Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File:                     UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier:          63+tS9YH7fqnJNVbyLudeXM6EqnJiHNVATekQD70Fbo=
Subject key identifier:   2C:83:E2:6C:20:96:A6:51:29:F3:C8:C9:F5:44:78:A1:89:FB:7A:E1
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer:       /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial:       01988EEC1A3505AC1EF133B3D0BD4334AE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number:          12B7
Signing time:             Sat 09 Aug 2025 13:01:34 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:34 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:34 +0000
Files and hashes:         1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: +ldOFouOL8oKRGWkbcvFEzij7cU6lZNiot9IzFu818o=)
                          2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:1a:35:05:ac:1e:f1:33:b3:d0:bd:43:34:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
        Validity
            Not Before: Aug  9 13:01:34 2025 GMT
            Not After : Aug 10 13:01:34 2025 GMT
        Subject: CN=2c83e26c2096a65129f3c8c9f54478a189fb7ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:f0:3f:13:31:33:cc:55:49:a4:38:de:df:
                    86:37:aa:85:03:da:63:e1:08:bc:29:65:ba:d0:9f:
                    9b:82:68:0d:39:8c:70:a0:4b:3c:15:df:f1:b5:89:
                    45:97:be:53:56:d2:12:e0:19:f0:7f:41:74:16:50:
                    ef:0c:83:78:65:a8:a1:15:9a:6d:62:52:8a:4b:c2:
                    81:b1:ab:c5:37:03:27:3b:61:83:77:91:77:9b:c0:
                    2c:61:fe:8a:ac:37:24:23:33:3b:df:43:f2:7c:ed:
                    c6:61:8f:17:2c:d5:73:0b:ab:b6:54:e9:09:77:07:
                    f1:7c:33:f7:5b:f7:5d:88:26:d2:3c:8e:ba:8f:18:
                    67:84:31:65:09:f7:e5:49:16:a5:5e:61:5f:49:5a:
                    39:dc:15:02:ff:84:5d:e5:b3:e6:5c:ec:a6:74:5f:
                    5d:c0:0f:32:60:68:75:a0:9a:2c:3f:5f:43:79:88:
                    05:b3:18:d1:31:34:73:af:eb:5c:5b:94:cf:37:30:
                    0d:31:de:e3:fd:4b:48:ad:e7:5a:38:25:58:eb:4f:
                    25:0c:66:da:de:06:33:49:74:7a:a5:f6:ad:8e:d9:
                    c5:d0:f5:41:83:bf:a4:e7:01:9c:3b:35:ca:47:c8:
                    75:f1:85:7a:bb:04:64:e8:2d:e0:04:7b:b5:6d:05:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:E2:6C:20:96:A6:51:29:F3:C8:C9:F5:44:78:A1:89:FB:7A:E1
            X509v3 Authority Key Identifier:
                keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:70:d3:68:58:b9:2f:22:25:5f:50:f2:9d:c6:a3:13:63:47:
         d2:89:44:3c:6e:57:94:ed:c5:12:3f:ab:ab:1a:fd:0e:c1:bc:
         6c:21:ed:2d:ef:31:4e:0c:08:36:3a:5f:fc:1a:90:15:b5:42:
         3b:e1:e3:da:db:b0:27:0c:95:bb:cc:fb:fb:5e:8d:14:4e:fc:
         d7:1a:7c:c2:c1:b3:c9:b3:e4:29:31:7d:15:55:02:e2:7d:f2:
         0f:80:4e:76:d8:22:1f:8e:d0:ea:be:44:cd:e0:e3:c4:74:59:
         03:06:2d:e0:35:9c:54:92:c0:fa:be:2d:4b:93:58:be:70:92:
         b2:ed:99:e0:85:56:19:92:1e:47:3d:93:2c:92:15:65:64:2c:
         27:3a:74:b2:4f:22:1b:ce:98:d3:fd:1c:ca:51:0e:83:ae:84:
         3e:b4:bc:bd:27:96:f4:ef:ab:8e:5e:32:50:32:66:10:53:fe:
         0c:51:9e:38:ff:6e:e9:0a:03:96:6a:4b:36:65:6c:71:7e:ed:
         09:2c:d1:f3:ed:30:60:6b:eb:09:93:eb:ea:81:42:c0:c1:be:
         e5:12:1b:11:b2:0a:d5:04:f3:d6:27:f6:3a:0b:d2:6e:f1:dc:
         aa:da:93:06:b5:76:3d:62:4a:f6:8f:07:e3:e7:68:4c:be:37:
         eb:f1:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:05 2025 by rpki-client