Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File:                     UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier:          CG3BepV58P/HODazXb2MrqjmUtwcw/QtHXhihmd4J48=
Subject key identifier:   13:22:88:50:38:09:CE:CB:57:C6:27:C1:86:79:66:E5:BD:43:7E:FD
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer:       /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial:       019773E4D0602A3AF0F467BC2E5FD5B4AEC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 14:01:04 +0000
Manifest this update:     Sun 15 Jun 2025 14:01:04 +0000
Manifest next update:     Mon 16 Jun 2025 14:01:04 +0000
Files and hashes:         1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: B14k9XMmDkzOONGJ8CXPOuTZNgvwexoI6Vy0oPR9AxE=)
                          2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:e4:d0:60:2a:3a:f0:f4:67:bc:2e:5f:d5:b4:ae:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
        Validity
            Not Before: Jun 15 14:01:04 2025 GMT
            Not After : Jun 16 14:01:04 2025 GMT
        Subject: CN=132288503809cecb57c627c1867966e5bd437efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:7a:c2:9e:63:f2:3b:a8:95:ee:e8:a0:14:
                    f8:d9:a2:84:1d:55:8a:b1:d1:09:54:b3:1e:a9:92:
                    ab:7f:c8:8d:76:4c:66:18:ba:fe:49:8e:ba:6d:40:
                    47:06:46:7e:65:7f:aa:23:f1:4f:b4:36:93:5b:a2:
                    f7:49:13:fc:42:b3:97:0b:24:6d:1b:3f:55:3c:cf:
                    68:59:f9:cd:37:af:1e:67:cb:08:4d:28:e3:60:e9:
                    75:ef:0b:59:da:56:86:8b:3f:0a:aa:6a:ed:d7:bd:
                    bf:0f:37:7c:6a:27:ec:47:c1:22:71:22:04:fe:0e:
                    67:c0:d8:73:4d:e0:05:7f:8d:68:24:3e:8e:f6:a1:
                    c4:b8:49:14:7d:28:c3:3f:35:d7:35:ef:db:ee:58:
                    0d:5b:55:24:5d:db:96:6b:db:02:99:81:a5:74:c5:
                    12:44:a5:49:d7:1f:18:03:f6:ca:d0:e3:19:96:5c:
                    18:d9:99:2a:60:5f:df:0e:e7:91:f1:72:29:04:1a:
                    01:94:00:f6:75:56:fc:69:c7:75:5f:e2:a4:03:f7:
                    ad:fc:08:e8:f5:cf:a7:a6:39:39:50:32:a1:24:55:
                    bc:b8:09:95:18:63:04:5f:7f:6e:51:7c:f4:5d:9e:
                    58:e2:22:31:a7:9b:ee:38:3c:ba:d4:85:f4:d2:02:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:22:88:50:38:09:CE:CB:57:C6:27:C1:86:79:66:E5:BD:43:7E:FD
            X509v3 Authority Key Identifier:
                keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:2a:e2:1a:62:eb:83:60:ed:e0:d7:65:eb:f5:ff:e0:9f:
         9b:fa:94:bb:29:bb:1b:01:1a:52:76:28:08:34:94:f2:b0:04:
         e2:8e:e4:af:16:3f:4a:28:88:90:b6:bf:57:32:8d:5e:77:4a:
         0a:32:70:52:4d:06:d5:39:46:d0:08:62:02:47:d4:6e:96:34:
         76:f3:ae:b9:5d:1a:02:24:3f:a6:78:51:94:cb:5d:e0:64:aa:
         b9:29:58:a4:4e:1a:d8:ed:41:4d:93:84:88:a5:89:72:8d:ef:
         66:c4:15:78:e3:28:a6:89:f2:61:38:cd:ab:f1:7a:5f:e4:69:
         a9:dc:db:12:e9:98:03:bc:60:a7:4a:26:36:e3:53:af:43:28:
         e4:da:b3:28:68:5a:0d:c7:de:25:ec:f4:65:25:6e:1a:0e:2e:
         ef:6a:69:d8:b8:97:3c:ad:b0:0b:b5:17:2d:5f:e0:55:b7:c1:
         2b:00:49:3c:ef:5e:e8:10:1c:9e:e9:3d:cf:ce:17:d9:b8:b8:
         de:81:dc:e1:33:c8:22:a3:52:1f:40:ce:fa:59:a5:12:1c:6e:
         47:74:6e:bd:d7:91:60:42:6a:c3:a0:aa:8d:51:ed:7c:d9:23:
         ec:27:2e:28:7b:d2:dd:c7:50:34:a9:05:9d:58:5d:c7:75:d1:
         ee:38:ae:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5NBgKjrw9Ge8Ll/VtK7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZWE1YWNiNDQ3YjJjZWI5MzJhMDNmMjkwMDgyZGM3NmY4
ZTQwZTMwHhcNMjUwNjE1MTQwMTA0WhcNMjUwNjE2MTQwMTA0WjAzMTEwLwYDVQQD
EygxMzIyODg1MDM4MDljZWNiNTdjNjI3YzE4Njc5NjZlNWJkNDM3ZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucd6wp5j8juole7ooBT42aKEHVWK
sdEJVLMeqZKrf8iNdkxmGLr+SY66bUBHBkZ+ZX+qI/FPtDaTW6L3SRP8QrOXCyRt
Gz9VPM9oWfnNN68eZ8sITSjjYOl17wtZ2laGiz8Kqmrt172/Dzd8aifsR8EicSIE
/g5nwNhzTeAFf41oJD6O9qHEuEkUfSjDPzXXNe/b7lgNW1UkXduWa9sCmYGldMUS
RKVJ1x8YA/bK0OMZllwY2ZkqYF/fDueR8XIpBBoBlAD2dVb8acd1X+KkA/et/Ajo
9c+npjk5UDKhJFW8uAmVGGMEX39uUXz0XZ5Y4iIxp5vuODy61IX00gJKMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMiiFA4Cc7LV8YnwYZ5ZuW9Q379MB8GA1UdIwQY
MBaAFFDqWstEeyzrkyoD8pAILcdvjkDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUt
NWNhOGFjMTgwOTZkLzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUtNWNhOGFjMTgwOTZk
LzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdkq4hpi
64Ng7eDXZev1/+Cfm/qUuym7GwEaUnYoCDSU8rAE4o7krxY/SiiIkLa/VzKNXndK
CjJwUk0G1TlG0AhiAkfUbpY0dvOuuV0aAiQ/pnhRlMtd4GSquSlYpE4a2O1BTZOE
iKWJco3vZsQVeOMoponyYTjNq/F6X+RpqdzbEumYA7xgp0omNuNTr0Mo5NqzKGha
DcfeJez0ZSVuGg4u72pp2LiXPK2wC7UXLV/gVbfBKwBJPO9e6BAcnuk9z84X2bi4
3oHc4TPIIqNSH0DO+lmlEhxuR3RuvdeRYEJqw6CqjVHtfNkj7CcuKHvS3cdQNKkF
nVhdx3XR7jiuWw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:51:57 2025 by rpki-client