Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          te6pfPtqUw7iVAhmCq9Nay2CSb4+IqxQuqhUpuB7QJM=
Subject key identifier:   55:FF:6C:E4:A8:C6:BB:3E:B7:C8:2A:49:C4:DA:07:8C:59:8C:15:75
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       019675671122FF1C169B2EA589ACDC96F059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0BF5
Signing time:             Sun 27 Apr 2025 04:00:10 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:10 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:10 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: AjwW31npy/tnwIPKsQZdPGQsgCLVyvKk3JJWf4yHMgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:11:22:ff:1c:16:9b:2e:a5:89:ac:dc:96:f0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Apr 27 04:00:10 2025 GMT
            Not After : Apr 28 04:00:10 2025 GMT
        Subject: CN=55ff6ce4a8c6bb3eb7c82a49c4da078c598c1575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:0c:ce:7b:ac:04:02:b8:32:9c:1b:c4:83:
                    56:d7:e4:67:06:ec:40:69:1d:88:56:8e:ca:a7:af:
                    65:b3:8b:e9:69:fb:b7:cb:b7:f9:6f:78:39:1a:d0:
                    17:7f:12:53:e8:ca:84:ce:6b:bf:99:e5:e9:71:fd:
                    77:90:71:11:d2:5e:dc:f4:33:3a:d8:f7:a6:e5:27:
                    5d:55:f2:95:4b:81:d0:8d:f7:79:c2:1f:0b:a2:d2:
                    9a:8c:f0:b3:5a:b0:73:f1:45:b6:53:5e:b5:90:61:
                    6a:7e:6d:21:7a:91:de:05:ee:3a:69:e4:bd:30:ce:
                    89:e7:23:60:7d:48:0e:45:38:92:08:bf:a7:45:72:
                    73:d8:94:09:c5:b5:b8:0c:72:c2:ce:f3:fe:87:ee:
                    e1:28:1a:16:7c:6d:37:13:d6:4a:44:39:50:42:c8:
                    38:37:f1:54:e9:ec:82:f0:7e:de:ca:3d:74:a8:fa:
                    f5:25:04:f7:c1:d1:82:a3:26:46:e4:e6:d3:55:3c:
                    e1:39:bc:f1:97:9c:78:97:fe:5f:a2:77:54:85:21:
                    bf:41:95:de:12:59:aa:87:ca:68:62:fe:a0:0e:7f:
                    8c:4d:ae:ba:7c:3d:b9:47:31:4c:4f:8b:09:13:b1:
                    d0:9f:44:1e:73:00:d3:21:5a:34:04:df:b1:a4:ff:
                    f3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:6C:E4:A8:C6:BB:3E:B7:C8:2A:49:C4:DA:07:8C:59:8C:15:75
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c9:26:2c:b3:6e:09:73:34:48:12:94:76:de:23:17:e8:6e:
         a3:56:83:7f:13:9d:7d:36:5d:24:67:b4:3a:c9:97:40:8b:fd:
         33:37:b8:a2:8b:31:73:02:a0:14:1c:e1:94:ea:86:23:9c:c1:
         bb:7e:5a:33:16:09:ce:b0:45:e5:ec:d0:82:b6:f7:4d:6b:51:
         67:c3:96:4d:09:22:87:0a:f7:28:b7:12:1d:74:45:0d:f2:f6:
         e8:e4:0d:c8:ec:e1:ef:9f:52:78:fe:bd:59:ac:5d:17:77:12:
         f4:9f:33:88:ea:98:ec:57:45:74:70:03:f1:f6:20:ad:59:c4:
         51:ba:25:d9:bc:9c:3a:bd:16:05:5c:d4:49:7d:cb:d3:81:42:
         a9:3e:b1:76:14:57:1e:e8:3d:e5:a1:c3:b2:4a:d3:1b:7d:d5:
         c6:bb:bb:ed:37:77:b1:7b:e8:d3:a5:21:c1:c9:2e:dc:db:00:
         86:54:5e:6e:4d:97:06:66:7c:90:e0:f5:2e:69:82:a7:b0:d8:
         29:b1:eb:fd:aa:b3:7f:e7:63:f7:1b:85:29:91:2a:1b:20:0e:
         67:54:e6:78:36:6d:5b:f4:1b:f9:d0:56:6b:be:c3:3e:09:e3:
         fc:87:98:9a:2c:2e:95:77:ac:ac:69:eb:b0:4e:93:ea:36:57:
         19:32:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:42 2025 by rpki-client