Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          Oc4A9kYHxheHTmYDOXABGtvNWVo/qT15cLyPwnqFutk=
Subject key identifier:   EB:5C:01:43:E9:7B:4E:A6:70:ED:DD:59:A4:50:92:25:72:28:51:41
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       019683FEF9011FA977701795C387A0B88552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 00:00:47 +0000
Manifest this update:     Wed 30 Apr 2025 00:00:47 +0000
Manifest next update:     Thu 01 May 2025 00:00:47 +0000
Files and hashes:         1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: 3KsbermdBvhjkBL1IJg/mZ13C4nVjO8DTWpHvafS4Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:fe:f9:01:1f:a9:77:70:17:95:c3:87:a0:b8:85:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Apr 30 00:00:47 2025 GMT
            Not After : May  1 00:00:47 2025 GMT
        Subject: CN=eb5c0143e97b4ea670eddd59a450922572285141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:e8:5e:e0:25:8c:d6:fe:48:2e:91:02:15:
                    55:a0:2b:52:1c:8d:99:f1:cf:c1:55:06:32:da:4c:
                    0f:20:b2:8e:04:69:8a:61:36:d2:bc:6d:59:a6:cf:
                    65:7b:ea:42:de:11:92:61:09:c3:97:52:4f:77:93:
                    a0:8f:5f:37:ec:65:a2:1e:7d:4c:09:78:f2:0c:2b:
                    82:49:b9:06:bd:92:7c:45:9f:13:48:d3:81:fe:98:
                    b1:c4:b1:c9:70:04:65:93:bc:8f:5a:7f:30:eb:9c:
                    93:65:3d:63:22:e8:56:c5:c4:03:d4:7f:c3:84:e9:
                    14:39:87:aa:49:57:e6:02:9a:02:aa:f1:f0:1e:82:
                    3c:3b:18:55:fa:ba:86:d8:16:73:d3:54:fd:ba:cd:
                    bf:dc:81:42:20:54:20:3b:ac:0b:a7:66:a5:0b:60:
                    da:9c:18:8e:2b:a9:83:46:65:fb:e9:04:13:b6:40:
                    d9:6c:5a:19:87:b7:b5:17:2b:1a:f6:e8:ea:e9:a5:
                    d3:ce:b4:95:9e:7b:86:c1:e5:1e:c9:9e:90:e6:1f:
                    b5:5f:5c:51:c5:61:97:0a:80:44:9a:db:7c:ea:72:
                    47:f7:b9:a6:34:2c:ff:af:10:63:3e:9e:33:01:02:
                    93:f8:a5:19:23:88:34:99:30:6d:26:fd:18:19:96:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:01:43:E9:7B:4E:A6:70:ED:DD:59:A4:50:92:25:72:28:51:41
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:c5:d5:93:3b:76:82:f0:88:e0:d4:46:e7:5e:24:52:ce:
         ac:45:3d:c4:91:0d:9e:ce:37:a6:a8:71:38:bc:a0:89:a6:16:
         73:37:60:e3:c3:cb:20:12:b0:48:6e:83:83:3e:29:08:85:d6:
         f8:ec:40:98:47:5e:af:6c:75:09:f0:d9:47:b4:8a:b8:ca:cf:
         78:b6:67:87:6f:63:0b:4c:9f:99:15:39:db:48:8c:8b:2d:0d:
         6c:8e:10:0d:dd:f7:ef:3b:96:34:0a:be:ca:12:d6:1e:08:c6:
         91:da:9c:d2:0a:e6:10:01:5a:36:b1:e2:3e:e7:64:b3:86:1f:
         5e:2f:13:6d:5f:31:42:3e:62:0f:98:8e:75:f3:68:3f:c8:e8:
         43:ba:c8:59:08:f2:03:68:d6:66:ed:08:fd:96:cf:7e:e4:d1:
         72:e5:62:48:a6:ed:1a:68:ed:07:cb:7e:6e:ab:51:64:84:1a:
         eb:7e:9d:4c:40:c8:86:8e:25:13:f3:a4:ca:46:05:d5:5c:0d:
         04:6b:98:cd:9d:a3:05:44:f6:a7:84:1f:73:9e:03:c6:1c:0b:
         02:84:a8:ec:44:c4:86:34:df:06:f7:55:e5:5e:90:ad:ef:7c:
         f1:87:cb:9d:6f:ad:09:94:53:5e:bd:14:64:45:31:91:b1:3e:
         f5:ad:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:24:58 2025 by rpki-client