Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File:                     uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier:          DHnLP9qdvEy7WbxkIgdRqFAKKlX30SpfKOHxKVuY8as=
Subject key identifier:   B1:6D:6E:7B:E3:36:AF:35:B7:F0:3E:06:27:3B:2C:C5:E4:C8:E2:BB
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       01967EA1472DAE590ECF3251E1915924E89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number:          14BE
Signing time:             Mon 28 Apr 2025 23:00:20 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:20 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:20 +0000
Files and hashes:         1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
                          2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: mJDTqX2x+7wHLazPRuV+8fTA54UOv3VMbV/QnIJlUy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:47:2d:ae:59:0e:cf:32:51:e1:91:59:24:e8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Apr 28 23:00:20 2025 GMT
            Not After : Apr 29 23:00:20 2025 GMT
        Subject: CN=b16d6e7be336af35b7f03e06273b2cc5e4c8e2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:15:c6:dd:23:60:9a:7e:bd:21:d2:b8:b2:
                    31:e0:a4:02:a8:19:68:3c:d4:59:82:b4:7d:ad:d0:
                    71:d6:b4:4f:84:42:63:3b:04:47:e9:24:9b:5e:9a:
                    8d:fc:bc:c5:b2:62:43:27:df:ff:d0:2a:4b:8d:65:
                    fa:9b:49:0d:63:e0:4c:46:bd:7e:d1:28:4f:cf:67:
                    52:50:b6:1d:75:49:03:6e:fd:11:98:56:e8:e6:4e:
                    f6:a0:9b:3b:4f:ef:c5:66:7e:58:e0:32:a0:c4:5f:
                    7c:b4:51:0a:14:6a:e9:3c:40:1d:83:78:e0:e2:49:
                    af:b5:ab:c1:f5:7d:0f:dd:c2:86:cc:cf:0a:68:b9:
                    69:eb:fc:44:40:5a:c9:ef:4c:df:c9:0e:d7:14:72:
                    f1:49:a7:6e:e8:c6:30:69:57:74:bb:90:ae:f0:c9:
                    72:67:6b:2f:35:5c:00:d8:8c:e4:16:4c:0c:66:2f:
                    f6:c8:cf:57:3b:bd:e1:5e:01:44:55:cf:13:b5:a7:
                    94:79:c9:f6:bf:d7:a8:a6:f1:0b:4e:75:5c:42:94:
                    86:d0:4e:9d:77:bb:fb:78:43:7a:e4:5b:76:bd:af:
                    9c:d3:b5:1a:b8:bf:67:00:64:82:38:81:9c:be:52:
                    1b:ef:e0:53:28:08:a0:f4:ec:b8:32:75:d8:0b:01:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6D:6E:7B:E3:36:AF:35:B7:F0:3E:06:27:3B:2C:C5:E4:C8:E2:BB
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d6:9f:bd:28:71:44:03:af:e7:37:cf:3e:47:de:f9:f4:ff:
         2c:16:4f:43:91:fe:9e:f2:1c:6c:b9:56:da:2e:ac:ea:6b:49:
         4d:72:70:52:20:58:8b:b8:08:b9:d4:fa:e6:62:0a:31:d6:db:
         3f:5b:53:7a:31:d5:19:54:24:22:51:28:36:3f:18:ad:5b:dc:
         b5:ed:1c:b0:08:de:50:a3:8a:a7:47:7d:b7:4a:09:a6:7f:87:
         a4:1b:5f:eb:e5:d9:ee:de:b1:bb:2b:67:84:86:74:76:64:aa:
         c9:62:78:dd:77:0e:17:e3:e8:73:1a:61:30:59:b9:4c:2b:57:
         0c:f1:dc:3b:10:44:2c:96:ad:4b:1c:64:32:5e:71:20:50:76:
         45:f3:42:fa:44:58:69:cd:f5:8c:55:ab:c7:26:ae:4d:8a:17:
         28:74:cc:94:5a:30:79:28:6a:ec:78:ec:1b:93:90:2e:6c:17:
         bf:f1:8f:18:46:47:7d:47:8c:df:4d:74:68:07:b9:c7:f9:ca:
         3e:7b:f5:2d:1f:df:cf:c1:01:14:13:04:7b:2e:e9:6a:68:88:
         16:dc:04:e3:fa:f3:20:55:61:f2:e0:46:f3:5f:97:63:4e:d8:
         3b:a5:85:df:04:69:e5:ec:06:4e:32:cc:06:13:9c:9e:42:eb:
         5f:21:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:14:49 2025 by rpki-client