3f:9c:70:ba:
                    1b:92:ad:f1:e7:cb:b7:56:28:e1:f1:80:bf:96:84:
                    94:00:91:1c:9c:af:5a:92:25:31:0c:6c:55:77:e3:
                    ac:a8:e9:85:a2:36:dc:b1:bb:8d:df:90:24:40:bb:
                    29:f4:d0:2c:da:05:ed:03:0d:37:22:d9:70:e4:77:
                    91:34:59:58:70:63:cd:0d:c9:92:af:be:07:71:b5:
                    75:b5:32:83:32:31:43:d2:8f:7a:e4:13:7f:37:b9:
                    7b:07:53:b3:ae:e3:39:48:63:c8:e3:38:93:0e:6f:
                    9d:02:90:a3:d1:b3:ed:2c:4d:20:e1:d1:48:c4:fd:
                    ab:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:22:43:67:87:9E:11:EC:2B:F8:78:61:79:B1:04:C8:43:26:8D:5B
            X509v3 Authority Key Identifier:
                keyid:51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:53:b8:72:c3:9e:99:6f:76:92:a5:a4:4b:62:dd:e6:70:
         bd:2f:2b:28:9a:d2:19:2f:72:72:d2:88:41:59:90:a5:83:56:
         3b:e5:b5:57:a1:b6:d3:07:2e:e3:28:1d:fe:8b:6e:d9:46:6e:
         3e:4c:ff:03:c8:26:11:7f:f6:86:a7:98:2f:ec:81:57:fd:4d:
         65:04:75:c9:1e:af:a6:39:b4:d0:40:33:75:1f:79:1e:1c:36:
         71:c6:d3:7d:50:97:35:83:61:c6:67:b0:70:4b:83:5a:62:b3:
         44:73:bc:87:1d:28:cf:a6:ab:9d:1c:58:65:d0:09:ee:97:20:
         23:1c:ac:41:b6:28:a3:92:4f:2e:2f:93:68:07:ee:69:cf:07:
         01:c9:cc:66:ea:6b:be:64:d1:47:77:0e:f3:9e:c3:f5:8d:c6:
         70:62:13:94:55:2c:11:55:bf:ae:91:24:78:26:30:c8:5b:40:
         b0:39:72:5a:d6:3e:ed:96:3d:d1:c7:84:38:e3:b2:51:64:ac:
         b4:e3:4b:de:0d:44:98:7c:cc:87:c4:4b:51:14:7d:86:6e:de:
         60:29:bf:08:1f:be:b2:54:ff:f7:71:ba:cb:d3:6f:d9:fd:c8:
         66:a4:f2:90:97:76:22:49:da:1b:d9:b4:49:da:16:19:81:44:
         b0:b0:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:18:56 2025 by rpki-client