Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File:                     uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier:          jPzNpWnVxM3So0Qzi9OadUQHqc+ZqYHhZHo+ZGXowMU=
Subject key identifier:   C5:B4:B9:25:BC:1B:4F:D3:3C:7A:25:53:D6:4D:C6:0B:AB:42:DE:53
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer:       /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial:       019873E1BD5DD3E38C3CA1C01D18F9232E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number:          CC
Signing time:             Mon 04 Aug 2025 07:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:30 +0000
Files and hashes:         1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
                          2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: jkVpig+HrLetDqiKUYrU2ft2PSeNE2SRbQYwpqDlURI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:bd:5d:d3:e3:8c:3c:a1:c0:1d:18:f9:23:2e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
        Validity
            Not Before: Aug  4 07:00:30 2025 GMT
            Not After : Aug  5 07:00:30 2025 GMT
        Subject: CN=c5b4b925bc1b4fd33c7a2553d64dc60bab42de53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:3a:ab:ed:b7:0a:1f:a3:0d:93:01:68:a6:
                    06:2b:b0:46:aa:84:90:61:fb:fd:e0:92:fd:1b:44:
                    db:7d:a7:69:6f:fc:12:5b:61:ed:8e:ea:89:54:8c:
                    ac:f9:ce:4c:ff:ce:4a:46:72:ec:f4:e2:eb:67:89:
                    9b:b7:d4:49:40:61:95:ea:d0:17:7a:08:9f:b8:1b:
                    6f:38:46:ed:ef:e7:d0:0a:41:dd:ee:a9:07:75:5b:
                    94:0c:aa:dd:8b:66:56:e6:d2:c8:91:16:31:60:76:
                    0d:36:d9:42:75:fe:d8:ed:ab:c7:92:86:87:f1:ea:
                    9b:0d:e9:44:f7:bf:96:0e:85:e6:4f:e5:07:34:1c:
                    35:8c:02:62:55:37:09:e4:0f:f7:44:ff:64:41:b4:
                    a0:46:a7:e8:bf:aa:53:88:e2:b5:57:a9:a6:2b:2d:
                    3c:85:f8:32:42:93:f1:b8:36:e7:ef:a8:ff:0b:40:
                    2e:35:6b:e6:90:e9:1d:4c:75:a1:4a:5f:6c:6e:fc:
                    4c:09:82:ee:35:66:d2:b6:d5:58:4f:cb:53:b2:37:
                    ca:64:59:d3:ff:f3:f0:bb:b9:c6:fc:a7:e1:f6:76:
                    2a:cf:fb:11:b8:36:1c:ea:d4:ef:e4:e6:c5:4d:30:
                    59:7f:79:06:66:71:2f:ac:d4:25:8b:33:47:e1:90:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B4:B9:25:BC:1B:4F:D3:3C:7A:25:53:D6:4D:C6:0B:AB:42:DE:53
            X509v3 Authority Key Identifier:
                keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:68:5e:c8:6b:f5:f9:e4:ef:78:67:cc:8a:e8:87:c8:00:
         8c:2e:27:8f:81:a8:97:c5:62:88:9c:06:30:f8:ff:64:4e:4f:
         bc:c9:0c:3e:b1:c5:7f:eb:36:93:cb:5f:db:97:38:d7:4a:f2:
         33:eb:f1:89:08:c7:43:3b:d0:4e:1b:5f:da:a6:3b:dc:38:0d:
         88:ce:0d:cb:35:3c:54:9c:1b:ad:a6:1f:20:e7:52:f1:15:b4:
         7d:dc:6c:a4:87:5c:96:ef:5e:74:16:15:37:80:05:94:f8:20:
         fe:03:bc:a5:ac:30:4c:fc:d9:b1:4c:f5:82:f9:92:7d:ef:40:
         4a:53:5f:8b:a6:47:32:4c:6e:44:79:8a:f7:55:bd:65:ae:d3:
         45:f8:c9:78:06:4a:58:1e:dc:44:0f:ac:79:75:90:69:79:84:
         27:44:41:00:a1:84:56:93:07:ac:fc:7d:89:66:13:e1:02:a9:
         c0:b0:89:2c:f6:37:09:b7:5b:d9:20:eb:4b:91:e5:f1:b2:6e:
         08:8c:54:98:5f:d6:35:a2:da:10:d4:b5:f8:6d:46:0d:06:92:
         05:4b:02:ce:b1:2d:c4:01:01:41:aa:59:c6:5a:4a:af:a6:24:
         b2:b2:65:17:c6:ba:22:c2:58:ff:f5:3b:d6:73:72:4d:6e:e4:
         20:d8:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:09 2025 by rpki-client