Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          GMFL8FHwcGLB7N4W08V0NOKAHlcBfX1+YKiMwckBcrk=
Subject key identifier:   45:11:03:DE:DD:02:A2:72:48:68:D4:C7:2B:E8:69:3A:63:64:C1:AB
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       01976BBD9FCFD479DBC33BB6331885CE84E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          159B
Signing time:             Sat 14 Jun 2025 00:01:18 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:18 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:18 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: xDcAyDGDTtICxTYWHeUotmIQCFDMknlVk/JJJRoU/N0=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:9f:cf:d4:79:db:c3:3b:b6:33:18:85:ce:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Jun 14 00:01:18 2025 GMT
            Not After : Jun 15 00:01:18 2025 GMT
        Subject: CN=451103dedd02a2724868d4c72be8693a6364c1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:d4:e4:1d:11:e2:36:96:e8:9a:a6:4f:a9:
                    16:db:18:13:ae:b0:ac:8e:95:dd:f7:b1:e5:e8:97:
                    09:9c:d5:b2:1f:8f:d0:dd:67:e7:14:b4:28:d7:57:
                    2d:96:d9:21:a4:ec:b0:b4:5f:a0:d5:2e:e6:b5:92:
                    9b:ec:bc:3a:ed:aa:5e:30:91:08:79:ce:1e:5f:65:
                    5b:ab:e1:cf:f0:cd:f9:b1:53:3e:6b:b6:a1:0d:3f:
                    2c:6d:f6:b5:86:8e:d9:86:ad:c7:5e:df:26:70:5c:
                    50:5c:d9:f1:4a:36:d0:94:53:6b:88:e9:3e:1a:dc:
                    3e:e3:75:6c:40:f1:73:a9:a2:69:b7:d9:5b:4b:30:
                    d6:a4:91:76:2b:aa:1b:e2:de:48:ab:6b:8a:9c:15:
                    0f:5c:81:80:91:d9:78:fa:d8:d0:64:8e:fe:6e:4f:
                    f0:e5:1c:87:18:6d:80:10:c8:f1:c6:1a:e9:49:8f:
                    36:a4:36:07:43:e4:80:ce:6d:51:59:d5:1a:5e:ff:
                    3f:1d:ee:41:3f:4f:fb:b0:0e:c9:b6:ea:3e:b8:ef:
                    8f:06:47:b9:c4:ad:a5:45:6f:98:a0:e4:b2:96:68:
                    c2:fb:04:ab:52:19:b7:ce:af:93:14:62:31:a3:1b:
                    76:cd:3a:99:ce:c0:c3:12:e8:0e:0a:98:2e:17:85:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:11:03:DE:DD:02:A2:72:48:68:D4:C7:2B:E8:69:3A:63:64:C1:AB
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:86:c7:7d:50:65:56:1b:50:2a:26:a5:0d:e3:58:52:86:
         ea:91:a3:af:83:b8:e8:54:e5:f4:b0:57:94:18:d5:dc:4a:6e:
         2a:22:41:bb:ec:96:5f:d3:c1:46:45:a8:5f:0f:3e:7a:5f:d9:
         29:1a:3c:d6:42:e9:c3:be:8b:f6:28:79:ff:68:ce:bb:41:15:
         38:18:46:9c:5f:78:04:7f:ae:29:73:fd:9d:42:b8:66:0c:69:
         13:73:01:f7:b2:13:a7:32:b7:64:bc:7d:34:d8:0b:ce:26:4f:
         09:c5:0c:b1:5b:58:ba:38:1f:a0:c0:29:9d:09:29:47:7f:de:
         0b:1a:be:eb:cf:e2:e8:e9:af:31:e8:a2:51:97:eb:6d:b5:5e:
         9a:18:b6:2f:28:11:eb:f4:a5:66:e1:2a:0c:01:54:5c:67:2a:
         15:63:49:c0:97:c0:11:b0:00:db:d9:19:42:69:97:bd:38:90:
         05:0e:e5:89:17:94:4e:fe:42:6f:fe:ed:8c:35:d1:07:4c:42:
         be:55:ba:fb:95:b6:79:20:38:d3:44:e3:7a:ab:09:42:1d:da:
         1f:fc:43:15:b3:53:f9:dd:88:a6:ba:82:a3:a5:6b:3d:eb:cf:
         24:b1:48:3d:b7:a9:23:20:e8:37:58:71:09:63:a2:7b:4d:c8:
         60:b4:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:28 2025 by rpki-client