Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File:                     UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier:          vjoipd5EYuaP2yvCUFUV1EFYa+xOr2FoKVqSBP/kkJY=
Subject key identifier:   AE:BE:D0:5D:99:E9:3B:53:AB:5E:45:F7:F4:EA:92:49:19:D8:CD:7E
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer:       /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial:       01987298BB33FE03E0436F30201699025813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 01:01:08 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:08 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:08 +0000
Files and hashes:         1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
                          2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
                          3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: TaA3rxO0yIPNh8YmyrqXLK8CqHdFeZz90NyAubSWKIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:bb:33:fe:03:e0:43:6f:30:20:16:99:02:58:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
        Validity
            Not Before: Aug  4 01:01:08 2025 GMT
            Not After : Aug  5 01:01:08 2025 GMT
        Subject: CN=aebed05d99e93b53ab5e45f7f4ea924919d8cd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:55:aa:05:9e:ed:f5:c4:02:5d:c1:e3:d8:
                    64:90:e8:aa:82:c4:d3:c6:9f:f3:7b:a2:fb:11:05:
                    76:61:81:3e:1a:af:7b:a8:89:05:da:4c:3e:7e:f2:
                    4e:94:93:38:a8:85:91:e4:3a:7a:11:e0:23:d0:47:
                    80:71:df:81:ee:42:1f:ac:dc:9b:57:fe:bb:39:99:
                    6c:fa:33:61:6f:05:40:e8:55:01:e5:3e:ec:d0:7f:
                    45:57:6f:cc:ce:d6:ca:72:d3:d8:7f:ba:6c:2c:83:
                    fc:3e:29:38:ad:89:ad:9e:7d:4c:e6:ed:75:76:f8:
                    0d:c4:a3:fb:51:29:0c:8e:0c:37:56:39:61:0f:6f:
                    00:eb:80:07:5d:bf:c9:e0:87:61:98:d2:42:c9:7b:
                    76:f2:13:a8:bd:5b:91:5b:b3:ee:f9:2f:03:f4:6d:
                    ec:e9:0e:65:b8:fc:0d:57:91:fd:6a:70:1f:f6:ba:
                    3f:51:64:8c:19:c0:dc:83:ae:4e:fa:8d:ee:82:b0:
                    35:80:d0:10:0f:1d:ec:78:ae:72:19:2b:05:8c:63:
                    3e:7c:52:d3:81:3a:14:5a:fd:89:13:b4:e1:f8:8d:
                    e9:62:9c:3f:cb:bc:d8:71:24:4d:88:7c:36:22:3e:
                    76:96:63:6d:e4:bc:fc:6d:49:f7:3f:9f:88:aa:73:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BE:D0:5D:99:E9:3B:53:AB:5E:45:F7:F4:EA:92:49:19:D8:CD:7E
            X509v3 Authority Key Identifier:
                keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:b3:7f:89:c9:7a:94:e6:eb:6f:6a:fa:72:a3:58:be:e2:
         fe:c4:f5:58:ba:d7:63:f7:97:7e:b8:f8:c8:87:cd:ca:1e:4a:
         64:23:e2:ef:fa:c9:a9:47:f8:9a:c3:7d:7d:5b:8d:03:b5:4a:
         b4:fb:c0:8e:ed:ce:e3:87:32:d1:d0:d3:09:f7:7d:bb:54:cd:
         82:24:14:94:0d:88:d6:86:44:f4:3b:2a:73:e3:62:9d:2b:e8:
         de:e8:1c:92:e7:fd:fa:9b:77:44:c1:c2:06:4b:88:36:d1:c7:
         be:95:a9:13:b1:44:e8:2a:ab:ab:e2:a2:2b:e6:30:7a:d1:6b:
         c8:d5:91:ed:4e:c8:cd:0a:a9:ff:7c:d3:65:ab:a1:61:24:6d:
         19:a8:13:91:1c:84:d0:62:43:d5:dc:8e:51:53:85:86:1d:bc:
         c6:fd:74:60:82:bd:c5:2a:be:6f:8e:6a:c7:9a:4b:57:fb:bb:
         9f:86:d6:04:db:d7:7f:ae:50:9a:bd:f9:d5:da:59:81:76:1b:
         be:84:95:5b:82:0d:e9:52:8c:b6:8e:57:2d:4c:3a:f2:5d:38:
         f7:ba:79:fc:f1:5d:17:50:3f:27:55:b9:a2:b7:74:e8:a4:01:
         18:a8:a3:85:33:c0:c2:89:e9:ce:ae:31:d8:43:55:bc:32:5c:
         fe:57:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:35 2025 by rpki-client