Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
File:                     UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json)
Hash identifier:          PGSgTuRPU7ajRsj4dNJwzxMZTbDy1XbbhX14of/1sDo=
Subject key identifier:   E0:91:6A:36:3D:90:52:69:6D:1A:B0:FE:EC:1D:27:50:90:A8:AD:6E
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019685EDE4A396C919C6924B8A70E5816119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
Manifest number:          1514
Signing time:             Wed 30 Apr 2025 09:01:22 +0000
Manifest this update:     Wed 30 Apr 2025 09:01:22 +0000
Manifest next update:     Thu 01 May 2025 09:01:22 +0000
Files and hashes:         1: 2wmtliVBxfozFrIlKB1-nwfdjAE.roa (hash: +lKNzr0mRWdZKlHpN+HQ/mkjY4gghuaP04gNQkK1wf4=)
                          2: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: ph6TrlZrzHhWzC9wFp9szV9gdv7JfX/Ms78Px1usacY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:ed:e4:a3:96:c9:19:c6:92:4b:8a:70:e5:81:61:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Apr 30 09:01:22 2025 GMT
            Not After : May  1 09:01:22 2025 GMT
        Subject: CN=e0916a363d9052696d1ab0feec1d275090a8ad6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:c1:f0:09:4d:5a:f0:0b:d4:ee:9d:af:65:
                    e7:b5:57:c4:4d:bd:ab:e0:ed:2d:07:5f:7e:df:e1:
                    35:01:8c:52:e4:82:db:21:95:ee:b2:8f:85:50:44:
                    77:4c:e8:e0:01:73:88:b1:de:82:ca:e6:e6:5d:ed:
                    3a:a5:06:49:37:c2:5d:41:c9:b5:1e:73:d6:2c:89:
                    8f:9c:bc:cd:53:a0:0e:2e:b7:ec:ba:cf:20:53:de:
                    f8:90:c7:c4:4f:3f:be:fa:00:b6:ab:2d:eb:1a:d3:
                    57:4e:93:4a:39:29:25:c9:4a:6c:cf:c9:f5:79:5f:
                    b7:26:26:66:09:12:e8:1f:bc:53:0f:f6:ab:d9:15:
                    a5:05:de:f8:8e:c0:36:8b:ae:03:aa:34:a5:81:fe:
                    c3:e8:c8:14:1e:0a:02:af:5f:f8:b1:ca:7f:29:59:
                    7a:2c:74:53:a5:c0:39:d9:d4:a3:e1:73:6d:f5:cd:
                    a2:bf:ed:14:a8:b1:be:48:7c:6a:3a:2f:bb:4c:91:
                    9a:67:5e:36:07:d6:e3:b2:15:c2:98:25:27:8c:40:
                    31:70:72:d0:9d:ca:0e:c5:2b:56:ab:f4:19:37:e3:
                    92:c9:04:ea:a7:2d:2c:cf:21:66:bb:b3:f8:d5:a6:
                    77:79:97:46:f6:a3:f6:71:aa:1b:a0:73:bb:67:81:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:6A:36:3D:90:52:69:6D:1A:B0:FE:EC:1D:27:50:90:A8:AD:6E
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:57:81:e6:27:96:e8:58:88:f6:22:e7:6f:b7:f6:25:55:
         b8:52:05:bc:28:fa:e5:93:8a:57:3b:22:a4:fc:9d:c8:a4:f7:
         ff:4a:46:8d:bb:9c:16:70:10:5b:de:ff:dd:23:0c:ac:36:39:
         6d:6d:55:06:fd:bf:02:e3:47:92:4a:72:0d:dc:5f:bb:0f:5b:
         2f:85:f1:10:b1:90:28:b8:09:94:af:d9:13:b0:be:03:20:e8:
         d3:fa:50:fe:8c:bb:91:ac:ca:c8:9d:bb:f8:c9:7c:55:71:31:
         f1:12:3c:a8:9c:a0:5e:a9:69:b9:d1:aa:2c:fe:5b:9f:f1:7c:
         fe:74:f9:d4:8d:64:23:90:e1:bf:09:1d:7b:52:16:8f:42:0a:
         3d:12:08:40:5d:0c:78:de:90:39:c7:90:0f:f3:f6:96:3a:10:
         95:96:1c:10:fb:51:25:b0:35:15:bc:04:75:eb:2f:45:5b:4a:
         bf:aa:d1:e6:4e:54:62:50:9f:8d:2d:5d:4c:e5:b9:ed:af:71:
         a1:ec:74:bf:40:be:23:cf:56:3f:43:ec:34:8f:ad:da:cd:0d:
         3c:0c:2f:7d:49:5f:5b:cf:de:04:47:df:5d:60:ed:6e:8e:b1:
         a1:cb:db:6c:85:1c:a5:fb:0e:2b:01:c2:7b:b0:3a:09:ac:2d:
         c6:ee:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:16:40 2025 by rpki-client