Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File:                     UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier:          rWGVt2lGpD37WB/ZCU8NwxxWvrqu3FLJ3Kz4O39EdBg=
Subject key identifier:   03:02:C1:92:EB:02:A7:4A:DA:E5:2E:B1:F3:FF:91:07:1A:43:F2:64
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       01987FE66A730E4DA038D35F46E2813DA42D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 15:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:03 +0000
Files and hashes:         1: JL64IYR_TQ5Xa-d3oTnZf7vCvf0.roa (hash: c5BJIDGV82v4laDV3iiKoaLBLmXbJfkmjmJFVhYfRik=)
                          2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: qkFobhcl3JyMAnUyhLVAagMs3wI2kmCOfKxijy3oFYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:6a:73:0e:4d:a0:38:d3:5f:46:e2:81:3d:a4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Aug  6 15:01:03 2025 GMT
            Not After : Aug  7 15:01:03 2025 GMT
        Subject: CN=0302c192eb02a74adae52eb1f3ff91071a43f264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:f6:8c:4d:c2:ee:1d:02:2a:be:14:9a:d8:
                    d5:ab:50:16:88:c2:f8:f7:9d:14:55:99:c6:10:98:
                    96:c0:ca:41:15:be:ce:78:16:4e:c6:83:47:72:45:
                    93:e3:75:5b:5c:6a:f8:8b:6f:6d:e4:22:70:11:fd:
                    b7:27:32:a2:fc:4f:0e:a5:f2:0a:77:4d:9f:af:89:
                    5a:2e:df:98:7a:6d:01:73:b5:13:9f:10:1b:10:86:
                    a7:67:8a:03:bb:84:60:4f:79:3b:f7:5a:e8:4c:e5:
                    e3:8f:65:b5:65:fd:82:fd:50:5e:f9:5a:79:10:e4:
                    53:97:26:0e:3e:d2:12:e1:75:bf:dc:88:77:e5:92:
                    2d:0c:07:1b:8b:51:05:cb:a7:3d:1a:25:a7:76:81:
                    4f:2c:34:b1:68:3a:52:a3:04:ee:14:56:bb:54:64:
                    48:01:90:cd:30:59:37:e9:f0:f6:7f:9f:27:2c:b2:
                    31:69:c2:80:fa:b7:65:5f:92:40:f6:25:9a:b2:55:
                    a5:de:f8:53:d4:8a:2d:c1:dc:e2:1d:d8:06:d9:8c:
                    9e:06:94:5e:4a:eb:61:88:13:b8:1f:5b:db:bd:93:
                    ca:47:71:56:2b:4e:b1:d2:61:3c:3d:87:15:2e:9c:
                    4f:ec:65:6b:ef:7e:a3:dd:38:a7:c1:f9:ad:cc:ba:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:02:C1:92:EB:02:A7:4A:DA:E5:2E:B1:F3:FF:91:07:1A:43:F2:64
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f1:2f:4e:e4:62:a5:5c:42:1f:e2:89:bf:c0:2e:fc:58:99:
         8e:0d:a7:dc:ac:43:cd:bc:aa:32:1a:52:f7:08:62:38:30:86:
         8d:49:94:bc:8f:73:59:8e:b5:01:8a:27:3d:1b:e9:2d:4b:5c:
         22:8c:84:50:9e:95:6f:6f:9c:4a:dc:52:d8:7e:63:1d:1d:7a:
         fa:9a:3b:21:3d:33:89:a0:e4:9d:73:1e:be:14:94:c1:43:08:
         21:95:3d:bb:70:91:10:4e:81:a6:5a:10:49:66:1c:74:79:ee:
         7b:2e:16:38:e1:24:71:08:94:20:5f:ec:50:79:89:3a:35:a6:
         66:1b:0e:71:f4:d9:fd:70:8e:a8:dc:bb:b1:dd:a1:6a:b8:bb:
         bd:c2:fa:e9:d7:f0:c2:99:c1:6e:19:4b:65:ff:fb:e5:0d:53:
         3a:bd:e6:28:5b:03:28:2f:26:7a:59:48:5b:a5:7f:43:49:c7:
         d6:bb:dd:e0:dc:2b:3b:47:35:0d:bb:9e:5b:36:26:1b:81:2f:
         0b:d0:41:93:dd:c7:f7:e4:ef:8a:6f:ff:db:d0:00:86:24:80:
         16:d6:ec:4d:f5:a1:25:97:d0:b5:4a:ce:ad:93:ef:ef:a5:f0:
         03:2d:97:d9:24:96:6f:5a:5b:9b:67:b6:72:a1:79:3c:52:c9:
         1a:8c:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:33:35 2025 by rpki-client