Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          MMvCZ/MNEbQW3q3FpeT8iIP6MySb3RBqEDtpxJguFC4=
Subject key identifier:   EF:85:53:1B:D6:8A:84:83:D2:14:07:C6:3D:BC:65:07:B8:CB:68:64
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       0198530DA70B4EE0473A86AB4BC4779334AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          0F2E
Signing time:             Mon 28 Jul 2025 22:01:00 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:00 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:00 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: xh9n6kpWKLEaXkjWtL8t4GFLkc0F0CKHWwqCRqeh9K4=)
                          2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:a7:0b:4e:e0:47:3a:86:ab:4b:c4:77:93:34:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: Jul 28 22:01:00 2025 GMT
            Not After : Jul 29 22:01:00 2025 GMT
        Subject: CN=ef85531bd68a8483d21407c63dbc6507b8cb6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:87:19:bb:4e:5f:92:09:ab:be:6a:df:6d:
                    ab:f4:42:7c:6f:a0:41:c5:31:03:91:4e:e0:b4:0b:
                    4b:d4:a2:a5:b9:67:b6:cd:df:fd:66:84:85:5c:cc:
                    2f:b5:46:53:28:02:55:e3:27:80:d2:bd:f0:11:26:
                    60:34:3e:fa:34:64:eb:1c:27:9b:bd:39:0a:d0:8b:
                    d8:9c:7f:15:16:21:5a:a3:77:cb:3f:a7:d4:b9:75:
                    8a:04:24:eb:3f:ab:94:9f:54:ce:4c:f3:4a:40:df:
                    b8:86:1f:38:3c:41:5a:cf:de:a3:e1:67:de:7f:4a:
                    64:0a:d1:ce:26:c4:f4:5a:e6:63:5b:ba:a4:60:4a:
                    52:2c:4d:69:08:0b:04:f5:30:51:5e:26:83:c9:77:
                    ce:a5:32:6f:53:52:89:50:74:e2:d0:6d:09:b2:a2:
                    02:80:df:8a:6a:2b:3f:4c:69:ca:3e:0e:0c:17:a6:
                    f1:75:3f:31:17:93:9e:50:31:f2:1d:bb:dd:b8:b2:
                    ed:13:7a:8b:d0:3a:1a:8f:f2:b5:5c:c9:84:60:27:
                    d4:6c:4c:58:64:ac:83:b8:bf:a8:5a:8d:0e:49:2f:
                    f3:81:cc:1f:52:0d:32:ce:55:76:4f:ff:4b:41:18:
                    21:0f:9b:72:f1:fb:fb:6f:98:48:06:19:5a:3d:a9:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:53:1B:D6:8A:84:83:D2:14:07:C6:3D:BC:65:07:B8:CB:68:64
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:48:45:fb:3d:86:8b:f8:4e:7d:e0:08:bb:be:23:fd:ca:
         15:a6:43:c2:1d:85:02:89:65:91:e3:e5:29:d2:c3:80:75:aa:
         95:fd:71:74:a3:18:53:2f:d5:1e:62:19:d6:f6:50:48:12:fd:
         24:39:2f:41:73:8e:e6:ad:ec:1d:1b:30:17:f1:8a:26:1f:ab:
         bd:cd:f6:b9:60:7e:6f:63:83:4b:2e:d4:62:cb:84:f6:9f:a9:
         d6:dd:c1:3d:20:c4:e7:a9:d1:27:f3:fc:19:58:2d:53:09:84:
         39:71:eb:03:f4:f7:67:5a:f6:b1:87:0c:76:de:d5:de:a8:aa:
         8c:27:9b:b6:b9:51:45:53:53:f1:2c:2d:ed:87:02:d2:bf:da:
         45:15:b4:c1:a4:1a:bb:ea:9e:f7:7b:35:33:04:02:4b:aa:05:
         98:3b:ad:ee:29:01:dc:4f:a0:b3:b6:0b:7f:28:35:a4:70:fc:
         7f:2d:ae:19:c0:0b:62:bf:8e:f4:3d:cb:09:9a:e5:9d:72:b1:
         48:cf:34:7d:2e:5d:2a:ef:de:87:e9:c6:d9:80:3f:98:ad:9f:
         d9:77:0a:7d:a1:a4:c7:c1:04:ac:ae:59:0d:ea:d6:50:e5:06:
         61:30:cc:d4:48:11:b8:7c:db:04:da:e7:12:52:ee:c3:59:21:
         ac:6b:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:14 2025 by rpki-client