Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File:                     Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier:          CvkYF7aeuJ3FsVCToIJHr1ZA7D/1ZSgfhkXQIQ9ZmnY=
Subject key identifier:   6F:7B:54:31:5B:9D:C5:D0:61:E2:87:4B:B1:E7:F2:FE:BE:41:21:3E
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer:       /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial:       01976D3D72B7490F2EFBFB12D83D2F6A1B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number:          10B9
Signing time:             Sat 14 Jun 2025 07:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:32 +0000
Files and hashes:         1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: x/qV1GT4DfuzMg3HQd94mZq2YmuawAVoT7Tn0C30LqM=)
                          2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:72:b7:49:0f:2e:fb:fb:12:d8:3d:2f:6a:1b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
        Validity
            Not Before: Jun 14 07:00:32 2025 GMT
            Not After : Jun 15 07:00:32 2025 GMT
        Subject: CN=6f7b54315b9dc5d061e2874bb1e7f2febe41213e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:22:ed:7c:c0:ed:73:9e:6a:75:7a:84:a8:
                    2c:76:28:82:7f:2c:61:6d:8a:e0:40:36:f1:5f:23:
                    bb:9c:86:15:c7:e2:71:18:28:bb:52:47:28:5c:1c:
                    ae:dc:0e:c1:5c:41:e8:99:09:4a:80:29:ba:f1:18:
                    8c:32:72:21:d5:0b:bc:4b:a9:e5:bb:30:73:6b:e5:
                    a2:25:b3:06:bc:a9:dd:37:dd:66:69:ba:46:6a:21:
                    ea:4a:98:49:00:43:61:c5:32:4a:9c:a1:20:66:f5:
                    5a:12:55:00:90:46:c1:6e:fc:6d:9d:2f:ac:02:2f:
                    09:fc:a3:4b:aa:18:31:b6:a8:8a:e4:81:c3:91:c2:
                    75:b6:77:07:b4:f5:a2:06:23:08:7f:f2:1a:0e:90:
                    b4:36:18:4f:d0:7c:c7:44:80:5e:0b:f6:e5:aa:49:
                    ba:cb:70:c4:84:95:55:7e:c3:ae:d4:b7:0e:7d:58:
                    34:df:40:b0:fe:26:71:f8:c0:20:19:56:01:be:52:
                    3e:74:45:dd:ce:04:9f:f7:0d:96:f0:09:67:26:3f:
                    77:d0:7c:86:93:3e:91:dd:d7:84:90:e1:be:d8:83:
                    fe:97:f5:f6:f8:3d:a2:89:88:fd:e7:86:96:44:ff:
                    69:c6:a6:c5:d3:16:8b:8d:e0:6a:9b:ba:cd:1c:70:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:54:31:5B:9D:C5:D0:61:E2:87:4B:B1:E7:F2:FE:BE:41:21:3E
            X509v3 Authority Key Identifier:
                keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:46:05:e4:03:da:7b:2f:ff:d9:c3:42:f7:86:5b:58:63:
         d2:2c:c2:bb:0a:1a:84:62:94:fe:1b:ff:f3:34:c3:26:b1:2b:
         1a:25:1e:da:2c:37:2b:a8:29:6f:05:c6:5d:70:31:b3:80:4e:
         14:d0:6e:58:a5:9e:c9:c0:ac:7e:5c:e1:a3:b9:03:57:11:63:
         7d:2b:f5:d2:b7:7f:2d:1b:9d:17:6b:ea:f0:8c:0c:ea:b7:07:
         38:34:de:69:8b:03:eb:b6:8a:ac:7b:99:15:18:51:3f:b3:ca:
         1e:fa:ee:bc:8a:21:26:b2:66:81:bf:c8:a2:94:a9:4c:07:67:
         15:f6:8c:df:83:63:dd:9a:dc:15:84:fa:e3:55:11:05:be:10:
         b2:fd:e6:e4:70:f8:bf:91:b1:b1:55:e0:45:e7:b4:b3:ab:9b:
         ec:2d:6f:42:16:2c:5f:0a:3c:c3:d0:f7:50:8d:4c:3e:74:65:
         c6:3f:8b:ac:38:44:00:1c:44:e7:f0:b4:d5:b6:e0:6a:1a:a2:
         65:fd:09:97:e4:83:5d:85:bc:e2:7c:93:ae:13:b7:b7:93:d1:
         36:f4:4c:0e:01:dc:ee:04:07:20:f4:c8:b3:94:d4:85:ab:9b:
         24:2e:59:d0:db:bc:f6:40:ca:e5:a5:6e:46:aa:27:44:98:e7:
         91:63:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:20 2025 by rpki-client