Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File:                     txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier:          aY7NP550CwgFKJIfxXmERfRNV+d0alfZmdbBFKegc28=
Subject key identifier:   54:4B:20:87:42:0D:59:11:81:42:1D:40:C6:1F:35:9E:C1:94:18:39
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer:       /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial:       0196A54159B5EF5176868F87FC8E8F06777C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number:          10E9
Signing time:             Tue 06 May 2025 11:00:45 +0000
Manifest this update:     Tue 06 May 2025 11:00:45 +0000
Manifest next update:     Wed 07 May 2025 11:00:45 +0000
Files and hashes:         1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
                          2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: qhVpE9dQ5wBMn6DYZeNii/jtbIShSOj/Ud49Qnu3xkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:59:b5:ef:51:76:86:8f:87:fc:8e:8f:06:77:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
        Validity
            Not Before: May  6 11:00:45 2025 GMT
            Not After : May  7 11:00:45 2025 GMT
        Subject: CN=544b2087420d591181421d40c61f359ec1941839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:e6:13:26:17:a8:ea:bc:c0:e8:45:c6:c3:
                    a6:a4:72:05:66:8f:23:a9:5d:32:8a:25:52:f7:d8:
                    4c:21:2b:f7:17:4b:05:cc:eb:85:2a:c1:af:6f:1c:
                    e5:13:db:68:96:cc:1d:e3:d3:83:2c:92:81:56:12:
                    37:8f:cf:d9:d0:70:c7:31:22:52:4d:4f:f6:0a:a6:
                    c1:c6:d4:4f:67:9f:c6:d2:32:29:1a:c1:90:21:ba:
                    1c:bb:d3:4a:d3:fc:38:94:3b:c7:63:47:ca:e5:2e:
                    08:a6:06:c5:8c:82:5c:02:2a:3b:62:ff:48:08:58:
                    ef:90:fc:5e:37:8d:19:c6:37:2c:d1:e3:1c:7a:c8:
                    9d:fd:83:b6:eb:72:87:b0:30:39:af:f5:5e:45:fd:
                    92:72:b7:fa:00:63:48:72:1e:8c:96:71:72:80:59:
                    b3:15:16:db:3f:03:84:4b:4b:63:26:3d:a9:92:20:
                    26:e8:ad:c9:2b:07:6d:61:39:8d:54:87:fc:75:48:
                    8d:f0:97:f7:8d:20:89:4f:3d:3f:f1:18:b8:3a:31:
                    9c:66:2c:c2:46:5f:bd:1e:ba:5d:6a:97:b4:9c:f9:
                    c9:e4:21:b3:02:4b:95:24:05:b6:24:60:b7:92:33:
                    e1:11:28:cd:a2:21:46:ce:fc:ea:ed:d8:62:01:1f:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:20:87:42:0D:59:11:81:42:1D:40:C6:1F:35:9E:C1:94:18:39
            X509v3 Authority Key Identifier:
                keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:b5:44:3f:c0:67:f0:9d:64:ed:6d:2c:0f:55:63:03:f2:
         d6:74:7c:ad:c6:05:12:95:4e:07:be:8b:60:c4:22:55:38:0c:
         5b:19:45:4d:05:58:7c:5c:05:71:7a:ef:67:7c:1e:d6:6b:9f:
         48:0e:98:8b:15:51:78:aa:57:2b:ad:f6:6d:6c:75:b9:06:71:
         11:5b:d2:29:8c:6b:0b:0f:12:47:d0:56:2d:cd:cc:af:57:37:
         0b:c3:1b:b1:26:b8:bd:d9:c9:ad:7b:3b:72:56:6c:02:e5:da:
         db:1a:10:29:59:35:42:1f:d4:d3:19:6e:ab:b8:9e:b8:1d:9e:
         9f:d2:37:ae:58:af:fa:15:8f:a1:e0:d7:16:a7:7c:27:5e:54:
         b4:21:b6:33:f9:18:12:07:7d:57:71:ab:ef:76:02:53:2f:04:
         c9:e0:df:d0:ac:61:00:ce:4d:f2:64:21:7b:6e:8c:29:a0:31:
         97:73:e9:d5:d8:66:b9:97:fe:d7:b6:01:d3:50:71:46:f1:34:
         a6:25:c4:5e:0d:6e:04:a0:95:77:f5:e1:d1:fc:eb:cd:53:80:
         53:3d:c8:d4:59:22:e7:4e:54:42:ca:00:8b:44:b3:f6:57:29:
         65:45:52:47:1f:71:cf:9e:9e:71:63:b4:77:9d:1c:93:ec:40:
         01:9a:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:10:48 2025 by rpki-client