Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File:                     UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier:          guRQwqdblms7k7MgmfvjExQHHSr9FHFOIatDi4xZ0RQ=
Subject key identifier:   49:B3:63:3B:81:8B:EE:62:09:A1:46:D8:87:94:A2:93:AA:04:9E:53
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer:       /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial:       01988D34001CF33301A50C0076310B35D9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number:          1624
Signing time:             Sat 09 Aug 2025 05:00:51 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:51 +0000
Manifest next update:     Sun 10 Aug 2025 05:00:51 +0000
Files and hashes:         1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: RYTKiYqUtGa51FoyLB8ps2P4tleydC48Jxm6NVHvty0=)
                          2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:00:1c:f3:33:01:a5:0c:00:76:31:0b:35:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
        Validity
            Not Before: Aug  9 05:00:51 2025 GMT
            Not After : Aug 10 05:00:51 2025 GMT
        Subject: CN=49b3633b818bee6209a146d88794a293aa049e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:c4:fd:e7:80:64:c2:64:f2:3e:7a:6c:59:
                    78:7a:6f:ae:d7:b3:3c:95:cf:96:db:2e:1c:f9:97:
                    0f:8a:0f:7b:67:6c:35:29:8d:9e:51:34:de:c0:b4:
                    53:fd:d7:66:c8:95:31:d8:45:53:3e:de:e7:47:cd:
                    7b:bf:52:59:06:bb:39:91:cd:40:91:45:0d:af:8d:
                    d5:37:3c:45:8e:30:9d:2e:a1:f9:ba:af:16:f7:e1:
                    34:77:70:fb:32:de:6c:c6:4a:3b:fb:80:a2:16:47:
                    e8:48:22:f0:53:e3:d5:02:53:11:36:d4:67:d3:73:
                    89:19:cb:0f:08:1a:1f:ec:5b:4a:50:f2:88:32:b7:
                    7f:42:01:db:9a:57:b5:0e:45:31:4f:f3:fa:86:41:
                    10:fb:6a:5f:47:25:37:b5:02:06:57:f5:3d:5a:bd:
                    14:c3:71:60:88:18:52:20:3c:fd:63:28:80:2f:66:
                    72:dc:05:60:e2:3d:69:98:26:81:19:c4:8d:8a:e3:
                    7b:e6:0d:52:9e:f1:19:0e:39:ff:40:7d:83:f8:12:
                    a3:e5:a5:2b:ed:d9:64:df:54:8c:25:40:69:0f:10:
                    d6:b0:a2:b7:cd:8d:8b:cd:7e:b7:b5:da:bb:4b:02:
                    a0:55:fd:64:9f:c1:61:bb:15:cb:ad:e5:21:c9:68:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:63:3B:81:8B:EE:62:09:A1:46:D8:87:94:A2:93:AA:04:9E:53
            X509v3 Authority Key Identifier:
                keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:99:3d:0d:0c:d3:66:bf:96:98:55:ac:47:f9:95:50:ee:
         8f:c1:fa:be:e8:a8:17:c9:68:d7:1a:68:8c:fb:18:c2:4d:24:
         4b:ea:7f:9c:3e:99:c0:fa:6a:f7:b8:46:f6:5e:da:9a:8e:a5:
         fc:7e:38:e7:13:69:82:ee:f0:56:70:a5:fa:6f:58:5a:68:0a:
         ce:15:32:4a:ea:07:43:f1:5e:db:5d:49:25:fb:3e:9d:07:69:
         3b:e1:36:2a:52:7f:a6:b7:24:38:41:77:77:09:f5:5b:37:51:
         07:b3:5d:93:bd:62:6c:08:ed:80:af:88:ae:15:90:7c:c3:0b:
         5f:c8:b1:9b:fe:0a:d8:31:29:b9:fb:89:14:21:f9:4d:04:81:
         94:ee:4d:ee:8c:56:52:94:4b:8f:72:0b:cd:ef:7f:5e:8f:ad:
         e0:ce:23:14:28:66:c0:ca:ac:3e:35:fe:4f:ba:0b:de:97:b2:
         57:94:da:f5:20:a7:93:f0:e6:84:fe:77:dd:35:e4:71:8c:a3:
         c4:f7:70:c5:e7:fc:f7:1b:c6:6e:3a:f1:13:be:d6:f3:5d:ef:
         cf:09:da:37:8e:df:42:cb:0b:42:30:5b:c9:b6:a5:1e:12:03:
         ef:ab:28:2b:1c:aa:28:1c:7c:2f:ec:33:bf:63:1b:fe:73:3e:
         76:02:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:18 2025 by rpki-client