Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File:                     UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier:          0Bz2jo37eNDuNR64t8Ms9IkbKTM2HRNQXyNie/pYEQU=
Subject key identifier:   EB:91:71:74:AD:93:05:87:F3:36:1F:8B:10:34:DD:C5:86:94:18:F6
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer:       /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial:       019683908D675A626F819FE75260C90DC3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number:          0DEB
Signing time:             Tue 29 Apr 2025 22:00:10 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:10 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:10 +0000
Files and hashes:         1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: chAdrapvmWX094CZ65195PpH5QtC2F/kFFSX2Sw43wU=)
                          2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:90:8d:67:5a:62:6f:81:9f:e7:52:60:c9:0d:c3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
        Validity
            Not Before: Apr 29 22:00:10 2025 GMT
            Not After : Apr 30 22:00:10 2025 GMT
        Subject: CN=eb917174ad930587f3361f8b1034ddc5869418f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:d6:d5:52:35:2f:27:54:2d:59:d6:1e:97:
                    0e:1c:1d:95:52:3b:bb:7e:02:46:f7:22:a2:04:18:
                    f0:5d:09:07:f5:66:8f:4f:52:78:0f:60:d5:b7:9d:
                    e6:af:14:02:bb:26:73:c9:6f:36:b7:55:15:41:eb:
                    1a:3e:b5:c9:0b:e0:2c:6d:8b:bf:d1:ad:51:42:56:
                    66:cb:3d:05:20:96:2c:ad:95:a6:9e:bd:be:a8:f2:
                    15:ca:a1:c9:1c:ad:11:26:48:53:d0:b2:e9:77:d3:
                    6d:65:b0:20:51:7f:d1:24:d8:3b:e7:3f:ec:e2:6c:
                    ad:dc:44:20:65:77:62:a0:00:c8:2f:0f:1c:2a:a3:
                    04:ee:98:7a:bf:02:84:f5:45:3e:a5:de:f7:ca:d4:
                    f7:0d:01:c1:88:69:1e:ab:ec:68:33:41:e3:fc:4f:
                    a0:42:43:a1:0f:82:ef:43:7e:92:58:1e:24:66:db:
                    ad:8b:10:89:7a:0d:05:94:58:c2:a4:94:d7:ef:87:
                    6b:74:8f:4f:9a:fa:c1:53:af:03:9d:8c:59:a4:85:
                    e6:7a:1b:6a:d3:a2:66:a1:65:60:5d:d4:5b:d8:1a:
                    32:41:3d:ac:20:2c:4d:96:6d:a5:93:24:a3:40:a8:
                    0e:e3:6b:cf:41:14:98:e0:7f:45:6f:5d:1d:8d:de:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:71:74:AD:93:05:87:F3:36:1F:8B:10:34:DD:C5:86:94:18:F6
            X509v3 Authority Key Identifier:
                keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:42:68:a9:51:7d:b9:d7:99:35:0a:73:dd:0d:91:49:d7:
         2d:c1:81:0b:3c:6e:ef:fb:88:ea:8e:dc:87:ff:79:57:4f:92:
         1a:83:b1:e1:d5:43:b3:73:f8:69:2f:ed:92:46:37:53:57:e2:
         04:9e:6e:ac:aa:0b:5c:78:3b:d7:c6:da:85:70:53:2e:a8:8b:
         d3:92:b2:a6:93:23:9d:bc:fc:86:17:2f:cb:5e:b2:71:16:da:
         fc:c7:84:7f:79:bb:53:fa:76:34:7b:05:a0:13:d2:35:b7:81:
         ca:04:ff:7e:74:d7:0c:4f:e5:7a:78:b1:49:2c:f3:ea:57:8f:
         5c:e7:fe:7c:fb:df:68:90:55:c5:92:9b:16:8e:aa:91:a6:c3:
         42:f1:3f:56:d9:02:42:c0:bd:f3:2b:04:b9:2c:c6:c0:b1:a4:
         de:4d:59:b9:67:48:be:8e:55:75:42:e3:32:ca:d6:8d:ad:34:
         67:8f:a6:57:65:c1:6a:7f:c2:a1:68:cb:fd:b5:42:45:39:af:
         31:0e:63:01:98:44:a9:91:8e:71:2e:a0:fd:e2:84:15:d4:a6:
         3a:53:ca:43:43:6a:c0:58:af:d9:a9:81:b3:bc:89:10:76:69:
         51:51:e3:9c:f5:6c:54:19:4a:74:3f:d1:71:5a:1c:91:54:19:
         33:cc:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:56:05 2025 by rpki-client