Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          VP9E1zaDwVDkn2L/IJDMmlpykYEqsBlHJ08GLzpHImY=
Subject key identifier:   96:DC:BC:94:28:6C:0E:0C:B9:C3:78:00:92:22:4D:6C:07:59:08:43
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       019769CEC09C9E4088190EFD5363CDF07AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          151E
Signing time:             Fri 13 Jun 2025 15:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:46 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: JFrsEKJR9g2bwrwIcw/oHyMuEC35RjOlQF8hUrJFZwc=)
                          2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:c0:9c:9e:40:88:19:0e:fd:53:63:cd:f0:7a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: Jun 13 15:00:46 2025 GMT
            Not After : Jun 14 15:00:46 2025 GMT
        Subject: CN=96dcbc94286c0e0cb9c3780092224d6c07590843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:b3:c4:3a:75:9d:b6:d8:89:74:8f:0f:0a:
                    31:17:00:50:08:b3:38:a9:50:b5:81:16:54:ca:8d:
                    94:9e:b9:81:52:ae:9b:5d:df:e9:98:81:40:85:20:
                    f6:53:38:85:f6:85:23:6e:8a:a8:93:87:a3:59:18:
                    cd:73:9f:37:ce:11:4d:35:36:3d:30:f9:b6:03:f1:
                    c3:9a:d9:cb:47:d3:1b:22:13:30:41:5a:40:c6:58:
                    a5:27:72:8b:fb:6b:7b:a6:3c:b9:b0:a1:56:c7:48:
                    f2:da:db:1f:3f:74:65:df:b6:a9:7d:8e:2d:4a:69:
                    33:ee:a8:e9:42:3b:3a:08:fb:cd:e2:e6:66:05:83:
                    bf:09:23:56:ba:9b:21:1d:a3:87:c7:70:d3:0f:3e:
                    5e:c7:d8:02:a9:08:38:b4:dc:0d:ec:f7:2e:0f:b9:
                    f9:c5:23:83:64:28:0f:88:cb:6f:77:3b:7d:f2:4f:
                    cf:46:a2:73:84:db:23:ab:90:fa:13:61:22:21:27:
                    22:ad:b6:f7:fe:70:36:04:ba:24:eb:28:84:96:00:
                    23:78:66:a7:31:15:62:b6:59:2c:86:e0:07:ab:4b:
                    d0:97:27:2c:d5:65:5a:4e:b3:8a:f5:58:63:ec:d2:
                    17:4b:6b:ab:55:92:52:9a:cd:f0:93:55:2b:80:48:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DC:BC:94:28:6C:0E:0C:B9:C3:78:00:92:22:4D:6C:07:59:08:43
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:68:03:8f:43:e4:39:82:dc:be:6d:c0:fa:1e:a3:df:54:
         6b:00:3e:93:42:03:1b:ac:36:22:08:4f:0d:5d:42:81:7f:f3:
         bb:e0:ae:3a:67:15:06:16:9c:6b:c8:bc:88:d2:39:df:5b:2d:
         f9:f9:53:c8:7f:1e:04:b6:0c:54:c7:fd:96:18:37:1e:8d:2c:
         39:95:5f:d1:1f:2c:54:73:6f:69:71:44:79:ab:2f:56:09:0c:
         94:ca:23:8c:b9:97:b7:2e:19:d4:4b:d5:d1:b5:3e:80:86:2f:
         80:81:24:93:d2:06:87:53:21:23:8e:2c:8d:f9:14:4f:90:13:
         0d:f8:04:5f:ab:51:8d:2d:f6:15:54:b3:c6:be:4a:f0:8f:c9:
         05:a7:95:28:6b:64:05:0f:09:b9:ea:b3:b3:41:ad:18:a6:1e:
         18:1a:18:5d:94:97:47:7f:e1:87:c0:49:d1:14:c8:58:78:ec:
         ea:d3:3f:4a:a8:b0:4a:db:ca:b6:d4:39:0f:b6:17:0e:b0:32:
         2e:a1:d4:4b:62:da:a3:03:94:c1:78:fa:e6:39:61:ef:45:a6:
         8a:2a:0e:d7:f8:70:43:ba:78:07:ca:1f:6b:06:ae:00:f7:39:
         c3:94:5c:74:7b:64:bb:9b:fd:13:46:ef:e1:dc:c5:86:0e:0b:
         1e:f9:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:04 2025 by rpki-client