Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File:                     Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier:          n8/Wt7GCmdeTJf6Fmk6kRTAdluvgo3KIVoCOIWXuQ+U=
Subject key identifier:   F9:2C:BB:82:95:BC:27:2C:27:45:1A:7D:3F:AC:B2:55:9B:E8:64:B1
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer:       /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial:       01987FAF98AA3BAA216A523474174C9B4AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number:          0C87
Signing time:             Wed 06 Aug 2025 14:01:10 +0000
Manifest this update:     Wed 06 Aug 2025 14:01:10 +0000
Manifest next update:     Thu 07 Aug 2025 14:01:10 +0000
Files and hashes:         1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
                          2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: yn0k1guS0O/lTiSnehlfJxRDxSmzRbv9ipj6TDIGS4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:af:98:aa:3b:aa:21:6a:52:34:74:17:4c:9b:4a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
        Validity
            Not Before: Aug  6 14:01:10 2025 GMT
            Not After : Aug  7 14:01:10 2025 GMT
        Subject: CN=f92cbb8295bc272c27451a7d3facb2559be864b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:18:59:08:6e:07:49:5b:39:01:5d:44:c8:
                    b5:46:1f:fa:6c:92:81:4d:d0:a2:11:f2:49:07:dd:
                    ad:b8:46:ac:aa:e7:f0:e9:a7:b1:30:4f:28:80:52:
                    d9:1f:52:62:5f:86:29:14:54:ab:23:28:48:db:0b:
                    64:e3:f6:46:ba:6b:31:6f:bc:9f:95:32:e6:0a:7c:
                    9d:b9:e3:4b:c4:27:6b:f8:b9:cb:75:f3:dd:1b:e2:
                    15:95:9f:85:58:61:96:96:57:b6:e5:67:f5:01:2f:
                    dd:86:e8:50:a5:67:2a:cf:96:f3:06:77:38:b3:28:
                    da:b6:06:86:f5:b0:8c:3e:5b:bb:b3:cd:59:98:f3:
                    97:33:93:e7:36:91:5b:66:c6:8b:1b:26:eb:b1:3f:
                    2e:24:40:28:42:b8:22:a5:5e:08:bd:80:36:08:21:
                    d2:5a:b9:99:7e:a5:84:97:f7:1b:2c:e9:d9:fa:cb:
                    bd:72:d2:28:9e:49:91:22:59:9e:37:5c:3d:38:bc:
                    35:04:23:ad:94:6b:9d:88:41:6a:32:d7:32:4d:a3:
                    2b:67:7f:5e:52:e4:24:4a:83:7c:f6:64:ac:ef:d4:
                    fb:5a:29:2a:ba:63:13:d3:b5:93:80:a1:70:01:ed:
                    3d:ea:35:1d:70:87:f7:13:96:2d:15:95:f4:b9:9c:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2C:BB:82:95:BC:27:2C:27:45:1A:7D:3F:AC:B2:55:9B:E8:64:B1
            X509v3 Authority Key Identifier:
                keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:19:53:e3:4c:0c:8a:d4:9e:be:2c:1e:5d:4b:b5:0b:3a:
         01:64:74:30:23:71:19:84:f1:6f:5d:0d:4a:8d:f4:87:df:21:
         2d:72:39:e4:04:84:4c:0b:b6:3e:ef:28:ce:73:28:3a:50:e9:
         0b:04:33:79:34:1a:cf:c3:23:1d:e0:d9:70:6e:18:00:12:25:
         90:3f:e7:c1:a5:0b:94:d6:90:a1:af:09:09:a5:5d:f7:a3:fd:
         ff:50:48:69:73:ba:4f:96:78:ec:2e:65:24:5c:28:47:50:38:
         ad:31:d9:1e:77:9e:0a:8a:31:77:6f:b2:1c:f4:7b:91:30:21:
         0d:54:29:b7:68:c9:b3:9e:8f:28:fd:0f:fb:bf:8a:da:88:c8:
         9f:97:5d:6e:3b:fe:08:a0:9e:6a:d6:76:95:72:7f:be:0f:d7:
         0c:cf:09:6c:73:60:96:ee:68:8b:4e:ae:38:14:6d:e5:9d:b2:
         87:1e:56:05:e6:a3:6f:91:37:3e:df:f4:fd:58:8b:8d:74:e5:
         b6:73:92:4f:51:ae:10:8d:cb:e0:3e:85:aa:b0:20:62:5d:05:
         b2:74:ef:e0:85:2f:89:f2:4e:f5:85:9b:17:ef:ee:30:c4:bd:
         ab:ec:8d:e4:0c:f2:58:fe:8f:76:a4:c8:e6:ec:3b:c3:72:4a:
         5e:7b:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:46 2025 by rpki-client