Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          HjFJgg9H38txg1rNZgPklmCCULf7y/2BMUrfEn37nC8=
Subject key identifier:   10:C0:4D:8B:53:D8:56:D1:AB:1D:44:9F:A1:B4:0C:49:D6:DC:B7:EF
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       0196B5903F05B6040601C809D65B6A0D6109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          057C
Signing time:             Fri 09 May 2025 15:00:51 +0000
Manifest this update:     Fri 09 May 2025 15:00:51 +0000
Manifest next update:     Sat 10 May 2025 15:00:51 +0000
Files and hashes:         1: PdctoMgTw2-Nt4ZPBmRXGu0XZPo.roa (hash: n9lnP0LlXaq1mXYcdy8fdP94AepAw+KQCy1tAj0j/P8=)
                          2: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: to8sqdlSGZb7pk++zPssrmhUUs4QmXE9crgROT4CAXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:90:3f:05:b6:04:06:01:c8:09:d6:5b:6a:0d:61:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: May  9 15:00:51 2025 GMT
            Not After : May 10 15:00:51 2025 GMT
        Subject: CN=10c04d8b53d856d1ab1d449fa1b40c49d6dcb7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:ff:f4:e4:e7:de:82:cd:ae:94:d7:59:9b:
                    b8:de:65:4f:97:10:b8:5e:e4:d4:8c:b1:58:fc:b9:
                    6a:c7:fa:5b:67:b0:18:b7:27:08:c5:fd:b8:2a:62:
                    e3:4d:d9:2e:a1:d5:6d:44:c9:ef:95:e1:9c:e2:e5:
                    44:91:8f:f8:73:c3:d2:a5:cb:da:a7:5c:9a:54:1e:
                    54:70:8f:62:b1:37:92:77:c9:5a:82:ce:fb:f5:c6:
                    50:d4:dc:50:09:9e:0b:16:d1:f5:40:d2:9b:14:b5:
                    df:5f:1f:73:4a:17:a9:e0:06:13:ad:1b:51:57:a6:
                    a0:3c:d7:a8:87:f6:de:6b:3c:dd:b3:f3:e4:e3:db:
                    50:1a:0a:ac:2e:b1:28:36:b9:f4:c9:5c:4a:fe:0d:
                    3c:2f:87:2c:54:d1:e9:a8:41:cc:48:30:0e:b3:e9:
                    4b:d2:7f:16:d1:8b:7b:8b:51:a8:8f:52:e6:14:91:
                    62:a2:d4:d6:13:fe:1c:88:a3:bf:ef:7b:e6:59:35:
                    55:7d:aa:4a:e4:25:fb:8e:26:67:39:29:43:a0:51:
                    65:94:da:53:39:96:ff:5d:74:32:17:4e:eb:41:c0:
                    48:11:3a:a8:f3:c3:9e:2a:0d:6e:df:5e:aa:1d:12:
                    64:ef:48:1b:8b:03:22:7e:11:89:e4:69:17:ff:f3:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:4D:8B:53:D8:56:D1:AB:1D:44:9F:A1:B4:0C:49:D6:DC:B7:EF
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4d:0a:f0:d4:5d:8b:02:c0:e5:95:ea:d1:05:ce:da:7f:ef:
         ec:05:1c:ca:78:ca:a5:f6:5d:a7:e6:1d:6d:59:31:bd:14:35:
         63:61:e2:ab:09:49:39:54:dc:6d:a6:7d:04:8e:64:7a:74:e6:
         cd:07:37:b1:60:4b:1e:be:c9:a9:34:4e:2d:9c:9f:ec:9a:54:
         db:6d:e8:8a:a6:af:95:6d:d6:f0:ad:03:f3:98:1f:0d:43:35:
         9b:4a:13:96:ee:6b:ea:5d:1c:55:ad:2b:27:99:91:b0:6b:5a:
         22:b7:81:41:84:48:f1:de:7b:61:4f:a4:f4:df:3b:5e:3e:58:
         13:d2:47:e8:30:c7:96:00:43:d8:ae:8e:6d:c0:f6:a4:8b:20:
         df:ea:43:48:e4:90:84:52:39:e6:3c:ee:54:2f:40:c8:59:03:
         92:51:7f:9d:15:8d:47:62:f8:72:30:4e:c3:e0:82:d2:3b:90:
         0c:8e:bc:07:ac:d5:5e:38:8c:d4:7b:4a:d7:69:22:08:e3:f7:
         d9:fa:48:09:17:97:d7:1e:a5:06:4f:22:11:12:f6:7d:c5:43:
         18:17:2d:02:26:5a:17:2c:bc:8d:09:da:c1:19:37:c6:9d:55:
         87:ab:40:04:93:39:c7:f9:bc:33:af:54:80:ac:eb:03:c2:5b:
         ba:aa:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:08:29 2025 by rpki-client