Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File:                     Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier:          41lxi5f79jX3Fiey0/R3UWqHXz2WV6AhYlP7F624yjA=
Subject key identifier:   6F:C9:D0:BD:F5:4C:23:A3:BC:15:BF:DD:86:94:CF:7C:F2:49:1C:5B
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer:       /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial:       0196B22137EA194CA5CBF06BC2E8ACDDEA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number:          0B98
Signing time:             Thu 08 May 2025 23:00:43 +0000
Manifest this update:     Thu 08 May 2025 23:00:43 +0000
Manifest next update:     Fri 09 May 2025 23:00:43 +0000
Files and hashes:         1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
                          2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: Nn5HIy4Mgw2EM//hqMH132qjBzIyUmTpdchPlbjLZpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:21:37:ea:19:4c:a5:cb:f0:6b:c2:e8:ac:dd:ea:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
        Validity
            Not Before: May  8 23:00:43 2025 GMT
            Not After : May  9 23:00:43 2025 GMT
        Subject: CN=6fc9d0bdf54c23a3bc15bfdd8694cf7cf2491c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:3d:aa:60:6f:53:59:63:1f:ba:6f:21:c5:
                    3b:61:31:43:d2:42:02:96:09:57:24:8a:d7:1e:e2:
                    ad:b1:df:9a:0f:47:47:bd:77:ac:15:e1:bf:23:b6:
                    4f:b7:ff:3a:79:1f:f9:93:c9:37:5b:24:ed:86:37:
                    c0:1d:67:70:74:f4:73:7e:82:7d:15:4c:20:17:e0:
                    e2:88:d5:96:59:c0:80:fe:31:6b:1f:75:2f:d0:ab:
                    a6:10:4e:d5:45:8b:b3:6a:d8:31:6a:5c:23:2c:8f:
                    bc:93:85:2a:1a:82:50:35:af:84:b4:de:bb:a6:db:
                    58:ed:ee:d7:d7:6d:09:2a:1c:58:e9:7d:f6:a4:68:
                    17:08:d6:b5:64:ee:43:a5:ac:da:a7:37:5b:2d:d4:
                    56:16:8c:e8:cd:ca:e3:1c:bf:20:2a:f1:a7:e2:c7:
                    ea:47:30:99:2a:c4:9f:2f:00:79:fc:bb:70:34:e0:
                    71:9b:fd:05:85:9d:27:8b:83:cd:04:59:49:d5:22:
                    ef:8a:69:05:ec:37:a4:6a:99:a7:6b:f7:63:ed:d2:
                    ea:ae:f4:39:ce:64:b6:c3:be:32:9b:f6:87:37:19:
                    9e:cd:63:0c:57:5a:44:a7:ba:7d:5f:45:bd:c5:15:
                    ea:88:4e:5b:6c:0a:76:3d:c4:9b:e0:35:a7:aa:36:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C9:D0:BD:F5:4C:23:A3:BC:15:BF:DD:86:94:CF:7C:F2:49:1C:5B
            X509v3 Authority Key Identifier:
                keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:bf:24:f5:9f:2a:b2:94:08:cb:3c:3d:92:25:e6:44:df:
         eb:50:15:39:0c:c9:14:ef:bf:b0:3a:32:f4:cf:e2:bc:de:fe:
         68:a1:27:01:28:dd:1d:77:ee:36:01:49:18:5e:51:b9:5d:a7:
         05:d0:0b:d6:ed:f3:68:a9:eb:20:8c:73:9a:92:d5:bc:eb:fd:
         a6:97:71:17:b2:86:89:dd:b0:32:f7:ef:2c:06:4c:2f:ba:e0:
         1b:d0:98:7f:3c:bf:b3:6a:11:cf:67:21:cc:d5:74:f3:14:ba:
         a3:29:a8:b6:5c:89:89:17:c3:af:e2:60:14:3a:1a:0a:05:ab:
         a1:ff:bc:9b:49:e0:b3:59:c9:1b:53:30:bd:9b:7d:24:ee:95:
         03:54:6f:96:bd:40:2b:7c:52:1e:03:62:c0:a9:d6:65:9d:a3:
         30:11:f0:25:ef:a5:92:36:58:bb:f3:76:c7:69:5a:7a:ee:d0:
         27:69:a6:23:cc:38:ba:0f:8c:e2:c6:7a:f3:1c:a2:66:0b:4f:
         2d:e5:6c:50:97:38:47:5c:fb:56:d7:10:07:44:90:ac:30:03:
         a6:f6:61:0f:cd:6d:ea:58:bb:4a:d1:03:c8:c6:eb:46:60:f9:
         a4:3e:a9:6e:55:95:e6:a7:53:62:0e:20:ab:7e:9e:1d:bf:64:
         eb:ac:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:14:53 2025 by rpki-client