Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File:                     uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier:          WeUeoIgbMQVJXgREFxH1Mjg3D2Uai2GsZNxxK1tVL28=
Subject key identifier:   9B:F6:3E:0D:BB:7B:6F:4A:6A:AA:5D:2A:D1:F7:8A:2C:E3:35:88:E1
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer:       /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial:       019874194D14B8C46896F0C239570ED19144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number:          0A30
Signing time:             Mon 04 Aug 2025 08:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:11 +0000
Files and hashes:         1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
                          2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: XHaVQvAaEaghUVjat4f4txr/6sOzX5OEZPwnQwfZQXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:4d:14:b8:c4:68:96:f0:c2:39:57:0e:d1:91:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
        Validity
            Not Before: Aug  4 08:01:11 2025 GMT
            Not After : Aug  5 08:01:11 2025 GMT
        Subject: CN=9bf63e0dbb7b6f4a6aaa5d2ad1f78a2ce33588e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:2e:c4:41:17:24:ea:39:76:3e:21:ba:fe:
                    43:f0:b3:77:ce:c1:20:c0:92:dc:ad:1b:cd:94:0f:
                    c9:8b:94:0d:a1:8f:35:b3:ab:41:75:5a:dd:01:2e:
                    ae:5f:49:06:7e:fe:d4:ee:1b:cf:9f:0b:d1:9c:70:
                    af:19:11:58:3d:f3:0e:11:11:18:f0:bb:28:ea:df:
                    4b:90:3c:10:17:c3:e3:7c:ac:bb:39:dd:af:b9:8c:
                    51:36:42:71:d1:de:ce:fd:52:83:7e:1f:99:74:ba:
                    c8:05:ae:cc:42:72:e2:c4:ed:5b:71:2c:49:d8:14:
                    e2:c8:20:88:c3:e1:ec:ab:6f:02:82:2d:24:15:83:
                    02:e3:67:fd:0e:be:e8:bb:99:ef:48:af:c9:c2:a2:
                    0e:12:dc:9c:52:8f:84:65:c0:1b:07:0d:70:21:97:
                    44:87:ae:4a:61:90:16:0d:5d:a6:cb:ee:20:75:19:
                    d0:f5:82:4a:83:6e:57:3d:12:87:22:59:ef:23:8d:
                    d0:88:34:f4:b7:5f:ea:a6:ed:e2:17:d7:8d:05:e7:
                    b3:a7:c9:20:7c:44:af:4c:10:26:88:96:f8:e8:2a:
                    3a:09:80:1a:14:bd:aa:7e:67:73:e0:52:39:75:ea:
                    ed:b1:e6:f3:9e:b5:7d:df:63:e4:70:0e:b2:18:0b:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:3E:0D:BB:7B:6F:4A:6A:AA:5D:2A:D1:F7:8A:2C:E3:35:88:E1
            X509v3 Authority Key Identifier:
                keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:b7:84:86:57:60:74:6b:a7:f7:e3:12:16:f3:6b:1c:a7:
         88:29:f0:69:df:eb:6a:51:00:e9:03:2f:66:c7:41:e8:64:44:
         63:20:6f:1d:fd:19:34:b8:62:9b:b2:9d:e6:7a:65:18:44:69:
         d2:6a:87:10:cc:e5:45:bd:f0:08:d1:3c:98:10:cd:25:cf:09:
         10:6b:a2:bd:3e:e1:09:02:d1:cc:a2:70:ec:44:70:9e:c9:5e:
         44:c9:61:32:af:0d:59:a7:05:72:cb:f5:c4:2a:02:42:96:1f:
         da:76:b2:fb:ec:e9:03:8e:c4:80:b9:c3:ef:f8:56:f6:1e:32:
         56:80:f4:e0:9e:76:10:5f:4b:64:a4:cb:db:d3:66:36:0e:49:
         21:aa:05:a3:ea:84:cf:9a:32:73:4a:92:29:fb:06:f5:0c:66:
         8f:f5:f7:4e:33:5b:a6:ff:a2:f9:ce:80:db:b0:b5:90:da:84:
         ee:c5:75:a8:be:d3:5b:32:1d:af:a9:55:97:54:a1:a4:b2:48:
         b3:ab:9f:ba:5d:bf:95:cd:94:ab:fa:2a:be:90:a5:02:b0:c6:
         a5:d8:77:fe:6b:e4:82:66:95:27:80:ac:07:8d:69:ff:3e:f9:
         2a:c6:2f:e1:ee:7e:70:17:23:a5:db:44:c4:35:08:a5:14:6e:
         dd:2f:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:19 2025 by rpki-client