Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File:                     UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier:          BMfKZI8LS+k/HICTjJBdlR5DcUljYv+o9eg9O7tkF7g=
Subject key identifier:   88:EC:BC:A3:DC:31:44:74:28:8B:4A:22:C8:3C:92:7A:B1:7C:A7:BB
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       01989592F69F8F287FE9FAAA2979F4730D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number:          14E6
Signing time:             Sun 10 Aug 2025 20:01:33 +0000
Manifest this update:     Sun 10 Aug 2025 20:01:33 +0000
Manifest next update:     Mon 11 Aug 2025 20:01:33 +0000
Files and hashes:         1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: RgzgnLZiqBgvPx6oZIQKZZrXB08frTp1DIb2p1rNd/c=)
                          2: g55b--8xGOqoYXLjLnaTyHnX4ok.roa (hash: t4ttlEmgTzHuBKLqIKA24lhz9Va1EpEHdAWptFncJVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:f6:9f:8f:28:7f:e9:fa:aa:29:79:f4:73:0d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Aug 10 20:01:33 2025 GMT
            Not After : Aug 11 20:01:33 2025 GMT
        Subject: CN=88ecbca3dc314474288b4a22c83c927ab17ca7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:24:9b:39:fc:6c:b0:0a:14:60:21:3e:ee:d9:
                    9e:3c:88:6b:45:f3:2b:f3:a1:3a:9e:5b:91:0d:a7:
                    bd:7e:cd:8e:69:ac:af:a9:89:e4:46:de:78:81:a6:
                    98:a4:35:4d:f2:a3:c0:c0:5a:f7:27:dd:76:54:6e:
                    38:a0:f5:fd:8a:fb:3a:36:60:c2:40:6c:ef:f5:42:
                    58:cc:d4:4c:ea:74:f0:a0:28:dc:a5:4f:1f:e8:48:
                    e4:f9:5a:4e:f8:51:af:a3:fe:7b:89:cf:8d:3b:bd:
                    bf:b6:bb:d7:4d:5e:75:25:17:31:f4:47:26:94:32:
                    09:ce:da:69:9e:00:23:6c:9b:82:c6:25:75:7f:6d:
                    22:35:7a:fd:66:31:e8:b8:42:bb:a0:dd:4e:d5:e1:
                    b6:9e:8a:75:ff:9c:cb:88:1f:6e:7e:23:69:44:d4:
                    42:7c:cd:3c:1a:a9:a4:dc:fd:a2:94:8b:59:48:6e:
                    3f:45:54:dd:15:49:d3:62:e3:10:00:4c:03:05:21:
                    4c:4e:35:83:eb:10:f3:ce:f0:38:14:16:7c:e8:0b:
                    78:9f:e3:0f:64:3b:29:f0:9c:a2:cf:06:8e:f6:b6:
                    15:27:03:79:bc:cd:94:88:7b:26:f1:f7:9a:89:9e:
                    da:a5:b4:8d:5f:bb:65:db:2b:10:7a:60:cd:65:a6:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EC:BC:A3:DC:31:44:74:28:8B:4A:22:C8:3C:92:7A:B1:7C:A7:BB
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:0a:8b:f5:93:cf:a3:39:bc:07:f2:40:02:ca:35:de:8e:
         2a:8b:51:ed:a8:0a:9e:48:70:7e:ef:a4:58:17:d8:96:50:a5:
         86:de:61:b8:6d:5d:96:40:dc:28:e7:46:a2:82:a2:52:64:b4:
         a3:41:6d:6b:da:fa:20:a9:4b:6d:28:fe:2f:f3:b2:4e:87:fb:
         eb:75:68:62:51:25:17:13:85:4d:8b:1c:4c:d2:de:b3:b2:f9:
         4e:49:6f:73:f4:8e:22:97:af:4e:a7:e8:1f:cd:b5:d1:19:28:
         14:c3:07:69:a5:df:02:21:a0:d1:bc:40:c0:cd:9b:8f:a9:bd:
         b2:d9:43:57:0f:9e:5b:b3:ec:a5:f3:33:61:6b:e6:d3:63:94:
         10:9c:48:46:85:7c:9e:61:07:e2:68:3b:b8:8b:d8:cd:4a:4f:
         78:5c:00:3f:f0:b5:6a:11:88:d5:b0:c7:0b:26:d4:63:3d:6e:
         8d:50:6b:63:c8:57:55:59:5f:d5:93:ed:33:31:92:e0:63:47:
         fd:07:da:fd:19:f7:91:f7:e3:ba:4e:d1:14:68:fa:0f:be:8e:
         20:01:cc:06:19:94:1d:dd:2e:19:06:44:d1:e6:71:07:c9:f3:
         13:c8:78:e4:3c:e8:7b:38:91:1f:93:93:6e:6a:97:75:75:3c:
         e3:c9:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:15 2025 by rpki-client