Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          Mk+Q4DHxXeKprAX2uZkqMGYoNvjLYetbViWtUbqfGgM=
Subject key identifier:   8F:67:0F:A4:B8:67:BF:1A:D5:BD:25:70:9B:AC:C3:9B:6D:72:EC:90
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01985D5A0E44F0DEE5C4365F0552C53009A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          01E5
Signing time:             Wed 30 Jul 2025 22:00:39 +0000
Manifest this update:     Wed 30 Jul 2025 22:00:39 +0000
Manifest next update:     Thu 31 Jul 2025 22:00:39 +0000
Files and hashes:         1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=)
                          2: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          3: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=)
                          4: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: AFGQIGqguQB6GCeJXn2X5rff39ixsJiSM304kEep4WM=)
                          5: v9Xlm2rDTZ6ib_VjzhOAZ7-bwPE.roa (hash: BUEqyv7kTMRP5lPlyOHoLSP3K1Ooe4VseIGvi3kCIQo=)
                          6: vdwj-YL5qkaKRDVt2Zto5EYwOL4.roa (hash: JWEAJzW0lyftKypfeSLVAETbGxOalN2+cR5DvBGTHdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5d:5a:0e:44:f0:de:e5:c4:36:5f:05:52:c5:30:09:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Jul 30 22:00:39 2025 GMT
            Not After : Jul 31 22:00:39 2025 GMT
        Subject: CN=8f670fa4b867bf1ad5bd25709bacc39b6d72ec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:e4:dd:ea:48:0c:93:30:66:c8:e6:46:06:
                    6a:8b:a5:79:fa:0e:ca:ee:cc:05:de:79:00:74:cc:
                    8a:93:f4:39:97:c6:76:37:eb:28:58:81:9d:a5:ce:
                    d6:c6:7d:e4:fd:44:d2:aa:1b:70:85:5c:7f:d9:f3:
                    6b:3e:e7:5a:cb:21:a1:e4:57:be:cb:e5:3e:32:3d:
                    d5:67:2f:01:14:46:64:5f:d9:77:8d:91:fd:ab:37:
                    36:3a:7e:92:f1:e6:5c:2d:ed:64:1a:7b:7a:0f:3c:
                    94:75:66:b0:d4:17:36:e9:8d:27:df:89:16:c9:15:
                    9c:19:97:0c:65:8a:05:e6:6d:aa:a1:eb:60:67:77:
                    ba:a3:2b:6b:16:4f:e0:3e:33:46:5d:b3:3e:a6:73:
                    53:7f:4b:c5:80:4b:84:62:e5:ee:d2:da:b1:b1:b9:
                    d3:d2:6a:62:95:18:3f:77:91:89:a3:f9:4d:60:19:
                    52:2c:c9:d1:b9:0f:c3:32:25:41:b8:97:db:24:90:
                    74:5f:0a:ac:b8:ac:c6:b1:bd:9a:37:1c:ae:0e:08:
                    44:76:3c:e7:87:5c:d7:4d:a9:08:e9:80:cb:9b:68:
                    d7:63:aa:f5:99:3d:0e:9a:92:25:e0:9b:2e:1b:c0:
                    55:1e:34:84:8a:06:4b:3f:26:71:b2:c0:4b:57:2d:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:67:0F:A4:B8:67:BF:1A:D5:BD:25:70:9B:AC:C3:9B:6D:72:EC:90
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:49:b7:29:39:8b:17:8a:5c:6b:7f:0f:9e:dd:9c:97:35:
         0d:52:99:38:6f:e4:d4:17:87:82:22:81:19:25:34:ca:0e:84:
         8d:10:82:42:0e:da:fa:36:99:ce:47:5e:90:5e:66:6c:e5:f0:
         e4:77:45:19:07:65:0d:1b:69:e2:56:80:35:13:d6:92:76:4c:
         7a:8d:31:e4:f8:ee:f8:9a:12:3b:18:55:34:63:ef:4e:82:72:
         9b:be:2f:d0:5d:f2:e4:12:69:cb:79:e7:8c:23:bc:84:07:4d:
         7c:44:a5:0b:35:52:59:0f:31:8d:a1:a9:bc:d8:f5:c4:56:ca:
         39:17:33:8d:10:3b:22:09:1e:68:cd:62:d3:68:f4:5d:dd:f5:
         89:d5:3d:59:8b:f3:73:d6:3f:0a:d3:a9:88:70:22:8d:1c:86:
         0f:14:7f:55:cd:55:9e:e4:63:7a:86:57:73:30:43:7e:f2:85:
         84:d0:5f:66:69:f7:6f:ff:6c:77:58:c1:6e:9e:0a:bb:ea:dc:
         66:29:76:dd:27:bc:70:8b:b1:d4:25:b9:c9:cf:52:54:7d:38:
         35:57:7e:f6:31:71:d2:ae:00:ab:91:6d:2b:ae:4d:fe:72:81:
         74:86:bd:75:5a:4f:9a:98:6b:a2:ca:49:33:37:4b:13:4b:eb:
         9e:30:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:56:27 2025 by rpki-client