Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File:                     uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier:          GSwyty4QRqYoOjbZKwzQlgFDy0crcRunaV5FtvMm6mI=
Subject key identifier:   04:46:1C:EE:D2:2B:FF:FE:70:12:EF:45:28:78:ED:C8:AA:EF:50:55
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer:       /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial:       0198A1966F8974DDB350BE5F64CBC966220C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number:          08E4
Signing time:             Wed 13 Aug 2025 04:00:47 +0000
Manifest this update:     Wed 13 Aug 2025 04:00:47 +0000
Manifest next update:     Thu 14 Aug 2025 04:00:47 +0000
Files and hashes:         1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
                          2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: irbIcAcw33ORQAKQjX/0FLIe8E33ofRNP6yRCkdjsKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:96:6f:89:74:dd:b3:50:be:5f:64:cb:c9:66:22:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
        Validity
            Not Before: Aug 13 04:00:47 2025 GMT
            Not After : Aug 14 04:00:47 2025 GMT
        Subject: CN=04461ceed22bfffe7012ef452878edc8aaef5055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:51:dd:31:6d:0c:b1:00:8c:16:76:cd:0b:
                    84:b3:4f:5d:df:e7:77:32:c1:08:11:6f:93:08:86:
                    c4:45:2c:4c:ec:8c:a6:f5:75:22:c9:db:9c:ed:67:
                    ef:f6:29:00:a4:56:2c:6e:97:91:04:b8:66:b1:92:
                    b9:70:4a:e3:e0:34:c9:9b:37:40:63:2d:ae:9c:74:
                    93:d8:10:27:2a:2b:7e:20:2d:f0:3f:22:da:42:72:
                    b4:a7:0d:b4:b8:e9:e3:13:ba:47:6e:c4:68:b1:3d:
                    02:00:60:e7:62:3d:72:f4:2c:21:2e:76:ed:ed:b8:
                    b2:0a:1f:fa:fd:7c:33:6e:b5:ab:4b:07:d5:55:af:
                    76:bd:04:74:37:a2:59:22:d5:08:fb:47:a7:31:1b:
                    00:62:0a:bb:2c:ac:2b:af:51:2d:10:e8:50:53:38:
                    a1:d5:25:94:7a:f6:34:59:60:66:45:f0:a1:c7:2a:
                    4b:c3:fc:9f:f2:39:bb:fe:e6:ff:80:63:8f:0c:b9:
                    23:fc:90:58:10:57:b8:54:02:6c:62:0d:fb:0a:01:
                    06:54:b8:b8:d1:47:ea:e6:40:d5:34:a7:2d:8d:47:
                    6b:53:af:a1:13:bd:ca:2c:81:7a:5e:70:e2:fb:9a:
                    99:bd:6c:3d:57:ad:fb:7a:ff:df:be:32:16:ea:f7:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:46:1C:EE:D2:2B:FF:FE:70:12:EF:45:28:78:ED:C8:AA:EF:50:55
            X509v3 Authority Key Identifier:
                keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:69:89:cb:57:58:1f:cf:7e:38:73:70:46:cd:a4:e8:c8:
         7c:35:28:55:e8:9e:b5:27:21:0a:ad:4c:ea:65:22:ef:61:55:
         76:74:c2:65:50:57:a5:88:67:37:9e:af:26:30:54:f3:14:fa:
         98:fb:33:da:2e:71:90:05:01:fb:40:4d:7b:88:d5:d4:6d:ed:
         3d:9a:e3:85:c8:41:38:c9:47:ba:98:68:9c:e3:fc:84:80:7a:
         a7:05:a4:b6:25:83:f0:8d:dd:f1:16:5e:fc:43:dc:cf:48:db:
         c0:a6:0b:16:46:ef:73:e9:da:06:c4:64:b9:d4:fe:8f:62:a7:
         7c:11:86:9e:b9:33:0d:b8:72:7d:25:c4:a1:4b:21:61:f7:26:
         3e:ed:97:90:01:49:b1:ae:d6:0a:6f:f3:2a:ef:db:d2:6a:62:
         33:61:45:8e:ed:ba:7b:71:2a:b7:34:c2:df:83:c1:b2:bd:20:
         af:6e:09:b4:ee:7e:76:f5:f6:09:03:3a:16:d8:eb:97:db:ad:
         d5:de:20:68:7c:d3:8c:c9:dd:e0:c7:79:65:f4:63:d8:c3:81:
         16:7b:50:fe:0c:04:7f:7c:c2:3e:0f:56:ae:56:42:88:d2:45:
         a8:c6:b8:2a:c9:a2:4a:4a:04:76:8e:45:67:42:a5:76:1a:10:
         65:16:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:29 2025 by rpki-client