Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
File:                     UmJQW0iFgcLs11gqNOzlJjLj75Y.mft (raw, json)
Hash identifier:          4IOfG4sCJYcsa1pylqywZ1j1qGmRoDA7Le9EUmTxe3s=
Subject key identifier:   6F:B8:17:F7:8F:11:68:4E:46:51:5E:54:FB:F1:12:AF:99:FA:AD:9D
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Certificate issuer:       /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial:       0196A8B05815B547C45C2C27F0B41AD829C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
Manifest number:          0DEA
Signing time:             Wed 07 May 2025 03:00:51 +0000
Manifest this update:     Wed 07 May 2025 03:00:51 +0000
Manifest next update:     Thu 08 May 2025 03:00:51 +0000
Files and hashes:         1: UmJQW0iFgcLs11gqNOzlJjLj75Y.crl (hash: 36CqC01cJk9AQ/RY2u6oXJn8+6FdIGQkGj94DMNXrqk=)
                          2: YoqdurND-upgcXWxAcpQuefPm64.roa (hash: /491Mi9Fi+bDxakeWh2wlNUupkb90wEk7U//uUYJllE=)
                          3: og6MrC5yBqZd-w_jdnPWOr9coG8.roa (hash: H6FCr41wgfYRZuN4iXgiEuTmqTBZgur449ahw2ZWyrE=)
                          4: zO99S-j_1FZSZc-d3wPOk_r9aws.roa (hash: fbkA7GRWdBwzPVsGQcjMlHBtp/6gNaDm1Z08rE3xQtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:b0:58:15:b5:47:c4:5c:2c:27:f0:b4:1a:d8:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
        Validity
            Not Before: May  7 03:00:51 2025 GMT
            Not After : May  8 03:00:51 2025 GMT
        Subject: CN=6fb817f78f11684e46515e54fbf112af99faad9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:87:7c:0d:68:23:71:1f:98:2a:7d:2a:ff:
                    21:33:23:67:da:6a:4d:c7:10:8e:6a:e6:46:35:72:
                    9f:6c:35:4b:71:23:8b:4a:d7:be:2b:85:9a:53:2e:
                    d8:e2:da:38:d0:e4:77:88:46:bf:fc:59:18:82:21:
                    0d:ed:3c:ea:a3:b4:3d:18:46:7a:2e:88:49:5e:be:
                    69:aa:6e:2e:ca:c9:0f:39:cc:25:ff:48:f7:77:7d:
                    37:54:79:eb:76:cb:36:f9:d4:2b:71:47:ba:6b:4d:
                    9b:3a:c0:33:ad:d3:cb:04:57:0e:ef:36:ac:1b:58:
                    cf:6c:27:c1:57:05:7d:1f:18:11:1a:be:86:64:85:
                    2d:67:4b:5d:9b:82:02:1c:7d:2e:3e:5e:95:20:81:
                    0b:6a:67:25:6d:aa:58:4e:2d:62:93:e3:1e:41:9d:
                    e5:f1:02:2a:fc:01:ba:32:a8:7b:23:37:be:8e:8f:
                    cd:ce:6b:59:d3:92:51:e0:7a:93:38:04:c9:f8:eb:
                    1e:77:06:65:04:06:36:e2:3e:aa:07:64:38:3f:75:
                    e1:d7:08:b8:9e:3a:07:b9:8e:be:cd:ff:f1:93:97:
                    fb:c8:d9:1a:66:82:47:fb:5b:22:ef:ae:ad:81:03:
                    7c:55:ed:7d:d5:12:de:27:58:69:ca:c1:23:0a:b0:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B8:17:F7:8F:11:68:4E:46:51:5E:54:FB:F1:12:AF:99:FA:AD:9D
            X509v3 Authority Key Identifier:
                keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:5f:bc:9e:6d:8a:13:39:16:74:0a:db:d8:fe:0b:13:00:
         3c:ca:ce:13:1c:2e:70:34:46:4e:f2:a7:ad:2f:6d:45:db:c1:
         5a:22:13:72:35:a5:88:ef:06:4f:f7:c2:fc:3f:9a:a1:83:44:
         ff:7c:e5:8b:88:2b:5f:10:bb:94:05:00:d7:b5:71:1f:5b:ac:
         ff:a6:c9:e9:ca:c6:e7:73:49:29:21:65:ce:ed:31:b3:c9:73:
         9e:0e:6a:73:a2:ea:45:24:ba:a2:01:77:12:22:01:0f:99:56:
         d0:45:f1:44:cd:fc:7b:26:bc:e2:76:b6:87:e4:8b:d7:17:f2:
         81:7f:47:dd:df:e1:29:bf:43:32:18:cd:01:ab:0d:b5:63:aa:
         ea:a3:54:18:88:fc:c1:6c:bb:81:9f:02:ad:f6:98:62:ad:3f:
         be:97:ed:35:20:55:db:92:9d:28:5b:dc:da:50:25:de:98:6e:
         44:ed:4c:35:dc:36:bc:7a:12:af:b2:86:46:38:e7:8b:cd:b6:
         c2:4c:4f:08:cc:a3:01:a1:98:7f:5e:d1:35:f2:3d:59:66:2f:
         74:f0:ca:21:30:18:ad:61:18:39:2e:cb:52:8c:ac:72:b0:e4:
         35:0f:c4:a2:94:b9:4d:4c:2d:cb:aa:09:87:ce:95:9e:1b:e6:
         5f:e4:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:45:02 2025 by rpki-client