Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          MNYz+knDKWyliLahVBEiaod5JfFo32hM2tFBFsYnCzQ=
Subject key identifier:   AF:04:E7:A6:9C:10:0C:CF:F9:64:99:93:B9:FB:57:9C:90:E8:4D:B1
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       0198730661137C5A4B5EC9D731FB8EC5AFCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          129D
Signing time:             Mon 04 Aug 2025 03:00:54 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:54 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:54 +0000
Files and hashes:         1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
                          2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
                          3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: 3coNLgLOMunbwgv/Gg6OfuDTBBJWxKTx2faq8TmXXA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:61:13:7c:5a:4b:5e:c9:d7:31:fb:8e:c5:af:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Aug  4 03:00:54 2025 GMT
            Not After : Aug  5 03:00:54 2025 GMT
        Subject: CN=af04e7a69c100ccff9649993b9fb579c90e84db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:e6:2d:7b:8c:37:62:f3:ad:66:06:d6:e5:
                    d9:85:d9:69:7a:30:57:f8:e3:aa:b9:65:e8:a8:e4:
                    bd:15:99:04:6e:e7:74:27:1f:94:52:63:d6:0a:48:
                    6f:5a:0d:62:9d:f8:f8:0b:bb:68:bc:9a:66:11:e2:
                    1f:37:af:a5:a9:ed:2d:f9:e0:8b:b8:17:96:61:77:
                    da:55:ec:63:95:0b:a1:c4:b1:c6:76:2e:b9:54:10:
                    44:ae:02:8e:b8:3e:46:5f:60:0b:48:12:53:89:c4:
                    c7:0d:ba:61:9e:8e:f3:c1:80:17:2a:a2:9c:aa:ae:
                    10:e9:aa:fd:b7:09:54:93:d3:b2:41:2f:1d:3d:2b:
                    d3:e5:f0:8f:e8:e8:24:94:ce:e5:20:12:7a:37:c9:
                    d1:fb:2e:71:23:dd:db:cc:c2:ed:7f:5e:2e:7e:65:
                    45:91:76:bd:a5:19:d7:65:1a:7f:18:c5:af:60:bc:
                    6c:c7:c2:57:89:86:fb:4b:0f:fc:7e:a6:47:ac:e4:
                    f8:69:24:34:eb:18:f5:3a:51:ea:8f:4f:c8:d3:76:
                    ca:de:ee:3c:7a:a9:f5:99:43:62:1e:f4:a6:b6:7f:
                    8b:6a:f9:b5:d6:9a:16:49:f5:bb:c1:e9:4f:f8:85:
                    dd:38:08:94:02:92:8a:97:8d:d4:95:a0:e1:f0:df:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:04:E7:A6:9C:10:0C:CF:F9:64:99:93:B9:FB:57:9C:90:E8:4D:B1
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:08:54:42:44:5a:37:3e:47:38:0d:2f:04:6f:86:26:29:cd:
         59:25:f2:59:45:42:f3:c7:7c:66:2a:0e:c5:50:b2:f1:a9:52:
         e8:8c:85:68:5d:e1:7b:37:7f:79:ed:7c:20:5e:b4:3d:40:b7:
         ad:12:83:37:56:e8:8d:01:82:ee:c9:6a:f4:9a:d9:51:52:65:
         c9:19:d8:b2:f9:96:7a:b3:e9:73:33:7b:50:72:e2:8d:c4:4f:
         d5:42:a9:60:cd:be:6f:3c:32:4d:16:77:40:cf:08:df:4b:8d:
         7a:ec:15:94:47:27:39:af:0b:ae:74:7e:45:51:0e:ae:04:a4:
         23:3d:51:da:22:77:50:b4:d8:d3:81:b2:90:e6:81:4d:b2:e5:
         76:44:32:fd:b9:81:a9:28:87:65:fc:f7:1f:0c:9d:f1:80:3e:
         00:e5:87:e5:67:cb:c3:2f:3c:60:80:c5:de:35:53:a1:f8:0a:
         d5:38:3b:98:42:49:8e:ab:58:29:53:17:fe:8b:db:c1:07:b6:
         57:33:6d:d7:50:69:9e:dd:e7:0a:05:62:e2:9b:81:dc:b2:2e:
         0d:ff:c9:40:18:be:9e:68:60:1d:e9:51:bc:d1:fb:30:40:9d:
         29:5b:ca:0d:35:36:79:08:6c:74:f2:0d:10:65:53:1b:b7:45:
         57:86:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:45 2025 by rpki-client