Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File:                     uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier:          0WDTXuzVLUxzbTaRcUaz03WVMnLiuVvnMXckvSm/gQw=
Subject key identifier:   7D:75:7C:0C:E8:D1:65:AB:3E:6C:9F:C2:10:7D:76:41:C0:C3:B6:9E
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer:       /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial:       019853E9491FB84DEAE632767EE89159BECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number:          159A
Signing time:             Tue 29 Jul 2025 02:00:54 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:54 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:54 +0000
Files and hashes:         1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=)
                          2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: A+1rQGx+Z8z3GA9hBjyCwfcEwiqPqqBKISEARbTawY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e9:49:1f:b8:4d:ea:e6:32:76:7e:e8:91:59:be:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
        Validity
            Not Before: Jul 29 02:00:54 2025 GMT
            Not After : Jul 30 02:00:54 2025 GMT
        Subject: CN=7d757c0ce8d165ab3e6c9fc2107d7641c0c3b69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:e4:69:91:05:e8:9e:26:a3:3a:75:e5:10:
                    ec:f7:be:f5:5e:23:f0:6d:6c:9f:d8:e5:94:30:1a:
                    04:11:a1:bf:3a:ef:94:04:90:bb:d1:e4:8c:39:4c:
                    ec:7d:48:b8:1e:a6:30:a7:cd:1f:e3:ab:45:5b:e6:
                    8f:ad:e9:96:37:7d:b3:75:68:11:b5:bf:59:88:02:
                    75:e5:30:cb:6d:eb:81:f9:03:fa:20:ea:3d:8d:8c:
                    2d:e5:3c:90:00:4e:e2:bc:59:49:9b:60:ae:6c:12:
                    df:31:c6:8d:ef:3e:f6:4d:e3:18:29:b8:8b:57:e1:
                    1a:8e:42:cf:c8:69:31:42:58:88:dd:2c:2a:fe:cb:
                    46:ab:69:bf:49:2b:71:37:20:dc:ea:f0:f9:1f:f4:
                    cd:5d:60:a4:7c:46:ae:cc:88:6f:65:7b:31:6e:d2:
                    75:79:c0:9d:63:b3:69:65:f1:e4:c0:e0:b4:33:3e:
                    a3:c9:9b:f5:e4:a9:03:c3:d3:58:89:2f:92:ee:16:
                    b3:0b:b8:b4:af:0e:25:3c:96:68:2d:f6:04:95:d2:
                    10:0e:4d:0f:01:67:b2:6d:5f:cc:ec:d2:85:73:11:
                    82:0f:e1:02:19:17:50:f0:7f:8d:e7:3c:f5:51:d9:
                    f7:da:dd:1b:d1:22:a9:03:88:44:8f:87:12:bb:8c:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:75:7C:0C:E8:D1:65:AB:3E:6C:9F:C2:10:7D:76:41:C0:C3:B6:9E
            X509v3 Authority Key Identifier:
                keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:c7:13:bf:56:d3:10:07:17:40:a2:74:a7:61:bd:3b:dc:
         cf:5a:32:c8:e8:19:5a:f4:91:72:9f:c0:5c:05:0c:26:3d:33:
         dc:f7:9d:bf:0d:9c:74:bb:10:ec:00:eb:ac:58:df:1d:c7:d1:
         4b:c4:64:87:d9:41:c3:fe:37:43:b8:3d:fc:5c:4b:96:04:a2:
         7c:f3:6e:e8:51:f5:04:1b:a7:d0:01:8e:d5:a0:b6:6b:f7:20:
         11:5d:6e:d9:49:0c:77:13:dd:dc:6e:23:25:92:8c:82:83:a8:
         e5:0e:2b:55:b1:55:dc:12:13:c3:71:2f:08:68:e1:5e:25:d2:
         ed:86:5f:2b:20:07:31:95:49:f8:72:5c:cc:72:0e:db:1a:64:
         9d:fc:83:43:71:66:62:8c:b2:e2:54:17:1a:19:b9:d2:8b:80:
         18:46:d1:86:c3:4d:db:86:60:5b:6e:e3:c7:2f:fd:2e:72:a0:
         16:97:a6:33:8e:51:dc:f1:b1:7c:ca:3c:df:92:f2:07:d9:b5:
         4d:bb:8b:c3:af:68:06:15:3f:a9:13:7a:c6:70:e1:21:bb:13:
         84:bf:d0:96:db:cf:92:20:e6:4d:39:15:97:c7:6f:c8:ee:2b:
         2a:cb:88:44:bb:da:42:51:a5:31:c2:18:8b:59:e9:da:44:3a:
         59:3a:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:21 2025 by rpki-client