Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          epSfJtks/fvvZPkCdulX5lA7aqKbGhHRxOpxcPJ313Y=
Subject key identifier:   A6:62:B6:C3:54:BB:41:E2:DA:74:7C:48:AE:B7:48:BC:90:9C:34:26
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       0196722F93A1F1E0F4B5D10DF10D1A078C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          0BA8
Signing time:             Sat 26 Apr 2025 13:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 13:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 13:00:42 +0000
Files and hashes:         1: 4TbrBuZsL88VAAl1QCLmAWghqCg.roa (hash: iopY3SVCE/nuv4+imI+6O+SS27RRrP9dzDqH0wZ+omg=)
                          2: FKQuu6Kj3XuAbhD_hkdmiIg9ru0.roa (hash: BfDYVCCLX0UZgPY+reA/hpbk3+E5qzw6fvZYP021pLk=)
                          3: TBdRYI4Vp-3SsMereWjuJuGMK6c.roa (hash: bWYcU1CjUZXhUk+i248J8pYxf7A24hSe76RbYqPhQc4=)
                          4: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: tp8YFhmtJVg5n2/bKNilmDbeJqUBCBUkrLAB3fhCZqI=)
                          5: V_fCtcHRcIvlGMfQMllvvNseZ5s.roa (hash: pcOqzRDVwxnAc2XcbL2lzklSAVLcGx3z65HCfsZTOqA=)
                          6: XZBUdypJdRsW9C7-bbCqwM2XeyY.roa (hash: Sw9HTQQH5rOvV845qg6T2/HMx+a+lVBlr9o8rtw6bfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:93:a1:f1:e0:f4:b5:d1:0d:f1:0d:1a:07:8c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Apr 26 13:00:42 2025 GMT
            Not After : Apr 27 13:00:42 2025 GMT
        Subject: CN=a662b6c354bb41e2da747c48aeb748bc909c3426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:e2:97:10:a9:2d:7c:b6:0d:79:c8:9b:a8:
                    03:f0:dd:26:e4:71:79:7c:39:23:42:fe:f7:e6:3c:
                    72:72:bf:5b:98:a9:28:3e:36:30:5c:d8:4f:56:fe:
                    7f:a7:98:97:ff:d1:45:26:22:a2:8e:52:14:9e:40:
                    48:66:ef:cd:1a:ce:7d:49:a4:f7:a2:9d:8d:28:94:
                    b2:ad:a3:a5:df:fa:46:1c:b7:b8:15:07:55:9a:44:
                    e5:e4:91:ad:ae:37:92:b3:17:83:38:0b:f0:df:92:
                    41:63:91:cd:ab:3c:7f:32:6f:07:5f:38:32:f0:03:
                    b0:bd:3e:df:7e:4c:03:d5:92:96:a9:2a:02:f3:7f:
                    ab:f0:81:51:28:28:9f:9e:40:4f:68:c7:ef:ed:2f:
                    a1:16:80:ce:af:f5:d8:25:71:e2:d8:3e:cc:37:36:
                    b1:0f:48:7a:dc:28:72:1d:34:55:22:e9:2b:09:c9:
                    4a:d5:6f:08:a7:45:fa:f2:a2:b3:99:f1:46:c4:e8:
                    55:26:23:29:9c:ab:96:22:6a:3a:47:38:2d:49:b6:
                    12:e6:7d:99:41:b5:20:00:c7:67:03:38:15:a6:78:
                    6e:c5:1b:ee:16:b2:a4:d9:64:22:05:43:ca:9c:de:
                    71:31:22:81:0b:02:6a:b2:91:55:ff:a2:e0:41:ac:
                    b4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:B6:C3:54:BB:41:E2:DA:74:7C:48:AE:B7:48:BC:90:9C:34:26
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:76:e8:6c:de:34:7b:df:b7:2e:76:ae:94:0a:6d:70:7a:
         fd:04:69:d3:34:0b:de:39:c3:0c:fc:5c:79:0d:f3:7c:8e:23:
         c9:50:74:04:03:ff:eb:46:f1:dd:44:f7:6f:2a:eb:3a:0e:50:
         c5:af:13:a3:4b:30:fd:29:8c:4b:c8:ea:e7:1e:d9:8e:46:c2:
         72:91:fd:44:23:69:5a:f1:48:a9:25:98:97:86:05:8f:0f:a1:
         a9:61:08:ae:10:35:46:a8:95:39:bb:13:a0:b9:86:5d:a7:2f:
         d8:b5:fd:49:56:66:d6:79:a1:bd:96:f8:c5:99:50:40:8d:39:
         b3:6b:f4:82:3b:a8:9e:48:75:b3:00:1d:6e:ec:9e:af:2e:5e:
         9a:ab:3c:03:d6:7a:ad:c1:4a:c6:ba:24:e9:3c:4a:e4:7e:21:
         fc:b8:ef:85:cd:e7:b0:e8:46:bc:c3:36:54:ef:3e:24:e8:b6:
         6f:bf:06:04:ed:4c:a5:09:5a:15:77:74:07:fc:b5:80:2a:90:
         d7:6f:8b:83:9a:c2:7b:31:73:44:2e:0e:9b:60:5d:f3:d9:0e:
         f2:ed:33:41:16:8e:4b:62:6b:7b:19:a4:6f:69:84:e9:4a:2a:
         91:d6:84:5a:a8:12:5c:e9:30:c7:ee:76:34:41:f3:21:9b:de:
         87:5f:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:32:36 2025 by rpki-client