Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File:                     UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier:          s6HPYQiH0R/Sw/H7gAv0zXOSOTts69h0RfFoilzL4OQ=
Subject key identifier:   16:1A:42:FA:64:4B:73:48:5C:15:56:93:94:D6:A6:55:20:9A:26:5B
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer:       /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial:       01976BF40BA77BAF77E6918F4F883A1C7D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number:          10A9
Signing time:             Sat 14 Jun 2025 01:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:45 +0000
Files and hashes:         1: 4nwbGR9filruN4uTSLu-SAojUdQ.roa (hash: HwkXIEcexdoJKCLIxKh83QjsjcLInJ+XtPhMd0njyqw=)
                          2: BVlS5feNmWdOLJ165musLYEx5nE.roa (hash: SM/6EqVv5ryznml3uYjoiN2rUtzuVv9yrFvvgUs/n50=)
                          3: C9FeLXHlmSb6adQSBmHRmx1p1GQ.roa (hash: wsQwdaHpob1xHgKH8CTJtFsTYcrf5LAWX2Z18JuGPe4=)
                          4: EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa (hash: uAsvwaMtcMOr9i0+t37QKzdz9ftJWtmHdf0VDRcsGJI=)
                          5: PAbHc64weo8hVFOoyNw_KIYZGbQ.roa (hash: QrXbLReiK7UXgLaMSU+fS4kFmpcrsFUElNX3domZ2dw=)
                          6: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: //CFzeQCYuu8PqR7WhZUF2j0t7FscbZ/QhzD0r4KOVY=)
                          7: oMYlwSnWK6uPik-ogylklgWprko.roa (hash: bn3z21YSv1E9rQu+WAdfxy0yPZJ+K8++ghPX8u1VPlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:0b:a7:7b:af:77:e6:91:8f:4f:88:3a:1c:7d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
        Validity
            Not Before: Jun 14 01:00:45 2025 GMT
            Not After : Jun 15 01:00:45 2025 GMT
        Subject: CN=161a42fa644b73485c15569394d6a655209a265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:3c:52:c4:48:38:98:b2:cb:8b:37:01:86:
                    78:b3:62:06:f7:2a:6c:af:5a:73:fd:f8:28:28:f3:
                    5c:43:e4:62:50:61:3c:ba:c6:6f:77:91:ae:f8:57:
                    a5:c3:96:ed:a8:1a:fc:2e:b4:9d:63:2e:69:be:a5:
                    bb:0c:c4:32:2f:68:66:ab:6d:95:07:a6:c6:be:55:
                    33:3a:83:39:25:96:9a:d4:a3:fe:8a:fc:91:99:f9:
                    39:5a:4a:d9:4d:4e:fa:99:0d:31:bd:2e:23:ca:21:
                    54:84:ae:98:b4:5a:4f:ea:99:b1:f7:03:f6:c0:0c:
                    65:07:1e:ed:4b:15:c6:49:d5:01:57:67:e0:56:c4:
                    49:e2:32:dc:b7:73:79:37:b5:60:0d:5d:76:b3:c3:
                    49:60:93:78:de:ea:e9:76:f4:fa:c9:92:ad:14:2b:
                    74:ab:f5:1b:17:56:50:3a:d8:a3:b6:e6:ae:2c:57:
                    4d:c9:1e:93:9a:82:f7:13:6a:05:57:78:df:f3:ff:
                    0b:89:d8:f3:20:64:a2:60:d4:49:d4:22:e1:99:4e:
                    fa:7c:b9:63:a4:b3:69:ae:bf:60:d5:ef:c7:00:e3:
                    3c:76:d5:25:75:82:8d:72:77:88:08:3c:b2:f8:30:
                    db:99:48:f9:0e:c3:ee:69:d6:8b:4c:66:93:0a:c0:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:42:FA:64:4B:73:48:5C:15:56:93:94:D6:A6:55:20:9A:26:5B
            X509v3 Authority Key Identifier:
                keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:ab:45:69:22:a3:91:63:2c:a9:9b:f2:d6:74:53:92:99:
         37:88:1f:04:f0:ab:77:57:db:0c:4f:1e:f2:95:ec:15:9c:6e:
         05:1d:85:5b:91:e3:51:d3:49:4a:ad:74:0b:6b:26:e4:5c:64:
         3f:22:56:1f:94:13:b5:a0:86:7b:10:39:31:d3:39:aa:34:e6:
         02:a3:7a:a3:f1:d9:99:eb:5f:a8:0a:1e:3e:92:69:8d:eb:15:
         a6:10:a8:f2:68:17:34:c9:ab:29:d0:9e:79:c5:a9:92:81:09:
         cb:a3:9e:46:9e:4d:5f:d0:29:46:4a:9a:6c:ec:ec:39:9d:ab:
         95:3a:21:03:f8:ff:f6:67:81:d6:0b:19:b7:02:ae:68:4f:ba:
         ef:6d:65:f2:54:9b:c2:78:04:b0:87:c6:cc:21:bd:cd:f9:94:
         92:3c:17:32:1d:ab:57:d3:16:27:f6:0c:37:be:76:40:6c:9c:
         a3:7c:3a:bc:ca:93:b8:bc:04:a4:38:86:7e:79:6c:0d:f2:32:
         15:48:6e:12:a2:38:21:62:a5:8f:32:71:8d:37:d3:22:04:c3:
         ff:b8:95:27:8c:7e:4e:d6:92:cb:8c:fe:66:31:c2:3f:26:bf:
         d8:53:9c:f2:4b:0b:e0:68:ca:67:99:71:ad:9c:ac:49:83:1c:
         f3:87:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:46 2025 by rpki-client