Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File:                     1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier:          l6TSryw6veoy0Z4coEGv8VES4bxdzTF1Gw9PstwhTDE=
Subject key identifier:   FF:C1:34:3C:FC:23:C4:E4:E0:2F:BF:D8:E2:F8:40:20:EB:92:BB:AD
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer:       /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial:       01968391ABB1141DE1565FD64364187255F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number:          0CB5
Signing time:             Tue 29 Apr 2025 22:01:24 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:24 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:24 +0000
Files and hashes:         1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: MteZwqKQCZqVfueFxNCskZ6E649ogmEc49dKZM5FtGg=)
                          2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:ab:b1:14:1d:e1:56:5f:d6:43:64:18:72:55:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
        Validity
            Not Before: Apr 29 22:01:24 2025 GMT
            Not After : Apr 30 22:01:24 2025 GMT
        Subject: CN=ffc1343cfc23c4e4e02fbfd8e2f84020eb92bbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:2a:e8:fb:80:5a:66:e9:c1:f7:48:d2:05:
                    2a:df:0f:f0:9a:e1:92:5e:8a:c2:74:d4:6d:d9:97:
                    01:2b:57:7b:d5:3b:8d:c7:39:41:49:27:c2:49:c4:
                    19:3e:e2:fb:fa:66:d1:2e:82:bb:37:2b:12:43:8b:
                    32:9d:b8:a8:2a:86:de:dc:2e:e9:05:b3:35:ef:52:
                    01:c9:17:c6:89:70:c6:92:67:0e:70:f3:3e:5b:8f:
                    d7:b9:60:76:c5:a1:96:cf:a9:e0:62:59:5f:62:ba:
                    12:13:93:73:b1:0c:ba:70:fd:a5:b5:d2:67:c2:6c:
                    07:5e:bd:22:7e:ea:6d:fa:76:e4:ba:ec:40:6b:cf:
                    ab:3f:2a:91:1b:82:04:a4:7c:45:2d:47:0c:47:57:
                    0c:80:92:84:94:94:0f:4d:03:74:67:e4:06:7e:66:
                    b7:f1:73:69:8d:20:81:56:7d:0a:65:71:44:c0:bf:
                    36:eb:3f:16:d1:27:4b:88:fb:33:e0:7a:8b:9c:8d:
                    f7:ce:b4:71:85:03:d8:b8:87:b6:60:43:e6:92:df:
                    49:8d:90:b2:ff:e6:89:2a:1e:90:41:34:c4:7b:56:
                    7d:1c:3b:16:ea:b5:fc:91:a6:3b:3c:59:95:3a:b3:
                    bb:9d:61:b5:2d:46:68:fe:d8:17:06:03:32:8f:48:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C1:34:3C:FC:23:C4:E4:E0:2F:BF:D8:E2:F8:40:20:EB:92:BB:AD
            X509v3 Authority Key Identifier:
                keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:89:5d:96:99:97:a3:7b:77:42:ef:d7:42:3c:df:82:13:24:
         27:8e:08:72:87:f9:55:af:49:c5:f0:31:f3:42:26:c6:20:42:
         a9:4b:8c:ec:3d:50:4b:1d:64:a5:7c:2d:9a:da:72:61:7c:67:
         c3:d9:aa:e3:5f:d8:fb:6e:2f:29:5f:c4:b5:e8:5e:26:ab:5d:
         0b:2f:00:35:87:b0:e3:ca:ef:ed:26:e8:f1:13:ff:5c:be:43:
         c0:30:ac:47:33:4c:1b:1c:8f:15:69:97:2f:74:4e:9c:17:f7:
         75:a0:3b:1d:1c:75:c5:7c:6c:02:4b:c8:65:43:b3:7e:dd:5a:
         e8:b1:46:ce:d7:10:fc:5a:fd:3d:b9:ec:1b:62:4b:e8:5c:3c:
         87:42:08:74:5f:d6:04:8e:ff:3b:e2:ef:87:96:2b:0a:07:12:
         14:46:1a:85:a0:38:13:e1:f6:8e:b1:8d:78:9e:d6:ad:2a:0c:
         cb:2c:0a:fb:41:7a:fd:87:65:f5:2a:d2:c7:47:e2:03:a6:8e:
         c5:7d:a2:eb:af:d2:d0:fe:8b:8a:2d:d7:fe:15:ae:4c:98:17:
         f9:3f:bc:a4:1b:c9:c9:c7:71:83:35:97:3f:56:32:b3:9e:ab:
         60:83:1f:ce:2b:01:78:81:c2:ab:db:7f:ee:27:6f:65:29:13:
         ab:89:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:20:25 2025 by rpki-client