Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          FAJbaXfaX4NNW/yZFISWstrkl9sUmd5I7VCJrT9shY0=
Subject key identifier:   B0:D1:0E:23:49:F5:61:44:89:AD:87:DF:CD:2D:44:32:9E:98:97:53
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       01987ABFDEAAEAF6CC518BCCA0C0AEC8E823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          1636
Signing time:             Tue 05 Aug 2025 15:00:51 +0000
Manifest this update:     Tue 05 Aug 2025 15:00:51 +0000
Manifest next update:     Wed 06 Aug 2025 15:00:51 +0000
Files and hashes:         1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=)
                          2: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=)
                          3: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=)
                          4: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=)
                          5: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=)
                          6: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=)
                          7: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=)
                          8: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=)
                          9: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=)
                          10: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=)
                          11: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=)
                          12: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=)
                          13: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: p8EHj9R3thIOu4fWJl7387RDthSvd6OMmMFzy62YKrw=)
                          14: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:bf:de:aa:ea:f6:cc:51:8b:cc:a0:c0:ae:c8:e8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: Aug  5 15:00:51 2025 GMT
            Not After : Aug  6 15:00:51 2025 GMT
        Subject: CN=b0d10e2349f5614489ad87dfcd2d44329e989753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:78:94:62:8f:7e:8d:21:8a:12:8c:fc:8c:92:
                    c0:b5:83:dd:5a:ba:d6:3a:65:2c:52:4b:7a:f6:f9:
                    54:33:57:68:f5:fe:a4:05:0d:b3:ee:8d:07:a7:64:
                    85:09:87:86:72:66:fd:72:94:b1:50:da:0b:31:b6:
                    0e:cc:41:69:6f:25:f2:38:fe:9c:f1:0e:79:5d:8c:
                    84:ba:13:c8:43:b2:21:5b:f8:8a:c1:5f:1c:df:bd:
                    68:31:ac:d2:40:b3:32:3c:51:13:1d:7c:f0:e3:89:
                    46:b5:ea:0e:6d:0f:73:c6:e3:cd:56:bd:a1:ca:07:
                    24:5c:02:96:21:c9:92:d2:a8:fe:bb:e5:4f:30:50:
                    56:53:21:4e:ac:37:29:27:6f:57:c8:9c:2f:a8:f0:
                    d5:ef:34:d1:46:4c:33:bf:b4:84:e9:43:26:f8:05:
                    ab:9b:71:53:a7:63:48:88:f2:54:e3:9c:0e:7e:ce:
                    ec:55:a9:eb:17:cf:21:93:f2:7e:83:70:0b:ab:50:
                    7f:49:5b:c5:e6:e7:0a:c8:bb:cc:57:38:f9:e8:30:
                    ac:96:37:1b:5e:58:75:8f:92:70:c3:22:e9:1f:ea:
                    fb:cf:cd:3c:8e:a0:27:fa:c5:5a:1d:5c:c4:c5:77:
                    c7:98:52:17:a7:63:d4:14:ab:71:ac:1e:67:05:78:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:0E:23:49:F5:61:44:89:AD:87:DF:CD:2D:44:32:9E:98:97:53
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:8d:84:b2:de:66:0f:d2:3e:7d:02:bb:9f:10:1d:f9:fe:
         a4:b8:94:e5:a4:ef:44:08:ee:d3:b9:bb:47:a6:ca:a0:75:50:
         c9:43:b0:67:4d:fa:3c:88:65:35:b2:c1:40:9b:49:d7:ac:36:
         92:77:1e:d1:85:94:47:a0:37:03:0e:16:c9:9b:55:38:62:46:
         93:1d:99:12:5d:5c:24:0d:e7:a1:5c:c7:5f:ca:cf:8b:eb:a8:
         77:d9:43:03:79:23:5c:a0:50:94:37:00:0a:0a:47:91:81:00:
         f7:2e:c9:90:3b:fd:c4:63:57:61:14:08:b7:a5:c0:1c:58:59:
         4a:50:09:7a:50:2b:eb:f7:1c:66:30:34:01:49:c9:4d:be:fd:
         a2:a2:68:e5:52:97:4e:47:60:63:70:11:ae:22:f9:55:10:c3:
         4b:2a:d1:ec:de:a1:39:7c:cd:14:f4:36:ed:64:10:3f:b2:1b:
         0f:4a:7b:9f:19:34:dd:c4:17:ba:62:fc:8c:76:a8:87:a5:56:
         79:75:39:96:c2:a2:f1:ab:e2:5a:58:1a:bf:5c:b6:70:5b:3d:
         ec:1c:98:0f:35:60:eb:dc:c6:ea:95:d8:58:87:63:91:d4:dc:
         3a:a3:cf:92:05:4a:b0:33:02:6e:94:e0:d1:c8:a7:c8:9b:2c:
         88:fa:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:40 2025 by rpki-client