Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          nzPRfu9PkX9v/b4/1kFEorWqovfJErlRCN4oCvD22Do=
Subject key identifier:   77:F3:27:A9:28:15:4A:75:54:3E:7F:AF:1C:77:74:FB:94:39:97:B9
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019853B242565FC19A7DCA12C017EEC633D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          01E0
Signing time:             Tue 29 Jul 2025 01:00:47 +0000
Manifest this update:     Tue 29 Jul 2025 01:00:47 +0000
Manifest next update:     Wed 30 Jul 2025 01:00:47 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: o/2UqZOvNaQIIHouXTjPNY0/n/iwOawrEcsxmnAhSf4=)
                          2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:b2:42:56:5f:c1:9a:7d:ca:12:c0:17:ee:c6:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Jul 29 01:00:47 2025 GMT
            Not After : Jul 30 01:00:47 2025 GMT
        Subject: CN=77f327a928154a75543e7faf1c7774fb943997b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:6c:31:53:63:dc:0c:c9:d4:ed:29:fa:13:
                    e2:53:9b:05:af:39:68:8a:e3:35:c8:af:7a:d1:d0:
                    37:87:82:a3:1a:09:82:4f:0d:82:98:2a:8a:49:f1:
                    11:c0:7a:23:c4:7b:c8:89:c5:f5:41:a9:98:e2:4b:
                    d2:be:7a:c8:6b:92:ac:ae:ff:95:b7:63:04:f2:91:
                    99:54:f5:25:f8:43:46:ab:5e:b2:23:13:fd:80:ca:
                    99:49:ca:28:0e:1f:35:83:6d:ef:4b:b6:45:b6:9e:
                    b2:e2:48:c0:36:2e:3f:35:23:ec:56:5c:b2:78:a0:
                    23:29:c1:0f:e2:70:86:91:1b:f5:31:47:61:f5:66:
                    87:2c:65:9c:b1:9b:3e:dd:3a:9d:c6:e1:f4:86:e3:
                    97:02:09:69:2b:30:44:de:5e:64:92:a8:40:95:c3:
                    29:51:42:78:8b:95:84:d4:67:a0:1d:f2:82:ab:23:
                    53:8d:1f:29:09:c2:c5:56:0c:41:ae:9e:ae:a9:a5:
                    84:4c:ad:43:4c:67:57:19:54:5e:cb:ce:e0:c8:de:
                    a3:65:7f:49:e4:c7:6d:df:df:f5:7c:4b:0a:4f:68:
                    cc:a5:56:b5:84:fe:29:39:3e:43:0b:9d:7f:0a:05:
                    1c:83:d5:af:76:52:4a:41:89:77:fe:93:36:ab:83:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:27:A9:28:15:4A:75:54:3E:7F:AF:1C:77:74:FB:94:39:97:B9
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:da:49:06:bc:92:3c:a9:91:5d:b2:7c:4e:ad:d9:f6:ff:
         94:b5:80:65:43:96:84:3c:02:c9:ea:c5:b5:71:d9:7d:99:7e:
         77:44:25:4d:d1:a1:5f:b8:93:10:25:f7:a1:c5:34:ec:fd:43:
         5f:6b:68:47:31:41:cf:35:b9:58:a0:5e:8b:fd:2d:96:58:9c:
         6d:c9:83:0b:ea:2c:c7:6c:9d:7a:b9:fc:58:d4:02:54:d9:c0:
         fd:d2:17:94:4f:8e:eb:e1:c4:79:00:64:f4:f1:d8:93:cd:b3:
         85:46:f5:cb:9b:b1:d9:2d:d0:91:8e:ec:5f:02:f1:c5:8c:da:
         20:c9:c7:8d:e5:62:a1:66:f0:23:55:a7:1f:5a:db:40:c3:75:
         2f:05:b9:c3:53:3a:5b:f8:0f:6b:06:36:41:26:da:e4:d5:c4:
         93:9e:d9:06:18:1c:54:4c:da:63:b8:ee:d5:41:44:2c:23:f9:
         60:82:b9:a0:07:81:0b:8a:4d:57:55:63:4b:2e:af:85:01:f8:
         bf:d6:1a:80:9d:02:37:aa:c2:2c:05:7e:47:44:a5:b2:f0:5c:
         75:05:4f:ac:6d:f5:27:42:0b:e1:6c:39:11:73:cd:65:d9:dc:
         59:ce:89:61:40:e1:53:2a:99:76:43:ae:4c:f1:62:bd:d3:67:
         cf:c1:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:48 2025 by rpki-client