Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File:                     uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier:          woLpAZHN901auTs9c3SgAqTlbFU13jqx2xrXZSIzQ/g=
Subject key identifier:   9B:10:6C:B7:79:19:E7:B8:6A:1C:23:0E:25:55:7D:85:31:3F:7F:D1
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer:       /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial:       0196C0813A9AD8717BF9F9DF333B7F2173BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number:          0A7B
Signing time:             Sun 11 May 2025 18:00:16 +0000
Manifest this update:     Sun 11 May 2025 18:00:16 +0000
Manifest next update:     Mon 12 May 2025 18:00:16 +0000
Files and hashes:         1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=)
                          2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: vKMRvAEHoTtVfZK8Q9qoPILHwJ2zJxnzLSiM6hnmr0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:3a:9a:d8:71:7b:f9:f9:df:33:3b:7f:21:73:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
        Validity
            Not Before: May 11 18:00:16 2025 GMT
            Not After : May 12 18:00:16 2025 GMT
        Subject: CN=9b106cb77919e7b86a1c230e25557d85313f7fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:4d:7c:0b:5b:3f:27:3d:bb:e1:fa:40:b7:
                    0a:e1:19:c8:35:86:8c:94:d7:ea:3f:aa:32:96:f0:
                    6c:e4:e8:6b:fc:84:7b:51:b3:96:be:7f:29:f4:76:
                    e0:27:7f:1c:1b:dd:b3:0a:3f:da:dd:69:22:f7:a3:
                    23:ba:9d:3a:8f:f2:82:7a:c7:4e:31:cc:c7:5b:dd:
                    7d:c6:64:16:37:5b:89:d8:ea:0c:75:ea:54:d1:63:
                    50:ad:6c:02:ed:17:a4:f8:39:09:ad:00:34:d1:e5:
                    ee:ae:f3:c2:f5:c1:ec:c3:0e:c1:2e:17:20:2a:d5:
                    61:53:75:c0:ec:c0:b0:76:c6:0b:2a:69:ef:d2:06:
                    c9:21:44:4b:a0:65:05:0a:ed:a4:e9:1d:3e:b3:b2:
                    2d:f6:a6:db:ca:09:6c:fc:cf:e8:be:91:5d:d3:47:
                    5d:78:74:ac:2d:40:88:c3:db:6d:92:69:33:3f:7a:
                    eb:0f:dc:ad:3d:55:f6:53:be:6e:63:41:d9:22:d8:
                    e9:91:4c:30:b4:ca:90:dc:c6:1b:ba:fe:4d:00:f5:
                    5c:1b:b8:88:56:ba:a6:36:f7:b6:91:66:d1:c9:37:
                    4a:6b:d8:ae:dc:f0:f6:a5:a7:49:e6:9a:ac:d6:56:
                    37:59:38:55:0e:6c:8f:14:99:f7:91:9a:6d:6f:b3:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:6C:B7:79:19:E7:B8:6A:1C:23:0E:25:55:7D:85:31:3F:7F:D1
            X509v3 Authority Key Identifier:
                keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:b9:e8:50:6f:e3:9b:76:d3:5e:ea:da:52:75:b4:f6:bb:78:
         65:8e:bf:70:5f:79:15:98:ab:b2:f5:4b:f7:34:c5:1e:a7:e7:
         b0:ce:70:9f:3e:45:c7:5a:93:0c:7d:02:78:b0:9a:68:3a:78:
         f8:7c:fb:c6:89:6c:b5:c9:a3:06:20:ae:81:64:b6:7d:1c:90:
         05:60:a0:b6:6f:d5:37:ab:22:a4:03:64:54:a7:99:3d:62:93:
         bc:15:fd:2b:a5:1d:ab:4f:90:2b:2f:44:31:9e:53:ee:93:9e:
         b2:ed:86:44:27:04:c2:50:ee:69:cc:d5:a8:6e:1c:19:e5:85:
         ad:c2:bf:f0:28:0b:27:45:1d:c9:fc:69:93:f7:a7:66:b8:1e:
         de:bc:a6:07:77:09:cf:a2:d0:07:34:62:33:bc:eb:62:b8:42:
         1b:58:01:e2:9d:8a:0a:76:40:30:ca:3f:31:80:94:a0:b6:eb:
         ff:52:e7:11:04:f8:dc:cc:60:63:69:93:de:ea:4b:97:0d:a7:
         0f:eb:93:98:72:9a:25:b5:41:7f:25:f1:f1:1e:cc:8f:ae:ae:
         80:86:5e:1b:60:3d:b7:cf:88:10:25:9e:a7:f6:87:e8:77:28:
         6e:ac:35:66:3f:e4:5f:60:53:01:55:03:e3:e2:c2:ae:76:d5:
         e7:be:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:20:34 2025 by rpki-client