Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          ZxipPiTcuL+Jv9TN/0+MsJy0AVNUCjmo9u/gYFXh2UY=
Subject key identifier:   3F:21:2D:EB:7D:EE:B0:97:0D:10:1B:28:42:33:1D:D7:6F:BA:6A:C5
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       01988B0F615C81887E612631ABDCBACA1BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          06B1
Signing time:             Fri 08 Aug 2025 19:01:37 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:37 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:37 +0000
Files and hashes:         1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: PJFIzktFHNo60NQDuQQxOrmuP416jcMcDFvxbItnRXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:61:5c:81:88:7e:61:26:31:ab:dc:ba:ca:1b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: Aug  8 19:01:37 2025 GMT
            Not After : Aug  9 19:01:37 2025 GMT
        Subject: CN=3f212deb7deeb0970d101b2842331dd76fba6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:4d:a5:22:6f:37:98:76:fb:b1:55:fb:99:
                    12:5b:3b:8f:2c:a0:a2:b4:1d:0f:e0:03:8e:fb:95:
                    a8:6f:e1:7d:cc:39:73:fe:81:df:ed:2b:0e:b7:a8:
                    35:b7:65:97:52:fd:10:ae:c5:31:ff:23:42:bd:a5:
                    16:53:d0:96:0b:9c:94:ea:6a:5a:d3:37:ba:64:2e:
                    70:f9:57:88:72:49:8f:7a:0e:4a:1e:de:58:22:62:
                    03:92:1f:7f:76:15:22:38:b3:63:cd:5a:e9:7a:cc:
                    f2:36:e9:69:69:8a:7e:74:f4:8e:41:37:39:fa:ab:
                    0a:a5:53:16:25:34:da:9e:e2:42:af:f7:ad:78:42:
                    5d:dd:3b:ac:ea:d7:8d:1f:01:63:64:2b:43:7d:ff:
                    eb:24:0e:71:87:6e:9f:f2:7d:f1:e6:c7:2c:60:47:
                    42:db:d1:83:39:ca:ea:b3:95:2c:63:95:45:89:72:
                    00:99:19:38:dd:7a:2b:14:d4:4a:e8:aa:96:58:10:
                    03:9d:cc:76:05:ec:c7:93:31:56:09:02:b9:73:db:
                    2e:55:83:21:b0:61:0c:7f:38:15:33:bf:8a:87:44:
                    ec:f7:28:f9:b5:48:c0:ca:70:f4:3b:ca:a1:29:09:
                    72:19:0f:e0:32:a5:40:a5:32:fb:ad:1d:02:1c:17:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:2D:EB:7D:EE:B0:97:0D:10:1B:28:42:33:1D:D7:6F:BA:6A:C5
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:47:b6:35:ad:b2:a5:23:1f:ad:a7:b3:05:22:eb:50:da:
         a5:58:f1:3a:bd:75:54:90:54:22:41:d6:9e:e7:22:85:6a:29:
         f7:85:ae:07:60:5e:5d:bd:93:82:08:b5:e0:2e:dc:1e:da:7c:
         f7:9c:04:8b:3f:b4:9c:1c:d7:68:1f:e3:74:06:c2:c1:43:8b:
         be:ed:24:1b:ee:8f:49:7a:fc:a3:20:a7:11:e8:f8:8c:d9:9e:
         fd:f5:3f:a0:c5:d2:ae:f0:3e:5b:b8:6f:73:a0:19:5b:e0:33:
         99:d9:65:5a:b3:0c:d5:bc:61:85:d4:c5:23:af:fa:29:3f:53:
         5e:8f:61:a1:8d:fa:e2:d1:cf:f1:c0:39:47:d7:ae:bf:b0:2b:
         30:2b:4c:eb:3c:73:62:5e:67:59:d6:ca:2e:10:ef:7b:74:06:
         27:5f:cb:94:2d:20:86:91:5b:31:0b:11:09:5a:7c:a2:b6:3d:
         ea:3d:99:e3:54:c1:75:40:cf:3b:69:48:7f:d5:fa:c2:43:05:
         56:c8:83:51:83:d8:72:a3:ac:d0:5a:f3:9b:1a:7b:6e:17:ca:
         40:48:3d:c6:8e:27:7e:24:09:82:f7:30:9a:6b:fd:06:1c:ef:
         1c:2a:bd:2a:76:54:e1:c8:c3:90:4c:ab:73:2e:54:98:d8:d1:
         66:61:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:36 2025 by rpki-client