Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          wIrjS0rDjVIcQFtR4pDrfkjE2yWDu/GLLq3kcaoi8jc=
Subject key identifier:   F7:91:27:8E:FA:6B:B0:1C:EF:E2:2C:3E:10:16:FD:08:CF:EF:D3:91
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       019674C2916C19DAB8504325A68EBA2CD0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          0D91
Signing time:             Sun 27 Apr 2025 01:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:30 +0000
Files and hashes:         1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: AFXawfkSJPtt0X8u4DTqD/zP+dxlDXjvBFE06Ah6CWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:91:6c:19:da:b8:50:43:25:a6:8e:ba:2c:d0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Apr 27 01:00:30 2025 GMT
            Not After : Apr 28 01:00:30 2025 GMT
        Subject: CN=f791278efa6bb01cefe22c3e1016fd08cfefd391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:26:d4:c6:88:fa:37:8e:c7:fa:1d:ea:91:
                    fd:99:41:c6:4f:19:53:62:c8:2c:21:d5:35:76:50:
                    dd:67:e5:c5:5b:f4:0f:84:62:09:b3:f0:29:43:89:
                    da:e0:e7:4d:f6:50:7d:bc:55:6c:7f:65:dd:50:d7:
                    c1:72:21:bd:65:6d:c8:84:86:db:71:b3:70:09:6c:
                    89:fd:f4:cd:7f:96:d7:f0:10:9e:c0:23:71:36:fd:
                    9f:4f:7d:6f:48:bb:43:df:ef:3e:4d:d4:52:19:e1:
                    44:4c:ed:40:08:20:95:3d:a3:d2:59:c4:57:55:3d:
                    57:3e:df:80:24:e7:a8:4b:f0:84:67:59:8a:d7:db:
                    b3:8f:c8:32:b2:f6:b8:cd:12:c9:77:1d:90:a7:27:
                    28:f0:da:9c:67:8e:51:70:05:36:bc:fe:34:9e:28:
                    a5:86:c3:8c:c1:68:e7:3b:85:e2:b3:ee:1a:50:b3:
                    fb:f6:9f:fd:0d:f7:28:7c:2e:78:64:de:8b:47:7b:
                    cc:46:9e:fb:59:2c:b6:36:99:6e:ef:20:3b:5b:5f:
                    24:e0:18:c2:7e:89:ee:e5:b4:83:72:35:67:51:eb:
                    4c:0d:14:7a:47:87:87:45:ba:fd:8c:cd:ae:67:45:
                    15:93:8f:1e:5d:14:f0:66:63:a5:2d:d0:06:32:98:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:27:8E:FA:6B:B0:1C:EF:E2:2C:3E:10:16:FD:08:CF:EF:D3:91
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f7:97:69:62:1c:52:be:39:05:f5:72:2f:a3:f9:6e:17:74:
         13:8e:ba:e7:82:2a:62:26:86:9f:fb:61:d3:b4:50:b1:a7:7b:
         50:3d:ff:36:fa:33:73:6f:2c:95:f0:01:c5:ce:44:b2:a5:31:
         ad:41:46:c3:77:b9:f7:e2:b7:55:21:08:76:d5:db:3a:23:fc:
         d5:bb:92:e7:da:aa:e8:78:0c:c3:d4:88:2f:0b:51:bc:00:f1:
         78:28:6c:6a:67:48:a7:a4:e7:bd:9f:ba:c9:b0:a0:dd:61:e8:
         c1:9e:c3:6f:b1:91:43:e6:90:ae:89:54:99:38:16:6f:ec:1f:
         bc:1d:24:1d:b7:c8:08:2a:13:e9:c6:3a:fc:9e:37:53:4e:f2:
         06:f7:73:96:81:b8:25:93:42:04:be:fa:43:cd:d9:d3:95:11:
         ae:b7:a1:2d:46:90:f6:23:1a:7a:67:65:44:f2:98:f6:fc:d6:
         c9:8e:f3:b2:01:04:c8:0b:2e:38:3c:f0:7b:f7:15:af:24:8f:
         f4:40:63:d1:6a:a4:ef:33:c5:51:b5:73:05:f5:b2:70:23:79:
         5b:04:2e:78:05:f7:ef:0c:32:d1:eb:7a:12:04:a9:be:dd:cd:
         9a:5f:38:8c:ac:2f:3b:66:17:eb:ad:90:83:7e:77:bd:ca:80:
         c4:77:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:04 2025 by rpki-client