Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
File:                     Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json)
Hash identifier:          LoM/6BiZxtX43/Sav95g4xxJ2IPViF1OvwxB89l9XVE=
Subject key identifier:   47:92:B8:82:BB:C8:EF:EB:C1:0B:65:E2:99:C9:EF:A4:7A:BC:77:61
Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
Certificate issuer:       /CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Certificate serial:       0198481B63BA94A02936F30EA33A507BF9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
Manifest number:          91
Signing time:             Sat 26 Jul 2025 19:00:11 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:11 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:11 +0000
Files and hashes:         1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: sR2eD8IYUjkkNOPZFH21O0MaZ/7eOQRSEebEyLmRSAg=)
                          2: UzdAI9r8ururR3efFNaAcO55XaM.roa (hash: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:63:ba:94:a0:29:36:f3:0e:a3:3a:50:7b:f9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71
        Validity
            Not Before: Jul 26 19:00:11 2025 GMT
            Not After : Jul 27 19:00:11 2025 GMT
        Subject: CN=4792b882bbc8efebc10b65e299c9efa47abc7761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:a3:8c:3b:57:c4:88:d7:8c:f7:89:15:f4:
                    fd:0a:1c:f8:16:a4:e6:f5:db:d1:3b:45:42:91:04:
                    31:2f:46:eb:3b:46:3a:d4:16:9e:e0:5a:dd:ee:e7:
                    88:7e:14:c2:35:72:c2:77:6c:18:24:57:c8:6d:8e:
                    2c:47:1d:3e:36:06:13:bd:60:5f:ac:e9:f6:c3:ac:
                    44:4a:7b:5d:52:b6:a2:b9:64:c3:a9:23:4d:3b:81:
                    50:cc:61:70:46:4e:3d:9c:9c:db:4a:4b:19:39:a6:
                    07:5a:98:88:7f:c9:74:6d:b5:b5:d8:b2:32:a9:dc:
                    d8:75:6c:b9:1e:c9:dd:1a:e4:a2:74:63:43:01:42:
                    e0:82:79:dc:13:33:89:3d:c8:52:dc:fd:57:00:58:
                    f0:3b:7c:a9:48:25:7f:62:2e:94:f3:90:70:3e:74:
                    6d:f6:52:93:5a:4f:94:7e:6a:ef:82:d5:dd:b0:d8:
                    ef:ba:a0:c7:97:90:6f:67:46:b0:6b:0f:7f:61:85:
                    69:8d:28:42:bd:27:b7:e3:ee:be:ec:9c:67:c8:f6:
                    f1:13:31:c0:09:bd:31:78:63:bb:b6:0c:86:49:a1:
                    ff:b7:23:3e:3f:ef:88:d6:11:16:0a:0d:ad:58:a0:
                    f6:70:42:ed:26:56:83:61:8f:20:b5:29:96:fc:92:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:92:B8:82:BB:C8:EF:EB:C1:0B:65:E2:99:C9:EF:A4:7A:BC:77:61
            X509v3 Authority Key Identifier:
                keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:87:23:05:43:ed:b6:a2:75:39:86:31:2b:d3:f5:4d:f3:7e:
         a7:c1:67:3e:03:fc:22:76:0f:35:89:ba:79:51:40:4f:1c:b1:
         32:9b:5b:ea:01:4e:5f:a0:40:ca:f7:8f:f5:47:ad:82:40:88:
         56:34:1a:36:75:9c:35:f6:76:17:44:ac:a5:21:d5:53:e1:70:
         2c:8a:a5:4f:30:43:20:ab:a2:b3:39:d9:61:a3:fb:40:df:fb:
         46:f6:d3:4a:7e:0c:0e:66:fd:ff:06:39:9a:2b:f6:cb:cc:13:
         f8:1b:bb:6a:bd:f3:bd:d9:e6:f5:e1:64:e0:88:66:8e:50:1b:
         8b:9f:75:14:ca:1c:d3:dc:cd:ba:cb:80:b6:67:ef:26:8f:17:
         b3:b5:48:31:4c:6d:17:9f:16:30:c1:77:e0:08:e1:62:26:1c:
         52:9c:24:59:f4:1f:11:a4:64:95:bc:43:80:22:df:ae:e7:cc:
         22:f3:00:63:3d:6d:e3:02:06:f0:c3:b6:55:f8:3f:f0:ab:86:
         86:ef:7a:24:00:2a:48:2e:9e:92:10:03:6a:c1:33:15:ff:82:
         ee:e9:3c:fd:1a:37:bb:77:f4:9d:ed:35:71:cb:59:7b:75:7c:
         1a:54:26:6c:df:46:28:42:47:07:c9:af:a8:21:4a:da:cf:95:
         75:06:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:36 2025 by rpki-client