Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          ZYs2HYeAlp8QQBtJregAV6nEoAIdU9P9b0rwyzTW/QU=
Subject key identifier:   12:9E:56:57:4A:71:B2:4A:02:74:36:10:3E:FE:CF:1B:79:1B:2E:5B
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019893DADFA8766CC56CFC7C20BAC7AF1018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          12B9
Signing time:             Sun 10 Aug 2025 12:00:51 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:51 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:51 +0000
Files and hashes:         1: 6qEQVs9RJhELhTSt-yx6PdqTH4k.roa (hash: MJPHmKEomDKDrIf3X9T4A591PCDIN9biU5Xak896EvA=)
                          2: SWCjjUaxCAvLsIqlq6JIIAKsNyg.roa (hash: IheYNJ5DBR2ARWU4KPU8QmLGQuMxzruzWVG2AoLba3s=)
                          3: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          4: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
                          5: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
                          6: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          7: jOJMuOf3wW9QD0EWILNZcKmfsMY.roa (hash: IwHFADa8djjRXX5pH/rvBdr8XX2U2mjyDg3i8wc0tqI=)
                          8: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 93+UU6CdSYbvNpOrsQeRvaQT8xOf8H8E26xmrC/q6Vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:df:a8:76:6c:c5:6c:fc:7c:20:ba:c7:af:10:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Aug 10 12:00:51 2025 GMT
            Not After : Aug 11 12:00:51 2025 GMT
        Subject: CN=129e56574a71b24a027436103efecf1b791b2e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:69:63:45:a1:1a:de:c8:ca:40:ae:92:2c:
                    d1:87:18:b4:37:b3:30:d2:1f:b2:b3:5d:bc:2b:3e:
                    3b:3b:e2:53:43:e0:c0:67:73:4b:ce:c5:cf:97:b0:
                    bf:9d:3c:3e:72:e2:6f:37:ad:31:95:f6:be:f0:f1:
                    2f:21:bd:bc:b7:4c:17:4c:04:90:0e:f5:b9:74:e1:
                    58:58:06:f8:dc:fe:84:72:08:9c:f6:83:0f:ba:06:
                    62:d7:10:62:cd:5a:a4:e6:6e:40:21:8d:82:17:07:
                    72:26:50:65:52:b8:aa:c6:11:70:98:92:11:b3:0c:
                    f0:24:e4:ac:0b:1e:9c:21:a3:6c:8f:81:38:67:87:
                    a2:e2:07:26:36:ba:43:1b:10:94:fd:58:e7:77:d4:
                    07:86:67:7c:70:dd:d1:26:1b:60:47:77:da:d7:83:
                    ce:b0:db:5e:bd:35:cc:a2:cc:e2:06:4e:9a:1b:0d:
                    d3:9d:13:2f:5d:df:7c:13:b9:24:54:ef:6c:02:d5:
                    a2:9e:eb:76:77:8a:60:bf:34:80:ff:6a:33:ed:3a:
                    f4:09:6a:c2:c0:fc:96:d6:df:bf:06:6e:eb:12:16:
                    59:af:1f:22:f0:47:2e:a5:9e:12:f9:d0:45:2e:35:
                    65:b1:21:48:c8:d7:4c:42:9b:f0:82:f1:d7:03:cf:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9E:56:57:4A:71:B2:4A:02:74:36:10:3E:FE:CF:1B:79:1B:2E:5B
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:f0:21:43:ce:25:45:8c:af:ab:de:c8:38:3c:ec:9e:13:
         36:e6:66:0c:49:1c:7b:28:0e:d8:f7:9c:ef:c5:2b:39:69:6f:
         7f:b4:98:fe:d8:8e:97:21:85:21:67:8d:86:f2:37:ab:9b:c5:
         ee:03:2b:dc:f3:a5:06:11:3d:c5:ac:85:41:67:5a:84:5d:52:
         c3:e4:0c:d5:03:1a:e6:eb:f2:b8:7c:48:22:7c:2d:29:51:34:
         2a:21:ce:e7:26:55:64:b6:7a:fb:fe:b1:bf:36:31:46:bc:72:
         64:a4:20:82:f6:ba:20:86:3d:31:0e:7f:93:83:b8:1e:cf:74:
         11:89:4e:14:82:c4:cf:2c:8e:21:88:cf:97:11:0f:e5:a4:46:
         ad:bd:39:b1:c2:2e:ac:35:c7:e7:63:a0:e3:b2:d1:cb:23:9f:
         23:58:5f:43:75:ff:65:a3:fb:5d:27:ed:51:29:05:3c:f0:0a:
         e7:0f:77:59:95:7f:31:ff:31:fd:c5:94:b0:dd:63:8c:04:9d:
         b7:5d:56:da:29:ab:7d:e2:a2:64:59:a1:e7:ac:e9:10:c4:6d:
         6f:98:f0:74:27:10:71:bd:67:14:22:f4:9c:ce:07:b3:1d:35:
         33:3a:ca:ff:ac:bd:cf:80:ae:57:0c:6f:a7:d1:b8:62:e3:b2:
         6c:c8:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:54 2025 by rpki-client