Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
File:                     uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json)
Hash identifier:          L74SSDFagN9yoX6brRZOBJ4GC87jmZZp6AJnKEoD4hI=
Subject key identifier:   C8:C8:1F:AA:D2:3D:2F:DA:FC:0E:2D:EA:AF:7A:37:43:93:BF:5F:23
Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
Certificate issuer:       /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Certificate serial:       01976D0667B775825DC9067EB62FDA874275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
Manifest number:          54
Signing time:             Sat 14 Jun 2025 06:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:25 +0000
Files and hashes:         1: 3y2tjY2wv2hPWo8Jjs9g1G9k2XU.roa (hash: qyjRMAEUAmhHrAhDYNjvXf2jg8IqGPd2UJBcfxCKTEk=)
                          2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: R6HG4h0zJ5Up3kcXt33XvKbc1FZ3JBS7ZLwfj56jh5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:67:b7:75:82:5d:c9:06:7e:b6:2f:da:87:42:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
        Validity
            Not Before: Jun 14 06:00:25 2025 GMT
            Not After : Jun 15 06:00:25 2025 GMT
        Subject: CN=c8c81faad23d2fdafc0e2deaaf7a374393bf5f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:e1:39:18:49:6e:55:6f:fa:01:eb:86:3a:
                    d8:48:74:17:4d:89:b7:1d:5c:19:68:26:fa:b7:22:
                    67:7c:58:6e:06:47:9e:21:b9:fa:05:30:64:88:de:
                    43:d7:6c:38:75:b9:7b:8e:a5:0f:e7:3e:93:19:99:
                    28:9f:f0:67:a6:d4:94:20:8d:16:03:ed:b9:de:ff:
                    54:b7:52:d1:41:1b:0b:57:99:ff:f6:f9:3b:64:9d:
                    61:6a:fa:f2:99:81:67:1a:10:cf:7e:ea:59:93:b3:
                    2e:d4:d7:e3:e8:75:9e:a7:ab:90:49:bc:4d:23:e2:
                    72:3d:5a:b9:9a:ab:0e:78:c2:39:25:14:83:b9:76:
                    bb:6e:39:23:ae:ca:db:95:ff:4f:d6:69:eb:35:50:
                    12:93:38:a8:43:21:9a:ed:3c:fb:da:44:7a:2a:8a:
                    ad:b9:5a:be:f1:9c:2c:a0:de:74:2f:f7:83:49:8b:
                    ff:42:fe:54:92:3e:2e:b9:a7:79:33:16:0e:3f:db:
                    02:70:b6:ea:78:27:82:4a:d8:81:de:32:45:54:46:
                    c1:ab:cd:1b:61:92:d0:7f:6e:3f:34:6d:5e:9a:1c:
                    ec:00:87:47:7d:cb:70:a3:14:a1:59:81:98:96:2f:
                    89:98:c1:96:44:78:d0:3f:e3:a7:4f:39:2d:4f:2a:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:1F:AA:D2:3D:2F:DA:FC:0E:2D:EA:AF:7A:37:43:93:BF:5F:23
            X509v3 Authority Key Identifier:
                keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:69:2c:9c:c3:06:2e:df:21:68:2e:49:f1:59:cb:c0:cc:
         f9:cd:34:ca:2c:29:96:29:35:83:29:fc:82:f9:24:61:33:8d:
         c8:88:f4:c4:a2:5e:1a:8d:8d:a5:5c:de:59:4c:d8:26:06:43:
         8d:61:e5:2f:5b:fb:6d:70:4e:eb:8c:81:19:cb:a8:b9:a6:fe:
         97:e4:d4:d2:52:cf:a4:a4:8a:17:7a:49:5b:55:f7:b0:6b:38:
         fa:65:55:55:a4:b5:0f:01:f7:74:87:7f:bd:11:01:60:96:67:
         46:1f:7b:03:ea:b8:75:3a:8c:fa:8d:d7:a5:ec:f1:27:c5:68:
         68:a0:f8:01:95:13:f8:7d:38:67:4e:fb:7e:fe:4d:21:0b:ca:
         7f:0a:de:1d:de:7b:97:77:23:db:fc:a7:68:49:51:89:14:e3:
         d4:65:4a:5c:59:c6:2d:4d:73:99:6e:cc:f2:ca:5f:48:43:e3:
         3a:02:ae:61:7c:81:e1:ab:3d:5a:71:c8:9e:94:05:5f:87:f0:
         3d:68:1c:44:0f:1a:c8:06:18:65:4e:5d:14:5d:39:ff:f0:af:
         73:5f:fd:f2:e7:56:5b:6e:fa:14:ad:41:f9:bc:67:c0:ed:b7:
         2b:4e:cb:8f:7b:a4:37:51:1c:02:c3:87:1b:02:4f:bd:2b:0f:
         b3:cf:16:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBme3dYJdyQZ+ti/ah0J1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YTUxNmJmZWM5MmIxYzhjNzU3M2ZmODg0ZDg0MTY4MGU2
Zjc4M2YwHhcNMjUwNjE0MDYwMDI1WhcNMjUwNjE1MDYwMDI1WjAzMTEwLwYDVQQD
EyhjOGM4MWZhYWQyM2QyZmRhZmMwZTJkZWFhZjdhMzc0MzkzYmY1ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruzhORhJblVv+gHrhjrYSHQXTYm3
HVwZaCb6tyJnfFhuBkeeIbn6BTBkiN5D12w4dbl7jqUP5z6TGZkon/BnptSUII0W
A+253v9Ut1LRQRsLV5n/9vk7ZJ1havrymYFnGhDPfupZk7Mu1Nfj6HWep6uQSbxN
I+JyPVq5mqsOeMI5JRSDuXa7bjkjrsrblf9P1mnrNVASkzioQyGa7Tz72kR6Koqt
uVq+8ZwsoN50L/eDSYv/Qv5Ukj4uuad5MxYOP9sCcLbqeCeCStiB3jJFVEbBq80b
YZLQf24/NG1emhzsAIdHfctwoxShWYGYli+JmMGWRHjQP+OnTzktTyocVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjIH6rSPS/a/A4t6q96N0OTv18jMB8GA1UdIwQY
MBaAFLilFr/skrHIx1c/+ITYQWgOb3g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZmJjMjAtMTM2Ny00ZDY0LWFlMDUt
ZTE1MzM5Zjc3MmM1LzEvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZmJjMjAtMTM2Ny00ZDY0LWFlMDUtZTE1MzM5Zjc3MmM1
LzEvdUtVV3YteVNzY2pIVnpfNGhOaEJhQTV2ZUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYChpLJzD
Bi7fIWguSfFZy8DM+c00yiwplik1gyn8gvkkYTONyIj0xKJeGo2NpVzeWUzYJgZD
jWHlL1v7bXBO64yBGcuouab+l+TU0lLPpKSKF3pJW1X3sGs4+mVVVaS1DwH3dId/
vREBYJZnRh97A+q4dTqM+o3XpezxJ8VoaKD4AZUT+H04Z077fv5NIQvKfwreHd57
l3cj2/ynaElRiRTj1GVKXFnGLU1zmW7M8spfSEPjOgKuYXyB4as9WnHInpQFX4fw
PWgcRA8ayAYYZU5dFF05//Cvc1/98udWW276FK1B+bxnwO23K07Lj3ukN1EcAsOH
GwJPvSsPs88W0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:08 2025 by rpki-client