Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File:                     UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier:          Trj3+ikuZ0pvs5N/AfGZS+KBwnVtH6dD0/rPO9Xu9KQ=
Subject key identifier:   A2:AB:52:56:36:78:49:67:40:0D:30:87:3D:40:C0:87:46:5B:93:62
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer:       /CN=5336107179715609dca422bc07a098468c529452
Certificate serial:       01988C8F45AE4BCD160B0FF76E974F1B9C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number:          1633
Signing time:             Sat 09 Aug 2025 02:00:56 +0000
Manifest this update:     Sat 09 Aug 2025 02:00:56 +0000
Manifest next update:     Sun 10 Aug 2025 02:00:56 +0000
Files and hashes:         1: RUQaxYKvLWtplW7yHI6TR3XEkQE.roa (hash: XDQ+7CQl5GASmirk7HcC4w80DGZtYXJDshkFg3byREs=)
                          2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: hUmnEg2DN5n+MwjcyAkMVgDU1PcsobyewSyHOTYhreA=)
                          3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:45:ae:4b:cd:16:0b:0f:f7:6e:97:4f:1b:9c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5336107179715609dca422bc07a098468c529452
        Validity
            Not Before: Aug  9 02:00:56 2025 GMT
            Not After : Aug 10 02:00:56 2025 GMT
        Subject: CN=a2ab525636784967400d30873d40c087465b9362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:10:3d:d8:6a:93:e4:bb:00:05:9e:6d:6a:
                    23:29:58:21:a5:c8:5e:76:f6:7a:2d:bd:e2:3b:fd:
                    4e:4c:9f:95:e1:24:f1:4e:ee:ac:b8:3a:2f:82:b8:
                    c3:c6:51:fd:a2:2d:69:08:8e:99:71:34:a5:29:f7:
                    bb:94:6c:c8:01:06:73:c5:32:48:51:bd:a9:92:f7:
                    f6:68:b4:51:26:0d:48:c3:d1:00:21:b4:35:b7:54:
                    98:60:99:88:80:6b:88:9e:73:79:d0:46:de:2f:3f:
                    f0:13:02:4c:df:14:32:8d:93:0b:e0:7d:43:56:8f:
                    b7:11:cf:6c:ba:63:83:47:95:85:0c:81:da:75:d1:
                    27:92:fd:25:71:54:5f:a8:20:10:09:5a:d4:c0:a8:
                    0e:1c:2d:c4:b9:ca:6b:0d:2b:80:e1:ca:db:ce:24:
                    6a:48:51:a8:9a:68:06:25:52:26:a4:bc:ab:eb:93:
                    ea:9d:54:be:31:be:b5:c4:c5:76:ad:ee:38:2c:f1:
                    97:44:90:fd:67:e7:87:dc:41:d8:c5:93:36:3b:87:
                    4f:00:70:45:cc:1b:52:33:91:ea:f5:9a:8f:84:6a:
                    c1:d7:22:b7:b0:70:c3:72:78:b4:4d:aa:24:cb:14:
                    68:1b:50:6a:61:f4:31:aa:4a:f8:24:a2:58:a7:3b:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:52:56:36:78:49:67:40:0D:30:87:3D:40:C0:87:46:5B:93:62
            X509v3 Authority Key Identifier:
                keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:5d:95:68:32:d0:a4:e0:28:a3:98:0c:0a:82:df:26:be:
         51:4a:11:93:29:54:ac:bd:4c:7e:10:1a:5f:bf:eb:42:63:f5:
         af:df:95:81:85:df:6f:a4:97:a1:86:05:0c:47:9c:cc:43:a4:
         1d:2d:ff:c7:b6:26:85:9b:73:e6:ff:b5:e0:8a:84:36:b6:4e:
         5a:d6:84:22:41:38:e7:b7:8b:cb:48:58:8f:2b:7a:38:71:13:
         4a:0a:4d:7f:ff:61:f7:76:ec:3d:2f:99:00:1c:df:f9:1d:ba:
         68:de:b0:89:5a:0b:01:b1:07:14:71:ea:16:8b:af:de:dc:64:
         a2:42:58:ab:21:3c:38:4f:6b:34:e4:f8:c4:c0:31:c4:a2:ea:
         c6:f7:53:c0:35:22:bb:3a:a2:47:13:1a:af:c4:1e:22:7f:2b:
         67:90:f8:ab:40:b3:c1:6d:cd:94:8b:af:96:ce:10:16:15:2b:
         42:0e:26:ad:e7:f1:97:95:57:7e:ee:f9:a7:0b:d4:54:55:f7:
         1b:87:89:56:bb:62:6e:5e:21:3f:16:b2:3d:d3:dd:62:fd:8f:
         a6:c5:d8:50:07:67:99:75:4b:5b:3b:81:28:8d:36:07:c1:27:
         76:49:f6:e2:2e:86:0b:f7:d3:42:30:c5:d8:b0:10:98:8d:f6:
         59:9c:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:47:58 2025 by rpki-client