Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File:                     2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier:          NSz2ltiuWoW90MAcURAO6cHAaG0rm4r4FAMG8aNfcnc=
Subject key identifier:   90:F3:92:F0:E5:F3:8B:DA:E2:3E:68:A8:19:7B:EC:92:F4:45:07:C8
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer:       /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial:       0196C38252FCB856D18A063F48B29D1D1E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number:          0FA8
Signing time:             Mon 12 May 2025 08:00:20 +0000
Manifest this update:     Mon 12 May 2025 08:00:20 +0000
Manifest next update:     Tue 13 May 2025 08:00:20 +0000
Files and hashes:         1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: JEHuZjT5/FBN8KtK8R0C2Y/n0KDWS42kWRfa02B5MfA=)
                          2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:52:fc:b8:56:d1:8a:06:3f:48:b2:9d:1d:1e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
        Validity
            Not Before: May 12 08:00:20 2025 GMT
            Not After : May 13 08:00:20 2025 GMT
        Subject: CN=90f392f0e5f38bdae23e68a8197bec92f44507c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:ed:de:5e:d5:70:92:fb:bf:39:4f:57:5d:
                    ec:b3:a7:7b:e8:1e:b9:d4:c2:fa:79:62:e7:ea:a4:
                    f3:50:9e:f9:31:31:a0:bf:df:aa:02:33:75:72:06:
                    85:90:66:1a:38:f0:2a:af:45:7c:e8:c6:6c:b2:15:
                    c9:8e:97:38:17:15:0a:ea:14:dc:e0:14:ea:85:b1:
                    db:b8:05:33:ea:53:31:e3:bc:95:f3:c0:79:98:6c:
                    63:f9:a5:97:4b:dd:51:33:17:03:a3:7c:90:29:71:
                    8b:83:d1:d5:08:7e:44:14:bd:51:ca:fd:51:61:42:
                    2e:a2:c9:cb:75:f4:5e:50:6f:66:b4:f2:6b:2b:0d:
                    ac:43:b7:4f:46:c4:49:f1:4f:3f:71:e1:33:49:5b:
                    7a:f9:76:29:b8:e6:a4:45:9e:fa:d7:4e:09:af:64:
                    75:5a:ef:e9:95:68:a9:00:09:7d:b0:88:a0:29:20:
                    2e:94:4e:fa:b6:d4:4f:41:d1:2e:f7:ba:b0:79:67:
                    d1:57:97:99:69:32:b0:52:82:cf:39:17:f6:f2:ab:
                    d9:b2:f2:9f:39:ad:d8:b2:40:8e:b0:8b:be:f6:6c:
                    1f:78:4c:50:e6:79:f1:13:b2:cf:70:ab:2e:18:eb:
                    f5:f9:92:3e:39:f8:85:5e:36:48:bf:30:b8:d4:46:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:92:F0:E5:F3:8B:DA:E2:3E:68:A8:19:7B:EC:92:F4:45:07:C8
            X509v3 Authority Key Identifier:
                keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:62:37:5a:f4:10:c6:58:59:e3:57:c0:bd:20:f1:19:0d:17:
         2a:ca:98:4c:06:bb:31:01:60:17:82:e7:55:a9:b3:1b:87:5e:
         6a:7c:56:4f:89:c3:5b:b1:56:fc:0f:ca:88:3d:8f:f6:1d:eb:
         c6:f3:43:37:db:61:99:a0:d9:a8:d9:89:1c:19:b5:c7:1b:a6:
         98:37:35:42:7a:b2:98:90:a6:84:59:4c:72:48:d0:19:49:2a:
         1b:10:ba:9b:ab:21:dd:bd:8a:61:51:8e:c3:de:51:10:ec:54:
         80:e7:18:aa:ce:17:c4:25:31:31:9c:29:a3:2c:9c:34:96:c7:
         e2:51:9b:06:3f:92:c1:1e:53:94:80:7c:a1:41:f6:02:75:da:
         c5:2c:b9:10:f4:f9:89:d8:2d:00:4d:63:c6:d1:02:22:96:d6:
         d3:84:4b:54:ba:62:d5:1b:ac:94:96:d9:8c:63:d8:7e:c2:e5:
         d1:1f:bf:0a:13:49:fe:5d:33:00:19:1b:4e:c5:da:dc:28:7d:
         32:2c:dd:33:3a:b3:68:a1:8a:ae:5c:84:84:91:4b:22:1f:e7:
         76:23:d9:79:c2:ae:b5:85:63:83:60:f9:4c:ca:46:10:b0:fa:
         78:a2:95:bd:bb:d6:9d:ce:bb:37:21:5d:39:13:51:f4:5e:79:
         89:6b:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:56:21 2025 by rpki-client