Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File:                     UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier:          MxzVAwjqBO4Xstm1qw9LbUQ5F0MGRv6zFYoLvg3ecJs=
Subject key identifier:   E9:BE:CC:A8:E6:0F:AA:ED:B9:52:5B:A3:92:5F:17:F6:97:C5:31:EE
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       01976DABB696F499BF0C56201817BD849C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number:          13D5
Signing time:             Sat 14 Jun 2025 09:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:59 +0000
Files and hashes:         1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: iea6e7CNGHOvN2GEKYvdMWBEbSNIKh4iWM3okP2PCyU=)
                          2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:b6:96:f4:99:bf:0c:56:20:18:17:bd:84:9c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: Jun 14 09:00:59 2025 GMT
            Not After : Jun 15 09:00:59 2025 GMT
        Subject: CN=e9becca8e60faaedb9525ba3925f17f697c531ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:c3:a2:4a:0e:90:63:51:f5:a9:23:82:2f:
                    5e:20:34:f5:87:e8:1c:14:f9:59:d4:3d:f1:06:e3:
                    e9:5e:c5:f7:0b:1c:68:fd:a1:54:53:f0:f8:76:4f:
                    2d:d4:8c:88:8f:a6:6f:39:32:68:cf:40:e4:00:a4:
                    b3:00:a8:6f:20:e0:4e:82:c2:18:73:88:ba:38:3e:
                    72:ba:f9:12:81:aa:7a:52:8b:16:3b:e5:07:8d:1b:
                    f4:15:6a:22:b2:b7:69:69:8c:47:9c:da:e5:a2:0d:
                    92:22:37:0e:74:98:6a:4a:90:00:7d:7a:d9:5c:8d:
                    d7:8a:b6:32:c7:f6:1b:55:03:8e:b4:fc:f8:0d:aa:
                    24:56:c5:04:b2:a5:53:ff:a3:c7:b1:ec:a3:c1:e3:
                    f0:87:f7:23:dd:38:af:02:01:4e:bb:21:75:9a:34:
                    8b:f7:a5:ac:d6:9b:2a:5b:a4:d4:fb:25:70:a3:7a:
                    89:e3:2e:ff:79:05:4b:32:a2:6a:10:e9:fc:c0:57:
                    4f:df:fb:10:72:55:82:40:9c:bc:09:ee:b1:b3:01:
                    58:72:f9:a7:8d:25:14:c4:3b:bb:f1:96:ef:63:68:
                    ed:df:6a:2b:4c:b3:84:cf:b8:b7:43:b4:6b:61:e8:
                    e8:c1:5e:7e:68:71:a9:9e:e8:4c:6f:9b:54:d3:43:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:CC:A8:E6:0F:AA:ED:B9:52:5B:A3:92:5F:17:F6:97:C5:31:EE
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:76:31:0f:5a:ed:41:36:62:29:a4:f9:2f:d1:6f:c8:23:10:
         52:22:4b:cc:3d:ed:38:85:8d:5c:db:b0:78:99:08:05:71:1f:
         eb:04:f9:15:4a:c9:da:b8:42:c8:ed:07:08:9a:16:e9:d3:7c:
         c5:54:48:61:3e:94:7b:5a:11:14:5c:e2:fd:96:f2:84:4d:7e:
         42:25:01:19:35:4d:e9:33:2e:09:2e:df:07:da:20:6c:3a:72:
         f3:89:08:45:39:eb:e8:18:cf:ac:92:86:67:58:82:f9:e1:2d:
         56:eb:8b:81:e2:53:1e:b3:56:77:a1:95:cd:0f:54:75:ef:b5:
         cc:14:aa:af:69:a9:83:d4:34:b7:f7:01:aa:ce:0e:02:0f:b2:
         e4:cd:1c:88:ad:be:eb:c3:75:b9:18:c4:51:b5:a6:c0:ba:cc:
         47:be:db:9d:96:fe:6c:07:11:cf:00:cb:f4:2f:02:80:64:58:
         63:ff:f5:77:36:93:c4:cb:dd:5f:cd:01:e1:05:d4:8e:81:bd:
         d4:e7:0a:8e:4f:fb:1e:09:b5:36:e4:01:39:ac:58:c8:55:63:
         15:ed:06:2f:a8:03:cb:cf:2c:ba:35:49:b0:6f:32:47:d3:57:
         38:44:c4:08:e7:49:89:1b:60:86:1c:b3:09:f4:d0:c7:07:46:
         b0:ec:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:09:16 2025 by rpki-client