Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File:                     uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier:          qEND6ALvtqLiObnWT/G/3XevWWMzrDV9MCF+h69qZgY=
Subject key identifier:   60:9E:44:17:D6:B7:5C:E1:83:02:FC:5E:2C:58:62:A6:88:8F:5C:BA
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer:       /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial:       019698615C707C20692756976D35A4E70DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number:          024B
Signing time:             Sat 03 May 2025 23:00:39 +0000
Manifest this update:     Sat 03 May 2025 23:00:39 +0000
Manifest next update:     Sun 04 May 2025 23:00:39 +0000
Files and hashes:         1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
                          2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
                          3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
                          4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
                          5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: kPh9Ek6cnuqoE4IMGaYOEJ2NZUD9AyO9fVcKqBp8rnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:61:5c:70:7c:20:69:27:56:97:6d:35:a4:e7:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
        Validity
            Not Before: May  3 23:00:39 2025 GMT
            Not After : May  4 23:00:39 2025 GMT
        Subject: CN=609e4417d6b75ce18302fc5e2c5862a6888f5cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:4d:fe:76:9a:5f:0c:cb:5f:4f:99:8d:ab:
                    a6:e0:11:58:75:5e:53:c4:26:cd:41:16:4c:a2:97:
                    35:1d:b8:75:7f:5e:bf:0e:6f:d9:01:42:c0:ab:0b:
                    f0:59:09:3c:44:f0:79:51:63:44:4e:55:2c:34:b3:
                    94:1c:01:dc:e4:98:1f:b4:0f:c9:bb:27:8c:e1:15:
                    a2:73:4a:a2:9e:b3:0b:96:3c:d1:b9:75:a5:d1:b9:
                    49:bc:46:7e:0a:db:9a:f1:bc:bc:5c:fa:34:a9:a7:
                    10:73:ed:a8:55:cb:16:b6:07:89:af:35:89:da:cb:
                    53:70:57:47:55:89:2c:48:39:e5:d9:3b:29:cf:ce:
                    55:b5:c8:c4:c6:fd:b7:a1:0f:28:51:f5:7b:c7:ef:
                    ce:00:73:4a:98:5e:75:fe:07:13:27:5a:db:fc:1e:
                    84:14:31:a7:ee:f4:6c:13:97:39:24:e9:22:9f:5f:
                    bc:50:e0:d5:a8:26:52:af:16:75:1b:ec:36:03:ad:
                    94:91:4e:6e:5e:c2:78:56:f4:cf:b1:54:98:48:af:
                    ae:45:30:77:29:05:95:27:bf:96:c3:27:93:5c:a3:
                    cd:1c:36:0f:6f:4a:4f:86:c8:71:ca:93:a9:f4:4e:
                    6e:ba:1f:c9:7d:34:a8:f6:47:b1:74:9f:83:3c:16:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9E:44:17:D6:B7:5C:E1:83:02:FC:5E:2C:58:62:A6:88:8F:5C:BA
            X509v3 Authority Key Identifier:
                keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:68:9a:21:23:d9:47:13:4e:26:62:90:1e:0d:42:2a:6b:46:
         b2:bc:d1:2a:16:a9:b3:85:3b:72:bc:45:3c:6b:08:de:af:55:
         cd:09:0d:42:41:e2:d3:d1:dc:7e:52:52:8e:1f:1f:62:5b:34:
         1f:ed:0f:52:fb:42:0e:67:e9:84:56:d4:e5:97:33:9b:48:a9:
         c0:25:20:90:03:d0:06:b2:7b:fd:d2:22:52:32:93:f9:e4:44:
         ee:e4:69:e5:3b:60:ed:e2:30:1f:b6:a1:da:44:01:e6:2a:77:
         52:83:63:ca:2c:af:18:a6:de:48:a6:0e:4a:86:25:0e:3c:48:
         c6:b5:65:52:02:57:20:01:23:92:78:30:9a:03:22:c6:aa:74:
         21:9b:a6:6a:8f:94:38:f3:41:35:93:08:25:4e:89:ce:bc:d6:
         c8:d0:c3:71:1c:a9:9f:f7:9c:b4:90:93:66:d8:5f:a9:4e:fd:
         60:75:c6:26:8c:1c:00:dc:88:3f:9c:3e:59:47:ec:f4:1c:ae:
         8c:18:8d:33:d6:7c:85:38:bd:ec:0d:2a:be:f2:41:ab:50:9a:
         0c:0c:35:74:bc:1b:62:06:f5:42:1a:ff:70:ca:e9:77:f5:ca:
         25:8f:ec:61:20:79:34:82:76:a2:1e:cf:ef:7d:0f:de:5d:9e:
         90:cd:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:54:54 2025 by rpki-client