Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File:                     UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier:          AOqmYRsg/1W18xZjUbzQqYuRJsumVIm0CwuXW6rAHZA=
Subject key identifier:   BF:F2:2E:F6:B2:76:FC:6D:18:8F:90:B6:D3:2E:63:A6:01:BC:20:6F
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer:       /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial:       0196AC1F5F45613B3D1D5151CEBD60FCEB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number:          05D2
Signing time:             Wed 07 May 2025 19:00:59 +0000
Manifest this update:     Wed 07 May 2025 19:00:59 +0000
Manifest next update:     Thu 08 May 2025 19:00:59 +0000
Files and hashes:         1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: ByKPTv8rcoW7xhFgGB9WuHehTitefN5BpOO3rqmcGmg=)
                          2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:5f:45:61:3b:3d:1d:51:51:ce:bd:60:fc:eb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
        Validity
            Not Before: May  7 19:00:59 2025 GMT
            Not After : May  8 19:00:59 2025 GMT
        Subject: CN=bff22ef6b276fc6d188f90b6d32e63a601bc206f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:f1:0f:19:5a:c7:5a:76:1f:d4:db:b5:a1:
                    d1:10:31:bd:94:06:fe:48:45:80:51:35:e3:33:f4:
                    23:ca:b3:b8:f9:00:89:ed:02:54:e5:c6:a2:89:dd:
                    0a:8a:61:a6:c8:ff:24:e6:93:d3:d8:b4:5f:40:15:
                    b6:03:b9:0a:d5:65:69:77:ae:f1:09:d2:5a:3b:5e:
                    c8:2b:49:6c:13:44:6f:ec:af:9b:79:aa:24:47:4b:
                    05:bf:6b:6c:e0:88:a9:66:58:12:4d:3e:fa:a7:6d:
                    06:e0:30:62:ba:30:82:92:88:b3:0b:51:74:f9:d2:
                    c8:1a:76:93:a9:44:4e:e3:10:97:84:02:ac:90:fd:
                    2a:0c:40:9b:78:01:bc:41:6c:f7:09:10:2b:cf:1b:
                    7c:2c:40:f4:dd:1b:fa:5d:e0:2e:c4:48:a3:43:2d:
                    65:aa:73:4a:98:da:72:cf:a1:10:33:e7:93:45:1f:
                    fe:20:1c:11:6f:8b:61:48:c5:40:fe:22:ba:f1:5c:
                    8c:b0:42:37:e1:46:64:bd:8e:ac:96:6f:e0:b7:4f:
                    17:25:66:e1:6c:64:2d:58:7e:69:6b:df:48:11:d8:
                    e6:47:30:0e:60:3f:76:d2:1c:a8:2d:1b:87:ee:83:
                    bc:78:e6:d4:a7:37:7c:64:d3:9e:9a:2c:8d:a1:10:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:2E:F6:B2:76:FC:6D:18:8F:90:B6:D3:2E:63:A6:01:BC:20:6F
            X509v3 Authority Key Identifier:
                keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:f4:c8:ce:a3:89:70:58:af:44:c1:b8:10:42:58:b0:3d:
         f0:09:19:81:e9:ec:b5:20:75:83:3b:ff:bb:61:fa:ad:e4:90:
         06:aa:d2:77:fa:06:75:54:7a:0e:de:a6:15:20:27:7b:16:d3:
         5c:bc:45:be:35:a5:a6:e8:6b:0f:ed:08:a4:ea:34:e5:9a:cd:
         af:22:a3:1d:3a:56:73:69:00:a4:a9:03:1f:95:c4:76:6f:64:
         ac:90:2d:db:21:d0:20:87:a7:01:5d:8a:e2:b1:a4:c3:3c:61:
         7e:c8:bd:10:0b:90:8f:b2:f0:08:12:34:5f:22:aa:e3:cd:02:
         8d:01:02:2d:ff:c9:c6:47:8a:d5:92:9c:ea:f6:07:fd:88:08:
         bf:d1:8f:bc:cf:0e:dc:cf:93:89:8d:41:cd:09:5f:87:3c:97:
         29:a1:ad:9b:77:f3:fd:bc:03:24:87:b1:9a:16:f2:7b:60:8c:
         ed:e7:aa:f6:ce:09:63:fe:7d:60:18:e8:6c:d0:2e:de:26:c5:
         4f:4f:b9:07:00:9f:7b:ae:3a:3d:7c:09:0d:90:2e:c5:b2:17:
         d5:84:d0:3c:06:66:1b:4c:da:d2:0f:33:30:cb:b6:5b:5d:b9:
         70:fe:f1:ff:3d:4f:30:4c:db:4a:b7:38:a3:22:05:e9:13:c3:
         61:df:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:30:18 2025 by rpki-client