Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File:                     uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier:          +iipOiDVBqnoLi4awmlz9nKy0p0pZTfbCvYAXtKSryI=
Subject key identifier:   C9:C1:4F:74:2D:22:E8:AE:0B:1D:B4:B5:D6:7E:BE:B5:40:CF:91:FA
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer:       /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial:       0196A2E52A80FA531AA01B6FD53448AB6F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number:          0519
Signing time:             Tue 06 May 2025 00:00:49 +0000
Manifest this update:     Tue 06 May 2025 00:00:49 +0000
Manifest next update:     Wed 07 May 2025 00:00:49 +0000
Files and hashes:         1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
                          2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: xvsynsUNmqjlmFu3sfpdEDq9Aj9C40BcBcUC8X2WRtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e5:2a:80:fa:53:1a:a0:1b:6f:d5:34:48:ab:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
        Validity
            Not Before: May  6 00:00:49 2025 GMT
            Not After : May  7 00:00:49 2025 GMT
        Subject: CN=c9c14f742d22e8ae0b1db4b5d67ebeb540cf91fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:61:ca:33:1a:97:5e:a8:2b:78:de:24:a9:
                    f2:d9:4c:dd:4d:43:25:d2:df:89:08:e3:d6:3c:02:
                    b6:df:e1:52:0a:ed:a4:fa:76:dd:2f:f8:c5:aa:cd:
                    f5:a7:25:d4:cb:ee:80:bc:72:48:57:46:29:1e:af:
                    65:1a:5f:47:1c:ec:fa:a3:1f:cb:37:b7:85:8f:d5:
                    cb:ec:b6:fb:f6:6f:95:01:a3:a8:8c:b6:35:e5:b4:
                    22:d7:45:52:a6:bc:f9:01:af:f6:6c:0b:1f:53:c6:
                    29:2b:a4:ee:3a:db:2b:70:a7:7f:17:2c:c9:6d:34:
                    22:cd:bf:56:c9:cf:4b:39:44:60:aa:cb:ca:7d:0d:
                    ad:13:98:cc:1d:ae:8a:c3:3b:c4:9e:ba:91:bd:10:
                    8c:cc:38:2f:f0:03:8f:70:83:fa:8d:6e:78:c3:b8:
                    df:53:a2:3f:5b:a3:8e:43:e8:b5:9e:5a:e7:2f:26:
                    68:18:71:f8:0c:60:f2:37:85:9b:f2:12:3f:40:19:
                    47:5a:4d:0e:a7:3b:53:08:b4:b2:e0:ee:37:1b:79:
                    53:9b:72:db:e4:01:63:80:d9:5c:b1:27:d7:f1:7c:
                    49:e9:cf:9c:76:d1:7e:65:27:b8:5b:28:ba:0e:0b:
                    12:41:be:ff:bd:c1:24:8e:e3:e2:04:c5:38:96:ec:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C1:4F:74:2D:22:E8:AE:0B:1D:B4:B5:D6:7E:BE:B5:40:CF:91:FA
            X509v3 Authority Key Identifier:
                keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:45:10:40:94:ba:4e:2e:1b:71:11:11:b8:60:47:76:40:52:
         0b:b7:99:3d:5a:43:b2:c2:95:73:57:5c:77:2c:f2:4f:63:a8:
         ab:0f:71:ed:b2:ae:0e:03:d3:00:03:16:cc:98:af:86:52:a6:
         8d:68:29:f0:3e:1d:58:fd:74:f2:45:05:76:43:99:c9:b0:d9:
         85:71:ee:67:a6:29:60:6d:2c:44:a3:4f:02:65:6b:e7:6a:f2:
         4f:2f:5e:ac:74:4d:ab:64:80:ad:69:4e:bf:b2:fd:10:2e:fd:
         d3:ed:08:7a:4b:b7:e5:48:9c:d7:bf:9c:0d:8a:d4:41:1a:27:
         c8:c5:f7:1d:b9:df:ca:9d:6f:b0:8a:86:c3:cd:e3:d2:a7:04:
         fa:66:5c:fd:95:53:43:d3:2d:85:d4:7d:14:5b:78:2e:88:50:
         87:df:35:9d:65:be:93:2e:3d:e3:1b:a9:57:88:8a:7e:d4:b2:
         7b:8c:55:55:a6:df:d2:33:bb:e0:bb:0c:14:20:7f:91:6c:9b:
         f3:76:9b:87:f3:56:8d:6b:5a:36:64:04:76:a4:d4:a9:60:4c:
         dd:75:1e:4a:8d:ff:45:cc:20:59:2d:74:18:f6:7e:bc:25:54:
         2c:06:ba:2e:a7:d1:20:70:80:55:5a:6e:94:24:52:3b:d4:aa:
         d6:ad:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:01:05 2025 by rpki-client