Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          o6x+lPTBpM2s5IghY7MGzRXYLxYlnfuWKneiqmUWM0c=
Subject key identifier:   78:17:8C:38:E7:47:87:FC:AA:0F:ED:35:8B:05:F5:4F:69:EA:FC:0E
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       019773ADD712592488F865B4F3F6C690377F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          0E15
Signing time:             Sun 15 Jun 2025 13:01:01 +0000
Manifest this update:     Sun 15 Jun 2025 13:01:01 +0000
Manifest next update:     Mon 16 Jun 2025 13:01:01 +0000
Files and hashes:         1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: lEUGDPpXTs/zhspHGRJk0/lqPp6H7Zv4sj4V1AvdxPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ad:d7:12:59:24:88:f8:65:b4:f3:f6:c6:90:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Jun 15 13:01:01 2025 GMT
            Not After : Jun 16 13:01:01 2025 GMT
        Subject: CN=78178c38e74787fcaa0fed358b05f54f69eafc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:34:75:e0:45:57:87:d2:8c:cd:f3:f4:25:
                    4f:03:3a:e1:91:d8:ea:9d:37:b2:f6:9d:19:5e:34:
                    33:ec:0d:e1:4f:e9:f9:e4:78:c7:a1:85:8d:3a:6a:
                    14:ca:19:87:f8:73:7e:dd:f4:ae:b6:87:5c:4e:37:
                    c5:48:67:4b:78:a2:55:c8:58:c6:f7:f8:ea:9e:28:
                    c3:e3:8d:58:f5:9e:aa:8a:c5:9f:c4:41:f5:b5:82:
                    75:aa:98:7c:cf:10:2b:db:8d:fd:f1:b8:f8:ac:9a:
                    87:30:47:d4:73:3e:b2:04:96:53:fd:a1:10:6f:56:
                    65:fa:fb:67:bd:66:ff:e8:c4:6b:6c:bc:fc:bd:b1:
                    87:3a:f7:27:57:e5:a8:84:78:e4:cd:0e:d6:aa:87:
                    52:ff:1c:c2:cb:7d:28:89:de:cd:08:49:9e:02:b2:
                    ea:b0:ff:00:d0:00:3d:ab:fa:3a:85:7d:5e:b8:61:
                    42:42:28:e9:b7:2b:90:87:44:b3:ad:4d:3b:1e:af:
                    94:d5:09:90:dc:d4:cd:94:ca:fb:e9:52:e2:db:c8:
                    b5:75:65:aa:97:b3:6b:03:93:e1:b9:6c:b5:ed:6b:
                    45:b1:45:b7:a4:e0:3d:3a:9d:d4:fc:f0:23:29:c2:
                    7f:30:fb:70:f0:69:07:22:9c:8f:1f:81:bd:13:e9:
                    d9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:8C:38:E7:47:87:FC:AA:0F:ED:35:8B:05:F5:4F:69:EA:FC:0E
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:64:46:83:2d:a7:1c:da:2b:93:f6:d3:aa:57:49:dd:fd:9e:
         6b:6c:f1:2e:f7:8e:61:84:2e:7c:de:39:9c:b9:e0:4b:9b:84:
         3f:04:02:2c:cd:52:94:9c:11:bb:f1:a5:d6:9c:5d:f2:d6:6a:
         c4:a8:ed:b6:ad:84:73:18:cd:97:62:ee:59:ae:e9:01:40:62:
         de:66:b4:b5:72:03:b2:e6:18:99:fc:16:37:43:ae:69:52:25:
         34:7f:84:0a:bd:9e:34:13:8a:f1:e8:45:da:60:9f:19:c2:90:
         93:ae:81:af:af:c3:fd:23:66:10:7e:f9:10:9d:dc:d8:a4:19:
         22:31:8e:93:f4:27:b3:1c:6a:eb:64:16:2a:6b:9a:22:ba:0b:
         2b:7f:f8:3b:30:d9:1e:48:b0:77:4e:27:70:3f:98:84:2f:f3:
         35:7c:e8:48:aa:d5:07:93:2f:d7:44:fe:b0:47:1a:2e:dd:b9:
         28:93:83:1c:74:35:f4:10:e4:69:bf:ae:23:7b:85:af:48:21:
         14:8d:43:b4:13:8b:da:f0:6d:1f:0b:94:b8:a8:bd:cd:26:03:
         6b:00:ff:71:72:20:ea:a2:69:64:08:b3:21:3f:48:d7:cb:1a:
         26:42:e3:ea:de:52:9b:f4:40:6c:a4:de:a4:69:25:86:74:f6:
         6a:e8:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:19 2025 by rpki-client