Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File:                     UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier:          n5o8fjIUX2H0Vl5To1bWgOV9KH0K3IYH+TAQC/ZgsIU=
Subject key identifier:   52:F1:B6:89:4E:7F:6F:50:95:6B:78:47:C9:7C:B9:A5:D4:88:A9:41
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer:       /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial:       0197700837B1B77B5286915B80CEF0420EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number:          0DAD
Signing time:             Sat 14 Jun 2025 20:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:16 +0000
Files and hashes:         1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: 6btK8miJeOvVMA+K49AR3p0zFHdszc+iSIR/COtAlHM=)
                          2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:37:b1:b7:7b:52:86:91:5b:80:ce:f0:42:0e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
        Validity
            Not Before: Jun 14 20:01:16 2025 GMT
            Not After : Jun 15 20:01:16 2025 GMT
        Subject: CN=52f1b6894e7f6f50956b7847c97cb9a5d488a941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:da:00:8f:86:20:17:41:88:a8:cf:72:b8:
                    c9:14:49:0a:7c:4c:1b:7d:68:89:ad:ae:73:ef:ca:
                    d6:aa:6e:5a:f2:cd:59:48:b1:15:3c:79:95:7b:fe:
                    e4:c6:d9:5f:18:b0:7d:a4:a9:15:55:9b:06:85:3a:
                    db:05:75:84:e1:3f:b7:63:ca:c2:46:49:4b:17:a9:
                    57:b7:4b:ba:9a:70:de:41:81:a8:0d:da:75:cc:f4:
                    88:5e:07:52:8c:81:7d:8f:d2:65:2a:dd:46:4e:7c:
                    19:85:2d:be:61:51:af:a5:af:29:37:cc:6a:dd:df:
                    b3:46:e0:08:08:d5:37:74:7a:a4:61:7d:2f:c3:a4:
                    70:5f:ca:45:67:18:63:27:67:e4:54:b1:42:73:46:
                    d2:eb:5c:c3:3e:0c:e8:b7:d6:1c:7b:6d:02:58:04:
                    af:4d:7b:7d:44:b8:b3:8c:0b:fa:18:89:92:9f:b7:
                    f4:46:7a:31:ca:2d:97:f5:de:69:fc:46:79:62:32:
                    41:7c:b9:b0:65:57:6a:74:1e:19:27:78:c3:86:3d:
                    bf:75:d5:d4:5c:60:7b:21:ab:74:74:6e:09:66:0d:
                    9a:74:4c:26:c9:a3:fd:bf:dd:1b:2a:09:e8:ad:6b:
                    71:e6:ad:88:81:41:b2:48:b6:d0:d8:91:0c:3a:11:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:B6:89:4E:7F:6F:50:95:6B:78:47:C9:7C:B9:A5:D4:88:A9:41
            X509v3 Authority Key Identifier:
                keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:e5:c4:bc:8a:bb:26:34:c6:3f:b2:30:02:ed:a4:35:a9:
         a8:ec:d1:1a:a6:88:38:1f:33:f1:ee:55:50:35:de:63:86:03:
         10:3a:df:28:3b:28:7f:f3:6a:63:1f:d8:bd:7f:4e:ef:29:77:
         51:74:2f:9c:0d:ae:e1:f4:2a:0b:09:07:c6:e2:32:2e:9a:b2:
         fb:c2:c9:f5:a2:cc:61:8e:b3:a5:48:90:86:34:c7:49:eb:d4:
         8a:02:e3:76:33:0d:ab:04:70:ee:71:40:7b:d5:69:95:e9:a6:
         27:d9:cf:bc:05:ea:fe:5c:5a:89:85:56:58:7f:17:57:d3:62:
         a3:5f:7f:4b:5b:9c:fa:e9:36:ed:44:d2:4f:9a:db:15:c2:8d:
         94:94:17:46:3a:f9:4b:13:23:4c:a5:dd:3c:6e:04:76:31:f1:
         eb:01:e9:36:5b:5a:d3:cb:6c:f3:4a:a2:6e:b4:3f:d5:42:c5:
         64:3c:56:16:e0:03:17:c4:9e:f1:40:3e:76:8e:f2:b5:21:9a:
         54:a8:67:fb:69:55:c1:07:37:ba:c6:fd:d4:d3:0e:eb:aa:20:
         db:cb:c8:f7:d1:ba:fd:e1:84:85:c5:5a:36:66:82:e6:80:28:
         f6:7d:4d:69:96:ca:d6:43:47:ce:20:25:38:2a:9f:55:10:6c:
         eb:e5:3e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwCDext3tShpFbgM7wQg7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNjU2Y2I0Nzc3ZDE0YjVlYjI2NGM2YjAzMmM4YmEzNzU2
ZjJhZTUwHhcNMjUwNjE0MjAwMTE2WhcNMjUwNjE1MjAwMTE2WjAzMTEwLwYDVQQD
Eyg1MmYxYjY4OTRlN2Y2ZjUwOTU2Yjc4NDdjOTdjYjlhNWQ0ODhhOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m7aAI+GIBdBiKjPcrjJFEkKfEwb
fWiJra5z78rWqm5a8s1ZSLEVPHmVe/7kxtlfGLB9pKkVVZsGhTrbBXWE4T+3Y8rC
RklLF6lXt0u6mnDeQYGoDdp1zPSIXgdSjIF9j9JlKt1GTnwZhS2+YVGvpa8pN8xq
3d+zRuAICNU3dHqkYX0vw6RwX8pFZxhjJ2fkVLFCc0bS61zDPgzot9Yce20CWASv
TXt9RLizjAv6GImSn7f0Rnoxyi2X9d5p/EZ5YjJBfLmwZVdqdB4ZJ3jDhj2/ddXU
XGB7Iat0dG4JZg2adEwmyaP9v90bKgnorWtx5q2IgUGySLbQ2JEMOhFSkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLxtolOf29QlWt4R8l8uaXUiKlBMB8GA1UdIwQY
MBaAFFBlbLR3fRS16yZMawMsi6N1byrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUt
ZTdjNDQ0MzQ2NzYwLzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iMGNkMmUtNDg2NC00YTM0LTgyYTUtZTdjNDQ0MzQ2NzYw
LzEvVUdWc3RIZDlGTFhySmt4ckF5eUxvM1Z2S3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpTlxLyK
uyY0xj+yMALtpDWpqOzRGqaIOB8z8e5VUDXeY4YDEDrfKDsof/NqYx/YvX9O7yl3
UXQvnA2u4fQqCwkHxuIyLpqy+8LJ9aLMYY6zpUiQhjTHSevUigLjdjMNqwRw7nFA
e9VplemmJ9nPvAXq/lxaiYVWWH8XV9Nio19/S1uc+uk27UTST5rbFcKNlJQXRjr5
SxMjTKXdPG4EdjHx6wHpNlta08ts80qibrQ/1ULFZDxWFuADF8Se8UA+do7ytSGa
VKhn+2lVwQc3usb91NMO66og28vI99G6/eGEhcVaNmaC5oAo9n1NaZbK1kNHziAl
OCqfVRBs6+U+aA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:07:40 2025 by rpki-client