Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          Kr5PrO/1IK4xfAFxnRNaQUANVVGG6dppEx9L/ldlMLA=
Subject key identifier:   CE:F3:24:18:AB:EF:AE:5D:07:36:BF:CB:26:C2:C2:11:82:BD:DB:2A
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       0196AB434F923913F083A940E60BC68DD2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          0639
Signing time:             Wed 07 May 2025 15:00:37 +0000
Manifest this update:     Wed 07 May 2025 15:00:37 +0000
Manifest next update:     Thu 08 May 2025 15:00:37 +0000
Files and hashes:         1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: fyZQV1DOxDmabEWNC4vHh0/Se9wNs0FUG6KeIGWEkLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:43:4f:92:39:13:f0:83:a9:40:e6:0b:c6:8d:d2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: May  7 15:00:37 2025 GMT
            Not After : May  8 15:00:37 2025 GMT
        Subject: CN=cef32418abefae5d0736bfcb26c2c21182bddb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:81:8b:2c:de:97:c9:0e:c8:37:17:44:d3:
                    bc:9d:c9:88:85:67:2e:33:a0:e3:23:d8:3f:a3:38:
                    f7:b8:38:48:73:62:62:9c:f6:47:29:44:46:fb:98:
                    78:d2:2e:db:b5:0d:36:f5:c8:3c:ce:9b:a8:7d:97:
                    aa:d6:85:b9:62:a2:9e:5f:4c:7b:67:bb:4d:1f:83:
                    f3:bf:0f:51:76:4e:2e:82:41:ef:5a:78:7e:9b:6c:
                    7c:0d:3e:7f:5a:b5:31:4c:0e:7c:54:87:59:ec:27:
                    7c:50:02:ed:71:53:81:dd:30:b3:37:c3:31:ff:4b:
                    43:c9:2b:db:4a:ae:6a:04:24:ef:22:c8:b0:84:4d:
                    b1:01:0b:07:c4:43:90:ff:af:70:1a:7e:ce:aa:35:
                    e6:22:e7:ff:cc:9c:0c:82:44:e2:f2:d1:df:75:32:
                    2c:ea:66:d8:56:91:e4:4b:63:dc:01:6d:78:7d:00:
                    eb:a8:40:31:df:2f:92:f1:24:12:97:a8:e2:80:23:
                    14:9b:33:b8:f8:23:1a:e8:82:9d:6c:e6:04:ba:aa:
                    f1:e2:84:9e:2c:9f:23:9f:82:eb:37:4f:fd:d7:c4:
                    86:46:a1:9e:6c:36:1b:85:24:40:bb:83:08:9c:47:
                    b0:78:2b:ac:28:7d:c7:43:8d:45:b1:3a:12:0d:0d:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:24:18:AB:EF:AE:5D:07:36:BF:CB:26:C2:C2:11:82:BD:DB:2A
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:69:27:25:d1:8b:c0:ae:d8:55:70:0f:d6:aa:4b:4f:46:85:
         6b:1b:51:87:05:5b:58:e0:41:85:51:9d:c4:2a:ca:04:0b:08:
         a5:82:13:d5:cf:bf:cf:73:47:5e:df:5c:e3:86:2f:d5:0d:6b:
         e0:f0:90:bf:3c:dc:e3:c4:e3:a9:27:64:43:e1:e5:e1:22:10:
         4e:28:0c:4f:ac:0a:79:ef:23:4a:07:f5:5e:1f:97:b6:17:4c:
         f2:31:43:95:c1:c8:a9:5b:32:62:40:59:c5:4c:76:97:4d:23:
         99:96:68:51:dd:3f:97:e6:9f:d9:25:25:8c:76:c6:57:e7:8a:
         15:a4:10:22:4a:7e:4a:71:e2:ef:a1:f8:e6:71:27:42:01:6f:
         68:bb:79:f8:21:7d:50:e0:58:9c:fb:1a:a0:6d:e5:70:a4:71:
         1b:9e:dd:49:86:98:03:9b:2e:ec:e4:df:ff:8b:8b:4d:31:fc:
         d2:9d:fb:97:89:3f:98:45:26:ca:34:06:eb:1e:dc:e5:89:f1:
         ae:45:9f:02:d3:20:c0:bd:e3:e1:25:30:70:79:0a:9d:63:8a:
         53:ad:34:52:e0:7e:fe:79:59:15:6d:d5:c2:52:4a:19:d4:d5:
         e6:48:92:3a:23:7d:9b:1c:e1:cf:64:9c:d1:a1:f1:1a:94:12:
         33:f9:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:15:02 2025 by rpki-client