Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File:                     U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier:          LJxpGX+hwKy6BNgJg7eMdG3+G5xyx7Sd85qoRQ4OLsY=
Subject key identifier:   41:EE:E3:42:E0:1E:C7:99:31:8C:39:59:6E:15:E4:8B:18:80:84:44
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer:       /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial:       01977308B409567E6745FE8C7E9473BD94E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number:          EA
Signing time:             Sun 15 Jun 2025 10:00:39 +0000
Manifest this update:     Sun 15 Jun 2025 10:00:39 +0000
Manifest next update:     Mon 16 Jun 2025 10:00:39 +0000
Files and hashes:         1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: /tarlURYekXKflrHbQzl90yUC3TjkOXcuHZjZgSZKt4=)
                          2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:08:b4:09:56:7e:67:45:fe:8c:7e:94:73:bd:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
        Validity
            Not Before: Jun 15 10:00:39 2025 GMT
            Not After : Jun 16 10:00:39 2025 GMT
        Subject: CN=41eee342e01ec799318c39596e15e48b18808444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:53:83:9c:52:b2:54:97:7c:0c:2e:05:0d:
                    f3:22:68:df:84:79:1a:15:70:ad:af:e4:20:dd:c5:
                    68:d1:78:02:c1:c7:ce:60:26:ac:0e:39:1c:93:c2:
                    85:32:8b:bf:49:dc:ba:f8:93:37:8e:f0:ce:82:53:
                    a6:95:0f:8e:74:ea:98:f3:6d:dc:f5:3a:0f:7f:67:
                    04:7a:3a:83:50:a8:b7:d9:08:ec:b7:67:ed:8d:15:
                    c8:a8:b2:11:34:06:92:7d:5b:73:c6:01:bb:f8:f3:
                    38:ba:69:62:3c:a2:2c:af:62:9e:6e:3d:56:00:54:
                    d2:0b:b0:2d:5a:7b:f0:95:f5:b0:2c:9b:9f:4d:32:
                    46:a3:3e:72:d7:11:c1:46:17:3c:db:ea:c5:26:d0:
                    69:10:83:54:51:66:6d:ab:c7:71:42:61:45:d5:34:
                    17:e4:63:c3:70:5f:f1:ac:9b:e6:e8:fd:a3:07:5f:
                    42:79:81:47:0e:41:99:b3:90:c5:d0:7e:35:f3:4c:
                    32:b8:7d:52:f8:b6:22:de:85:f4:a1:65:e5:1a:65:
                    db:dc:37:8b:b4:41:1a:de:58:97:a8:b4:73:ba:ab:
                    30:aa:0f:27:bc:8a:98:2d:d2:15:71:19:67:9e:1f:
                    30:ee:a5:f9:01:78:b6:93:fc:37:54:51:e3:1a:93:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:E3:42:E0:1E:C7:99:31:8C:39:59:6E:15:E4:8B:18:80:84:44
            X509v3 Authority Key Identifier:
                keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:02:b3:b8:ab:09:3b:d9:ac:fb:cd:96:e9:6e:5e:f5:bb:
         b0:81:8c:ba:67:dc:c4:75:f2:c6:f8:5b:26:3c:25:d6:59:13:
         1b:ac:23:14:ba:90:59:33:5f:53:9a:20:df:bb:e4:46:c3:42:
         90:6b:c9:5b:02:11:7d:a5:cb:dc:e5:6e:15:69:84:97:e9:f3:
         c4:b8:7f:ca:66:71:1b:07:ef:6c:22:fa:a8:5d:2e:fb:f1:61:
         46:02:65:11:9e:62:4f:9b:c7:7a:6b:76:86:8a:6c:56:39:d5:
         ea:a4:a4:88:88:b8:1e:40:22:78:53:b3:30:80:45:50:5c:14:
         a3:a0:2d:45:79:fb:5d:1d:95:3f:83:87:8e:e1:88:f1:4c:e0:
         56:2d:79:ac:b1:28:a0:80:af:b9:b4:bf:ad:5f:b5:72:51:37:
         f4:cb:3f:e7:ae:93:96:2e:f6:4f:45:f4:14:a2:00:c8:4c:84:
         34:58:34:7e:24:b8:c4:5a:ab:09:ea:1d:b2:1f:0d:ca:e8:94:
         bf:61:3a:38:32:39:de:07:a0:bc:c6:de:07:27:ea:99:95:a9:
         00:56:28:85:2b:05:e9:6e:c4:a3:04:57:7c:c5:b9:4d:9e:27:
         dc:2b:f5:72:54:96:5f:c3:64:07:21:70:44:ae:14:ca:18:73:
         0d:48:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:22:35 2025 by rpki-client