Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
File:                     UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json)
Hash identifier:          lvWHtq6a7uw00JtGfw+r4hsJjCn45LM66J5eKtkEcX0=
Subject key identifier:   2F:5E:5E:58:AC:B6:47:C8:50:6E:81:77:40:FF:AF:EE:DF:C5:6C:1B
Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Certificate issuer:       /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Certificate serial:       01984777D80E96EC4494B4BE6D621AE807ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
Manifest number:          0988
Signing time:             Sat 26 Jul 2025 16:01:32 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:32 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:32 +0000
Files and hashes:         1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: bVj8Xq6wKMJu2nJEqNCh4nqKDppTiFWzXrSsR+8nWJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:d8:0e:96:ec:44:94:b4:be:6d:62:1a:e8:07:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
        Validity
            Not Before: Jul 26 16:01:32 2025 GMT
            Not After : Jul 27 16:01:32 2025 GMT
        Subject: CN=2f5e5e58acb647c8506e817740ffafeedfc56c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:83:09:43:d5:ec:61:7a:67:91:eb:31:6f:
                    fa:d2:73:a4:23:6b:f9:a2:33:ea:5a:11:f7:43:8e:
                    69:56:3c:63:02:3b:49:8b:e5:7d:28:5e:72:ab:7b:
                    1e:2d:c7:61:f9:08:87:ce:51:3d:b9:26:47:3e:1e:
                    bb:2e:99:95:ff:61:85:7c:03:eb:23:27:34:c4:63:
                    cd:d7:6b:9c:71:1a:80:8a:5f:e9:21:4d:b1:41:91:
                    0d:0c:75:d1:a8:27:bd:77:eb:61:84:e2:d4:75:8b:
                    24:2a:b0:57:24:47:c6:b8:bf:0d:d2:62:02:a7:b8:
                    3d:2b:7a:70:96:ef:ae:b4:f2:b2:f5:e3:3f:86:33:
                    ec:13:ff:1f:f5:d0:ba:79:53:ec:7c:cb:3a:b5:a6:
                    dd:32:aa:35:cf:f9:f9:2d:2c:12:02:ed:e5:e4:05:
                    4b:2b:85:f4:55:d0:c7:89:d9:26:82:d8:d3:10:8e:
                    13:56:aa:dc:2a:21:6b:58:40:80:c5:4a:da:05:e5:
                    91:67:cf:1c:97:6f:9c:8e:e6:5f:f4:46:b5:09:74:
                    35:eb:40:f4:b5:1e:50:7d:4e:3a:c4:c7:f8:d5:2a:
                    d4:29:80:f0:fc:04:f1:80:46:3d:15:d0:b5:3c:fc:
                    bc:da:5b:88:ec:a8:1d:c4:ff:f8:d1:b5:6c:fb:ec:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:5E:58:AC:B6:47:C8:50:6E:81:77:40:FF:AF:EE:DF:C5:6C:1B
            X509v3 Authority Key Identifier:
                keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:40:32:27:a6:65:6b:e5:fc:5f:cc:97:df:bf:20:09:30:
         d8:5e:b1:d7:df:52:aa:82:03:4e:ea:bb:44:6a:cb:15:da:47:
         34:7c:29:4a:6f:04:ed:4f:3f:fa:13:b8:6f:3b:0c:14:d8:3e:
         96:38:a0:7f:e9:96:11:1a:62:4d:e5:13:f2:bb:ef:c7:95:1c:
         27:a8:5f:e6:36:77:e2:f9:87:65:5d:db:a9:cf:cc:7f:0c:b8:
         66:5e:2a:90:4d:1f:18:ce:77:22:79:0f:09:83:51:43:c3:a1:
         2d:af:75:a8:4d:69:4d:62:6d:4f:9f:88:5f:86:98:65:88:95:
         14:ae:4b:21:33:9e:81:81:6f:65:e7:6c:a3:18:7f:ba:05:64:
         e8:e0:34:44:47:ef:c6:2e:70:a8:dd:e5:97:b1:25:15:13:16:
         af:a3:46:ac:87:e3:57:2a:e3:9b:ef:1d:87:b0:f6:31:24:fd:
         5c:f9:e9:b9:68:41:7c:fe:81:b7:4c:8f:2d:aa:b2:ef:49:01:
         d9:d5:0a:12:c7:52:da:85:dc:df:15:bf:f2:23:e0:26:9f:79:
         39:1f:ec:74:78:08:c3:e0:86:16:de:2c:90:cd:ae:b5:25:6a:
         ae:47:0a:b0:ab:22:99:3e:69:d6:24:b8:c4:ba:15:d8:2a:5d:
         62:bc:39:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd9gOluxElLS+bWIa6AftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYWZmYzI4ODQzMGEwM2MwZjYwYmE2YTBlMjc2MDIzNzBm
MmU5ZTgwHhcNMjUwNzI2MTYwMTMyWhcNMjUwNzI3MTYwMTMyWjAzMTEwLwYDVQQD
EygyZjVlNWU1OGFjYjY0N2M4NTA2ZTgxNzc0MGZmYWZlZWRmYzU2YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+DCUPV7GF6Z5HrMW/60nOkI2v5
ojPqWhH3Q45pVjxjAjtJi+V9KF5yq3seLcdh+QiHzlE9uSZHPh67LpmV/2GFfAPr
Iyc0xGPN12uccRqAil/pIU2xQZENDHXRqCe9d+thhOLUdYskKrBXJEfGuL8N0mIC
p7g9K3pwlu+utPKy9eM/hjPsE/8f9dC6eVPsfMs6tabdMqo1z/n5LSwSAu3l5AVL
K4X0VdDHidkmgtjTEI4TVqrcKiFrWECAxUraBeWRZ88cl2+cjuZf9Ea1CXQ160D0
tR5QfU46xMf41SrUKYDw/ATxgEY9FdC1PPy82luI7KgdxP/40bVs++wE4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9eXlistkfIUG6Bd0D/r+7fxWwbMB8GA1UdIwQY
MBaAFFCv/CiEMKA8D2C6ag4nYCNw8unoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtfOEtJUXdvRHdQWUxwcURpZGdJM0R5NmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lMjBhN2EtODhlMi00NmU2LWFkOWQt
MzNiODAzNWNhMzI0LzEvVUtfOEtJUXdvRHdQWUxwcURpZGdJM0R5NmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9lMjBhN2EtODhlMi00NmU2LWFkOWQtMzNiODAzNWNhMzI0
LzEvVUtfOEtJUXdvRHdQWUxwcURpZGdJM0R5NmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaBAMiem
ZWvl/F/Ml9+/IAkw2F6x199SqoIDTuq7RGrLFdpHNHwpSm8E7U8/+hO4bzsMFNg+
ljigf+mWERpiTeUT8rvvx5UcJ6hf5jZ34vmHZV3bqc/Mfwy4Zl4qkE0fGM53InkP
CYNRQ8OhLa91qE1pTWJtT5+IX4aYZYiVFK5LITOegYFvZedsoxh/ugVk6OA0REfv
xi5wqN3ll7ElFRMWr6NGrIfjVyrjm+8dh7D2MST9XPnpuWhBfP6Bt0yPLaqy70kB
2dUKEsdS2oXc3xW/8iPgJp95OR/sdHgIw+CGFt4skM2utSVqrkcKsKsimT5p1iS4
xLoV2CpdYrw5OA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:44:54 2025 by rpki-client