Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File:                     U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier:          QpYaFu3hmvN7+YNYyUvD/laGJQoHQChQBZTlIL2HoZU=
Subject key identifier:   54:21:8B:3B:36:F4:99:71:83:53:83:15:1D:C6:B4:45:F5:BC:B3:11
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer:       /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial:       0197B88EBBE1ABA1622D09E6515D4CA478C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 22:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:51 +0000
Files and hashes:         1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: Uy6/V1dmrBGWOOA0CZyUmKtECwPYx7KmeQvUfeKbbls=)
                          2: dXA2sXCeF-zEI-_J4kU7kczSGDo.roa (hash: yLUH5uzp/Ib7vlJR5HEnjKQN0s3hZM+CwSBPhsePj6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:bb:e1:ab:a1:62:2d:09:e6:51:5d:4c:a4:78:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
        Validity
            Not Before: Jun 28 22:00:51 2025 GMT
            Not After : Jun 29 22:00:51 2025 GMT
        Subject: CN=54218b3b36f49971835383151dc6b445f5bcb311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:e0:16:a4:c7:6e:8e:2c:e6:af:5f:57:82:
                    a2:90:ca:a4:b3:ce:93:43:45:22:0f:12:01:c0:ea:
                    a8:53:d2:a4:e2:a9:b0:96:6e:fd:a5:49:e4:7b:05:
                    b6:68:21:fa:fa:e9:2c:a5:9b:8d:f3:81:0b:e6:50:
                    95:c1:ba:a9:a4:76:b6:c1:40:f5:69:08:7c:40:cf:
                    e7:0d:28:8b:63:d9:99:90:96:98:4d:47:88:4e:45:
                    ce:dc:fb:42:de:d2:9f:b4:27:80:fb:8e:b1:1a:f6:
                    1c:e1:96:c2:20:8c:84:bf:3f:3c:68:95:2d:3d:04:
                    74:75:bf:b6:a0:7f:74:0b:93:54:3d:38:ea:6a:a3:
                    71:d9:88:e7:08:d4:4a:0c:35:8a:1f:b7:7f:5d:5f:
                    5a:a9:0b:9a:e5:a0:10:b5:a8:80:d4:c5:96:cf:d5:
                    17:1a:0a:15:68:1d:db:c3:30:4e:ba:36:78:c9:4a:
                    94:f4:0e:3e:d6:77:a8:62:dd:e4:f6:35:db:f3:12:
                    e5:06:59:1d:9f:c6:d9:e7:28:87:b0:de:59:09:fe:
                    32:8a:60:8c:22:77:bc:0b:8f:c3:5e:60:20:22:09:
                    17:40:85:bd:78:5b:0e:31:dd:de:10:d7:7f:41:a6:
                    90:a9:8e:08:8b:d3:02:6e:d6:b5:5f:61:f9:95:68:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:21:8B:3B:36:F4:99:71:83:53:83:15:1D:C6:B4:45:F5:BC:B3:11
            X509v3 Authority Key Identifier:
                keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8d:d8:5a:a8:b6:e9:db:c2:1d:e2:1a:b5:86:61:7c:3c:af:
         10:44:0e:08:ab:02:b4:15:ca:c5:02:bd:bf:7c:ba:8e:04:53:
         00:75:3b:46:16:5b:e3:2e:35:aa:38:8a:ff:b8:5e:05:9c:a7:
         00:d5:c3:48:c9:ac:7d:b8:c3:fb:d5:81:46:d6:ee:99:4c:e0:
         55:ba:f6:f6:ed:d1:b9:00:1d:61:06:b3:19:f7:4b:39:c7:f5:
         e4:92:ea:cf:b8:bc:9e:ad:61:de:11:bd:97:52:30:cd:4e:15:
         0e:48:d3:d5:ca:d2:ad:9b:5b:47:ba:6d:73:11:4f:39:cf:0d:
         e5:f3:ac:f5:e1:ca:87:40:e9:9b:19:47:c3:dd:a0:5e:07:7a:
         c4:39:98:04:f6:31:6f:de:dd:7c:d4:ff:7b:ed:7d:d0:83:eb:
         ff:40:62:2a:9a:83:03:72:9c:9d:33:6d:24:a8:96:87:eb:b9:
         a6:7e:2a:07:d5:30:4d:53:6c:5d:55:0f:7b:78:b8:29:ba:71:
         0a:e7:ed:b1:f2:e6:b8:49:bf:2f:4e:b8:f7:ed:83:64:40:4a:
         28:f5:94:eb:79:5b:b8:2b:a7:a3:a2:35:15:bf:ba:9e:2e:a7:
         5c:7e:a3:44:ee:6b:8b:03:37:da:fb:c3:2d:3b:c6:7c:3f:15:
         70:fb:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:33 2025 by rpki-client