Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File:                     M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier:          Pb6G72DFLzaRHr9ncf8xEps3itQvFzOXiGvPdIspnSM=
Subject key identifier:   4E:43:63:8D:6A:CC:0C:50:23:C3:AA:3B:DC:F8:BD:F8:3B:11:1F:34
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer:       /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial:       01976C620640031A1ED82548413B8F21D69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number:          131B
Signing time:             Sat 14 Jun 2025 03:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:52 +0000
Files and hashes:         1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: HYaupogzkFQ25xAfWAjOMGVFLM37+nIhMvRD3A7jLGg=)
                          2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:06:40:03:1a:1e:d8:25:48:41:3b:8f:21:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
        Validity
            Not Before: Jun 14 03:00:52 2025 GMT
            Not After : Jun 15 03:00:52 2025 GMT
        Subject: CN=4e43638d6acc0c5023c3aa3bdcf8bdf83b111f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:55:e6:76:83:69:5c:d6:36:aa:d7:8b:af:
                    95:8b:7c:56:0e:97:38:2d:c8:89:10:54:92:6e:7b:
                    68:6d:2d:f5:02:ee:cb:77:15:b9:41:5c:e4:2d:a6:
                    34:4d:fb:39:f8:59:02:02:02:8c:8e:78:9c:d4:b1:
                    2f:fb:33:9b:38:52:c0:83:14:94:af:bd:3b:b9:20:
                    04:b1:ab:7c:8f:af:b3:a2:5a:d2:c5:11:6b:24:3a:
                    d8:f8:4d:df:56:15:c7:2a:2f:d0:35:78:c4:c4:51:
                    5e:61:15:64:1a:44:6f:9a:6c:5c:65:84:8b:ab:58:
                    eb:3c:d1:71:dc:9f:85:a7:dc:91:1e:b7:94:fa:07:
                    fd:71:c2:64:a0:d3:50:9c:ae:1b:38:17:b9:cd:42:
                    fd:1e:d2:27:1d:d4:3e:e9:60:a3:bf:a7:f2:da:5a:
                    1d:8e:36:b5:c2:3f:5e:20:3d:5e:21:0d:54:9e:38:
                    5b:e3:bc:36:a3:98:c4:1e:c4:de:eb:8b:a4:16:c3:
                    ef:b7:e6:38:7f:a0:df:c9:65:cd:d0:4d:04:4f:6c:
                    79:ec:d9:16:64:ee:d8:80:e6:4a:95:90:02:f9:be:
                    6f:6f:f8:5f:f8:0b:34:7b:47:8a:ed:a4:6f:59:44:
                    a0:68:a4:84:b3:e4:1b:f1:d8:3c:92:36:3d:98:c1:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:63:8D:6A:CC:0C:50:23:C3:AA:3B:DC:F8:BD:F8:3B:11:1F:34
            X509v3 Authority Key Identifier:
                keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:86:ca:5a:4a:3a:f3:9a:7f:16:2f:e3:4d:ef:ef:3f:98:28:
         b4:40:39:72:22:ef:98:91:fb:38:01:70:8f:6f:8c:85:4a:5a:
         48:5d:16:96:2b:c3:ab:e8:bd:6f:ed:d8:27:f9:01:70:98:4a:
         24:12:6c:2f:11:b1:c0:41:bb:1c:3a:dd:a1:59:94:19:4c:68:
         df:db:f4:89:93:92:88:7a:40:b9:f5:11:4f:49:d6:21:c9:b9:
         33:41:38:88:4a:62:7f:99:e1:ca:c5:59:dd:3d:dd:ea:60:9b:
         02:0a:ac:48:bd:36:e8:72:0b:e1:b4:1b:56:40:12:4f:c3:7b:
         39:da:35:0a:6a:ec:bc:24:40:24:88:cb:32:63:ea:aa:46:c5:
         65:a3:b8:0b:2d:fd:5d:e2:c6:04:2b:68:14:63:85:ed:a0:b8:
         1d:31:73:38:d0:76:69:4d:6e:f7:98:78:5b:e0:b6:22:a6:e7:
         27:e5:14:9f:6e:3e:bb:cc:91:2e:28:70:9d:38:92:86:e0:21:
         44:f4:b3:d9:72:ee:a4:bd:be:f3:98:e7:bd:49:da:3e:04:ac:
         e5:9d:f3:52:78:bc:2b:c3:0c:fe:42:e1:b1:99:da:18:69:8e:
         e3:40:05:e1:d0:d0:64:2b:ba:25:16:81:1f:44:b0:96:78:53:
         f0:f0:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:27:29 2025 by rpki-client