Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier:          A6RfSZ/1QyhFayf0q1Z7LcXYDglflqtYhBxZhRNgA/I=
Subject key identifier:   4F:42:E8:F1:F7:BE:42:25:FF:3F:C2:45:E0:13:C8:68:BD:B1:48:FB
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer:       /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial:       0197B6A24314F2F872B2BA2B6EBF75ECB4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 13:02:56 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:56 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:56 +0000
Files and hashes:         1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=)
                          2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: b0ddpNd80zrmheb2t4cnJToEGakXgkSf8UrnhJD2Grw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:43:14:f2:f8:72:b2:ba:2b:6e:bf:75:ec:b4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Validity
            Not Before: Jun 28 13:02:56 2025 GMT
            Not After : Jun 29 13:02:56 2025 GMT
        Subject: CN=4f42e8f1f7be4225ff3fc245e013c868bdb148fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:ff:f6:dd:52:1e:41:d5:5e:86:c8:61:34:
                    4b:a5:d2:4e:3b:71:98:50:8e:9b:c1:5b:7c:e4:08:
                    b2:42:38:80:2a:18:58:14:df:3c:01:58:4d:c0:07:
                    a1:fc:22:59:0c:77:34:3d:5f:c0:1d:14:eb:aa:a7:
                    96:be:8b:e6:72:30:1c:bd:e8:78:57:ad:38:bb:a3:
                    b0:71:2b:61:a0:92:03:df:83:12:f3:c9:61:90:52:
                    fc:80:88:ba:0f:27:f6:4f:da:19:1b:04:91:08:c2:
                    2e:2f:97:d4:16:77:06:04:42:c6:96:0f:77:78:e6:
                    0a:10:10:6e:b9:43:6e:fe:c4:82:f5:ca:52:3c:70:
                    1a:97:80:23:52:39:49:3e:46:4b:cb:d4:97:25:e8:
                    80:be:bc:98:78:22:11:50:8f:66:20:90:15:2b:c7:
                    2e:54:fa:d3:b6:04:8c:29:1c:c0:c7:cc:dc:67:75:
                    9f:98:31:1a:d8:3e:89:8a:4a:ee:34:fa:89:6f:13:
                    8b:ba:63:ec:07:50:a6:94:2b:23:1e:4a:0f:4a:21:
                    f3:ef:dd:4e:6e:10:2c:b8:68:56:24:7a:7e:d0:7c:
                    f7:22:74:c8:5e:3b:06:08:29:25:26:3e:4f:0d:04:
                    02:b5:5d:5f:15:72:f7:33:77:14:fc:48:ae:9f:c2:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:E8:F1:F7:BE:42:25:FF:3F:C2:45:E0:13:C8:68:BD:B1:48:FB
            X509v3 Authority Key Identifier:
                keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:45:9e:4b:03:3e:37:ca:a3:05:b0:b1:18:7d:45:c2:cf:
         07:00:01:c5:50:1a:a8:f2:fb:4f:24:f7:94:77:1e:49:bc:84:
         78:08:d9:cc:d4:79:b3:cb:bc:69:74:90:a0:ac:99:cf:b4:6d:
         f1:bd:ab:c9:4b:93:0c:60:73:9c:a0:79:26:49:6c:97:38:46:
         5b:c8:1a:c0:56:59:24:18:77:a4:db:34:67:07:f0:47:ac:10:
         2c:08:bf:88:b7:0e:ed:18:e3:29:83:49:18:88:c9:dd:d3:ec:
         16:af:b1:bd:6a:f7:8b:9f:28:e5:eb:66:38:dc:8e:ce:52:34:
         c7:12:81:76:f8:38:e2:7d:1c:c7:5b:24:a1:9f:a0:68:8b:31:
         cb:da:56:12:a7:3e:c9:c1:88:a5:24:01:cc:51:db:0d:2f:f7:
         fa:47:ae:dd:4d:6e:9f:86:16:49:11:55:1d:f9:4c:57:9d:83:
         0b:e8:25:2f:76:c9:32:ac:96:b4:72:b6:df:c5:00:26:c5:f7:
         24:da:b6:41:50:7e:5a:bf:57:30:72:64:e7:09:1a:4b:c6:e9:
         89:81:bd:7a:3e:56:f1:43:37:ff:9e:9a:6d:78:95:27:10:c4:
         07:e4:2c:9d:c6:a6:17:57:66:a1:7d:33:51:3e:59:18:49:34:
         67:25:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:07 2025 by rpki-client