Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File:                     uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier:          /MrlxAYvAXuyrmeU7gjyqN73TNZAjaYcwBbpyiNFA/Q=
Subject key identifier:   5C:2D:44:4C:FD:39:60:9E:A6:22:37:41:46:58:BE:49:75:3B:3C:2C
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer:       /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial:       019873E38E58F8D2BA313E6175DA39E7E23D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number:          02E4
Signing time:             Mon 04 Aug 2025 07:02:29 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:29 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:29 +0000
Files and hashes:         1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
                          2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: ClqpageVXn3u35otRz7KjYwicvan79PtNjI3texen3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:8e:58:f8:d2:ba:31:3e:61:75:da:39:e7:e2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
        Validity
            Not Before: Aug  4 07:02:29 2025 GMT
            Not After : Aug  5 07:02:29 2025 GMT
        Subject: CN=5c2d444cfd39609ea62237414658be49753b3c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:eb:cf:9e:b5:26:ff:17:41:9c:4b:eb:f4:
                    0b:b8:f6:54:2b:fb:5c:86:7a:a5:12:b2:70:85:8a:
                    79:39:60:e7:f7:89:1d:86:82:b2:a8:bc:07:8b:67:
                    3a:a5:d4:16:e3:80:41:1b:64:56:02:fe:9b:51:1d:
                    52:87:97:43:3b:48:02:5e:f3:59:e5:79:c6:88:36:
                    1b:32:1e:f0:ba:64:9d:85:63:d5:a0:31:24:96:cb:
                    3c:83:35:b1:87:65:3a:9e:f5:91:a4:78:0c:49:07:
                    17:25:5a:e5:d9:08:36:12:61:93:84:87:22:8b:a1:
                    9f:90:f3:68:60:e1:28:6c:21:dc:23:9d:6a:11:fb:
                    9e:7d:99:e8:3e:a7:b3:cd:80:dd:73:30:b7:08:27:
                    c8:44:69:b1:a8:ff:f3:9d:b5:a2:12:17:cd:70:b2:
                    96:31:90:4a:fb:78:e1:00:9b:8a:85:71:e7:0a:dc:
                    cf:88:df:f4:bd:12:13:a9:c3:e7:ad:d5:87:83:3a:
                    6c:4d:7e:ab:a1:59:4a:15:fe:8b:0b:f7:aa:07:b1:
                    32:31:f4:4b:f6:fd:7f:95:01:ba:85:22:d9:0f:8a:
                    4b:e1:06:5e:e2:99:9d:57:7e:22:e2:b3:60:de:94:
                    df:d8:21:19:65:cd:39:72:2d:f2:18:59:65:f9:dd:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2D:44:4C:FD:39:60:9E:A6:22:37:41:46:58:BE:49:75:3B:3C:2C
            X509v3 Authority Key Identifier:
                keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:25:53:85:84:91:e8:26:e4:3a:3a:aa:be:fe:c2:8f:2f:
         48:a6:07:8b:81:c4:b7:b3:a5:93:e6:29:24:44:ef:d4:34:6c:
         58:53:8e:09:84:2d:8f:2a:8c:3c:61:f6:07:5e:f2:ef:28:71:
         d3:4e:98:78:7d:44:f9:6c:65:a8:be:13:c2:56:60:c5:51:f7:
         eb:11:8a:4a:e5:48:75:7d:86:cf:9e:95:83:cd:3a:c6:d1:e0:
         28:c2:e7:c3:57:82:ec:26:6f:3e:4f:23:4e:f5:9e:d5:b6:61:
         c3:ae:be:31:67:98:61:c0:c7:da:22:9b:57:3a:58:a4:c9:f3:
         34:45:11:89:f2:ab:d9:e1:da:c7:77:3e:47:bd:05:f9:63:1c:
         4a:36:e5:e7:4b:0d:6b:80:34:aa:7f:b3:15:59:9f:7b:4a:73:
         69:7b:20:db:77:2e:13:12:f0:d0:ca:3f:ba:0e:b5:de:15:cf:
         d2:c8:ff:5a:b6:78:b0:45:31:0f:ba:cc:a7:9b:76:c7:bc:de:
         83:11:5c:cf:d7:46:2f:fa:75:73:40:8e:c9:cc:ca:45:23:aa:
         b8:d1:68:31:25:13:a0:4c:92:d5:dd:9c:6e:f1:23:64:b6:19:
         ed:78:26:2f:60:b2:09:1a:fc:98:7e:d0:10:d3:36:8a:4b:fb:
         4a:2e:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:32 2025 by rpki-client