Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          G6ZoAl0fWoIco9rYu0TyT2szzZC48gIqqei3u0J+bAc=
Subject key identifier:   98:4E:07:81:35:F3:65:A3:E9:AD:2F:D8:FD:98:26:8C:80:17:35:B0
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       0197711B25519A5E98B07E7D84F8342A796B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0EBC
Signing time:             Sun 15 Jun 2025 01:01:33 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:33 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:33 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: uWOmNpeSMv9G9mvGLa8/0MhcXL6SXbbbu77a4b2OUps=)
                          2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:25:51:9a:5e:98:b0:7e:7d:84:f8:34:2a:79:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jun 15 01:01:33 2025 GMT
            Not After : Jun 16 01:01:33 2025 GMT
        Subject: CN=984e078135f365a3e9ad2fd8fd98268c801735b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:b7:c4:ff:b9:bc:28:24:cc:57:c5:c7:47:
                    7b:fd:a2:51:54:6d:b0:28:f2:80:7e:19:9e:3a:60:
                    84:51:bf:a6:92:57:76:ae:8f:aa:94:69:b4:38:72:
                    35:75:db:d1:71:3f:03:24:bf:a1:a9:29:2a:3e:80:
                    e6:3d:42:e8:c8:aa:81:e9:1f:e2:c2:89:bf:91:4d:
                    8e:f8:61:e3:bc:22:db:69:77:23:3c:70:4a:e8:f5:
                    21:fe:ad:20:71:7d:b7:1a:3d:78:a3:19:dc:c5:62:
                    c7:49:2a:d5:aa:9c:3c:e4:f3:a1:1e:0b:da:f8:cf:
                    27:23:9b:ef:2d:ff:35:20:81:1f:56:93:4e:91:59:
                    2f:28:03:d6:63:0a:d4:cc:f0:a8:da:ec:d7:6a:d2:
                    24:28:19:01:44:c2:c7:d6:2c:85:5a:ef:20:5b:22:
                    68:39:55:68:82:60:ff:c6:ed:9e:6c:c4:b8:58:64:
                    8f:7e:0c:05:a8:8c:12:9c:57:60:c9:f4:cd:ec:af:
                    1a:5e:38:5f:40:4c:5e:d5:17:34:b7:12:31:21:4d:
                    29:61:54:3a:86:9b:74:96:f7:96:e9:19:d6:06:8d:
                    f3:db:65:fb:4b:16:ef:ee:9e:25:d3:36:20:69:87:
                    41:4f:55:97:d4:da:58:9e:a9:91:62:9c:95:fc:a9:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:07:81:35:F3:65:A3:E9:AD:2F:D8:FD:98:26:8C:80:17:35:B0
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:7b:4a:75:a4:21:23:cb:59:e1:ee:af:ce:20:77:cc:5b:
         7a:c9:f1:5e:91:71:23:81:aa:11:a0:75:72:a9:25:8e:9a:04:
         3c:89:32:43:85:ff:f2:ba:93:ba:db:1c:19:7b:45:7a:c7:9d:
         81:8e:77:22:2c:e2:14:37:8a:77:7c:49:15:5b:fe:ad:df:8e:
         d0:fc:56:3b:a5:3d:e4:ff:62:fd:96:d7:d9:51:3a:1c:d0:1c:
         73:56:7c:8e:ce:c8:35:70:4b:6f:93:28:66:35:7f:77:d6:35:
         0c:1c:f0:77:10:4e:5a:8f:58:86:af:46:fe:cb:dc:0a:64:3e:
         6f:9e:8d:aa:88:22:c6:85:93:7e:80:6d:32:75:b8:5f:5e:37:
         7d:24:c3:10:fe:7e:07:66:18:95:84:e5:e6:e5:dd:8f:02:a3:
         53:1d:d2:e0:90:1a:6c:97:ed:04:68:58:8c:62:a0:a3:95:0b:
         33:ef:23:fd:01:bb:f0:2f:1a:da:6d:ef:1b:62:72:1a:46:0c:
         0a:bf:9d:c4:c3:f6:83:f9:f8:ed:e4:59:89:bc:26:7c:2f:6b:
         08:38:f3:3c:36:2f:59:ab:9f:d5:e2:02:26:f9:df:99:45:50:
         87:af:59:2f:70:0f:44:e2:24:ee:22:00:00:c6:59:52:c1:f3:
         96:06:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:09:25 2025 by rpki-client