Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File:                     UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier:          11Y07CK8C69h6wiz1e4hgnwnE78SSw/TvTm3XrCfGMI=
Subject key identifier:   AD:A3:6A:6E:07:E6:A2:F1:6C:DE:0D:E6:93:4E:97:7E:02:73:14:A5
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer:       /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial:       019769CE8DC77D1C64013660F2B9695A575C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number:          071B
Signing time:             Fri 13 Jun 2025 15:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:33 +0000
Files and hashes:         1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
                          2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: /jNcPj7prhbFeM4c3QTF9sg0wzQS0+2BXe3OK089QgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:8d:c7:7d:1c:64:01:36:60:f2:b9:69:5a:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
        Validity
            Not Before: Jun 13 15:00:33 2025 GMT
            Not After : Jun 14 15:00:33 2025 GMT
        Subject: CN=ada36a6e07e6a2f16cde0de6934e977e027314a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:50:8a:92:fc:b2:78:85:b7:24:46:42:cb:
                    e1:bb:46:dd:36:f5:e4:e0:b3:9b:6c:6f:a6:47:5b:
                    24:bd:06:61:d4:50:5c:4c:90:4f:34:05:88:fe:a3:
                    02:ee:3b:cf:67:47:a3:5d:62:d1:53:11:d7:5f:04:
                    2e:eb:99:00:6f:c0:2b:ec:05:f7:49:73:c3:54:5f:
                    98:a6:bb:4e:14:a3:91:60:7e:75:c2:d3:38:af:73:
                    7a:89:1f:10:ca:06:57:a8:aa:f2:4f:99:f1:f6:4c:
                    e6:58:7d:22:0d:40:e5:20:42:55:d5:a3:a6:dd:48:
                    1b:36:5c:8b:42:f8:2f:38:82:c6:01:52:a9:d0:d3:
                    96:97:2e:a7:c3:0c:c5:2f:6f:82:c4:31:d3:64:76:
                    54:d0:e7:9d:22:2e:97:43:fb:41:57:0a:53:c8:bb:
                    e9:65:30:46:ad:a7:5c:c4:52:d3:6f:9b:ca:32:51:
                    56:f7:b2:11:13:2a:f2:c7:a4:74:0d:e3:17:a9:b1:
                    7c:a1:79:93:24:38:b2:7d:9d:4f:6a:98:87:2e:42:
                    f1:93:82:a9:d6:76:61:b4:61:a8:66:a6:a8:0d:aa:
                    c4:30:12:31:3d:64:18:63:b9:e1:6d:4f:ec:30:ad:
                    cb:ca:60:a3:c6:ce:d7:29:38:81:88:09:ca:7d:57:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A3:6A:6E:07:E6:A2:F1:6C:DE:0D:E6:93:4E:97:7E:02:73:14:A5
            X509v3 Authority Key Identifier:
                keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:95:39:fb:3f:b6:0d:c8:bb:3b:de:53:18:d5:f5:47:d4:
         56:17:5e:fd:df:b4:f5:e2:4c:90:fb:d1:17:36:62:ca:82:ea:
         ee:fc:7b:a8:d1:19:60:cc:43:ad:92:59:47:ad:c5:c9:10:02:
         b3:0e:03:5a:7c:68:b6:98:fe:65:77:38:36:e4:93:0f:30:18:
         35:9f:3e:33:ec:44:48:9b:d8:d0:33:5c:77:71:36:34:0e:f0:
         3d:bd:24:27:29:8f:f0:69:9e:d5:36:94:ae:18:ec:aa:0b:62:
         39:2f:a8:7a:4a:27:56:bb:aa:8d:33:61:11:97:8c:2e:45:44:
         62:5b:d7:ab:1a:ef:8a:a9:be:f9:bd:e9:76:f2:22:a5:3b:d4:
         c4:f1:e5:72:35:e0:bd:11:39:1c:b4:cc:78:20:9c:5f:9e:4a:
         b3:ec:62:44:83:8d:8e:a8:78:37:bc:5e:85:67:cf:0e:00:30:
         cc:36:64:6c:07:4a:bc:7a:3d:c4:89:9e:8a:d8:ea:40:17:d1:
         6b:7c:2a:c1:34:9e:f5:f6:90:d2:0c:35:09:b5:d5:d2:54:cc:
         3a:66:a8:b5:69:e4:3e:a3:2c:8c:ad:7f:5d:c4:44:f0:51:15:
         ca:e0:8d:f0:97:ca:35:44:a8:d8:7a:7b:4e:d5:1d:0e:c4:25:
         87:47:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:56 2025 by rpki-client