Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File:                     uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier:          p2fp/yJuaBzWR0+NA04modypjnUq/6xNn/OWD/RPAlY=
Subject key identifier:   2E:D3:C7:15:22:E8:DC:4E:69:F1:88:4B:41:F3:DA:05:65:E6:B5:56
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer:       /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial:       01984E1E352139C1367981AC1207EF340745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number:          0516
Signing time:             Sun 27 Jul 2025 23:00:59 +0000
Manifest this update:     Sun 27 Jul 2025 23:00:59 +0000
Manifest next update:     Mon 28 Jul 2025 23:00:59 +0000
Files and hashes:         1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
                          2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: yXlMbNEJkuftRdQSV8bL0m4Ee7pdH1BLpilReeW6nXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:1e:35:21:39:c1:36:79:81:ac:12:07:ef:34:07:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
        Validity
            Not Before: Jul 27 23:00:59 2025 GMT
            Not After : Jul 28 23:00:59 2025 GMT
        Subject: CN=2ed3c71522e8dc4e69f1884b41f3da0565e6b556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:e1:55:c4:7b:ba:93:24:80:3c:01:d4:cf:
                    7d:3a:89:e9:4a:a2:8a:0b:83:f2:51:a5:62:43:39:
                    07:ec:ef:71:08:a2:3c:31:17:69:08:d0:32:31:3b:
                    e2:58:97:be:81:66:fe:f8:47:01:c4:2c:52:66:7d:
                    dc:63:74:73:14:e0:5f:bc:0c:14:e0:a7:50:33:d9:
                    c9:64:f0:55:e2:4b:c1:bf:60:12:0b:bf:a9:84:70:
                    de:48:5a:53:58:05:ae:de:bd:5a:eb:79:ca:80:ed:
                    69:1a:df:cb:dc:d3:b1:88:13:15:6e:ff:07:48:a2:
                    5e:3a:23:9c:54:c7:40:6a:c3:47:38:8a:10:1b:ff:
                    f5:e1:d8:7c:26:73:a6:b3:bd:38:06:2e:67:83:47:
                    05:8b:b9:d7:b6:c7:83:0c:a6:79:27:c2:ea:54:0c:
                    84:40:4b:69:b8:16:1c:ce:dd:2e:ea:74:07:4d:7a:
                    07:2e:f2:1f:b5:98:98:0a:c2:e6:1e:5a:6f:db:ff:
                    a8:7d:45:29:23:22:1a:4c:a4:15:3f:cb:76:b7:49:
                    a8:c8:f5:55:89:49:a2:e8:c1:61:53:bb:c6:fc:a8:
                    d8:f1:02:ae:c6:55:b0:c9:cc:f8:c1:7e:72:13:21:
                    94:72:a9:ca:06:0d:ed:91:a3:c9:79:12:04:6e:4b:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:C7:15:22:E8:DC:4E:69:F1:88:4B:41:F3:DA:05:65:E6:B5:56
            X509v3 Authority Key Identifier:
                keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:96:ef:a0:a2:b7:8b:4f:57:65:f3:c7:f6:0c:49:0a:0f:
         12:a3:2f:f2:c7:cf:18:20:a4:b5:5e:33:3e:50:23:a5:e3:61:
         db:e4:50:ef:1c:c3:76:1d:60:e2:c8:9c:e5:69:8d:6d:46:24:
         32:f0:6c:c9:61:3e:2b:b8:37:7f:d6:be:ff:41:9d:32:71:9f:
         b6:e2:35:e5:a4:9c:1e:09:41:00:33:19:83:58:c5:ac:87:e9:
         00:94:e0:93:84:c8:41:01:3c:54:b6:a7:fe:64:02:81:b9:cb:
         25:e0:d0:1a:64:f9:2c:2e:07:d9:32:9a:74:24:7f:4f:95:57:
         c5:4f:7f:f9:59:1c:59:4f:2f:b2:56:16:4f:27:b3:b7:81:6a:
         42:f3:2f:d3:a4:6d:8f:a8:84:ce:56:cc:b2:b9:e6:00:3e:73:
         8f:bf:91:55:91:01:a0:4e:ca:1e:90:8d:ae:cf:6a:d7:8c:8d:
         e1:2c:aa:2f:0b:de:cf:22:61:99:be:d7:23:52:c7:47:10:10:
         ee:89:b0:88:d7:72:1f:be:d7:cb:16:41:47:b3:11:27:06:ac:
         21:90:cd:f7:4b:b9:9d:21:c5:1a:15:4c:1b:df:e6:50:e4:29:
         eb:2a:46:83:8c:24:24:59:43:a3:94:bc:27:a3:6e:d5:6f:35:
         ff:6e:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:42:57 2025 by rpki-client