Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
File:                     UHQRWPPtZb7hveEvNPiVr7DdUNU.mft (raw, json)
Hash identifier:          IHQ+/n1Ja0iKINonRGnU1pupIr3U2PJ6QTsUZMXPJ8Y=
Subject key identifier:   11:F8:BF:A8:44:9F:BB:D9:A5:03:3F:5F:72:6C:92:9D:26:7C:68:33
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Certificate issuer:       /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial:       01988D345C07497823346170B73951FDEAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
Manifest number:          1666
Signing time:             Sat 09 Aug 2025 05:01:15 +0000
Manifest this update:     Sat 09 Aug 2025 05:01:15 +0000
Manifest next update:     Sun 10 Aug 2025 05:01:15 +0000
Files and hashes:         1: 1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa (hash: RYE6k3//z5KNEk7H3IQ1JZYxDGCNXiKaq546ajQsong=)
                          2: C-2Nv77vdORBtXODMBObwRD87Wk.roa (hash: N6t7RosiMXetfLBziLoQs8MiQEYjeO1vmrwr27Ix98Y=)
                          3: HEwByDo5NsJkjq0KP_e43JX1Y-I.roa (hash: KBL6f/ipp4MstSEvkMgxey8LBfXIJhOUyz3ctrFmblM=)
                          4: UHQRWPPtZb7hveEvNPiVr7DdUNU.crl (hash: BJozvp6u5gBtvJCUpQ49KriIJ2IpaMmnZkQIQoMedRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:5c:07:49:78:23:34:61:70:b7:39:51:fd:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
        Validity
            Not Before: Aug  9 05:01:15 2025 GMT
            Not After : Aug 10 05:01:15 2025 GMT
        Subject: CN=11f8bfa8449fbbd9a5033f5f726c929d267c6833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:90:a0:f5:b5:ba:3f:b7:33:30:d5:c9:95:
                    8f:47:65:e0:a2:6b:fe:67:98:e8:a4:cf:5d:c2:9f:
                    38:27:be:1d:2d:52:4e:1d:f4:fe:c5:2c:ed:d3:72:
                    0d:3f:27:b8:e3:0b:52:45:38:7a:eb:e1:8c:1d:44:
                    dd:53:53:c9:4e:30:df:36:d9:2d:30:89:e4:35:8d:
                    0c:e9:a2:c9:48:a7:d0:8c:c0:02:92:50:4e:3f:00:
                    79:e4:c8:a9:07:b0:2b:6e:f2:8b:4d:4d:68:7e:ee:
                    23:de:3c:4b:5f:2a:b5:8e:b0:7c:2c:e2:93:69:61:
                    a2:d1:02:cb:43:73:b7:ff:05:4a:31:6d:df:2d:cc:
                    c0:ec:a5:8e:3c:5f:33:b6:49:df:ae:bb:a2:48:ca:
                    bb:9b:63:29:7c:93:84:28:4f:46:13:ca:e3:ec:27:
                    0c:09:aa:46:45:9e:5b:30:bd:0e:fd:1d:10:ae:39:
                    f5:42:77:f3:67:98:3e:3c:fd:96:cc:25:a2:6b:d1:
                    b0:ac:1c:fb:62:46:7c:cf:6d:71:80:3a:00:85:15:
                    9e:28:82:43:a4:ed:eb:93:7f:04:f0:9e:db:9b:6f:
                    d5:bb:84:aa:7c:14:e4:48:84:7c:7f:4a:c0:9c:dd:
                    5f:7c:59:2f:99:3b:c0:b8:9d:01:6e:93:67:63:a7:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F8:BF:A8:44:9F:BB:D9:A5:03:3F:5F:72:6C:92:9D:26:7C:68:33
            X509v3 Authority Key Identifier:
                keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:59:0b:d7:56:4d:5d:ce:10:95:77:6c:a9:e0:99:5e:8b:a3:
         ad:48:4a:4c:b8:ae:ea:71:eb:81:36:ba:5a:e2:fd:92:92:11:
         03:cf:9e:50:5d:d9:4e:36:4f:b1:cb:6e:cf:54:ad:eb:57:34:
         f6:d4:8c:bf:48:d9:f6:17:5f:5c:dd:e1:94:0f:17:22:84:a6:
         ab:75:d1:59:e9:03:8f:32:68:13:e1:21:16:f6:9a:3e:d4:e5:
         b8:5f:72:bd:f3:a8:ab:1c:cd:e4:41:1e:6a:51:de:ed:ec:31:
         f6:5d:43:49:2e:5e:30:e3:64:77:22:30:b7:f7:e1:5a:49:d3:
         d4:b3:d8:99:1e:35:f2:af:15:bd:5b:e3:0b:8e:03:48:ed:b7:
         46:c0:35:4a:e4:74:b3:b9:ca:e2:f5:de:8d:3a:25:20:2c:57:
         2a:b8:87:f6:41:b0:07:1c:cf:42:74:7d:04:47:af:4f:ce:41:
         88:3b:73:7e:e5:72:69:de:eb:65:6e:51:1a:80:ef:c7:40:70:
         e9:3c:40:d9:bc:59:27:62:e7:c1:b6:cc:18:14:57:2f:dc:2d:
         36:ef:09:1e:e3:7f:87:76:e9:b1:b1:8c:da:66:60:a9:10:ff:
         a3:a8:c6:e2:57:27:f5:1d:26:97:92:88:10:44:fe:88:4a:3f:
         e9:84:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:07 2025 by rpki-client