Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File:                     1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier:          8FA2Fe62bHFXxy2r8Y6jJQTVL8+bjeEtaiqzT8bvOeU=
Subject key identifier:   A0:5D:3C:90:BB:16:B2:47:8D:6B:9C:79:0A:E8:E6:F8:BA:1D:DA:14
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer:       /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial:       019847AD814D0CF0A127DD801801B08DCA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number:          104C
Signing time:             Sat 26 Jul 2025 17:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:09 +0000
Files and hashes:         1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: B5fR3/mMBYLwiKBJuHnvwBv4Mv2x4xqhwg81p9sk9yc=)
                          2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:81:4d:0c:f0:a1:27:dd:80:18:01:b0:8d:ca:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
        Validity
            Not Before: Jul 26 17:00:09 2025 GMT
            Not After : Jul 27 17:00:09 2025 GMT
        Subject: CN=a05d3c90bb16b2478d6b9c790ae8e6f8ba1dda14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:af:13:1b:2b:1b:3c:39:68:8d:08:1f:a6:
                    b0:ac:6a:dd:3a:84:ac:e0:82:cb:23:c3:3f:ec:09:
                    57:ca:7d:48:ad:f0:f5:10:c4:0c:19:57:38:04:0f:
                    4b:c7:d6:c3:fd:f5:53:bc:ee:64:34:6d:b7:94:14:
                    03:fb:5d:f3:b2:72:c9:90:22:2f:22:15:d9:28:1d:
                    fe:e7:5c:3f:a8:4f:1e:27:85:7f:7c:c9:bd:5c:2f:
                    5a:2b:91:9b:26:08:12:13:94:cb:51:9a:e3:9f:43:
                    cf:87:04:55:e0:08:d9:80:7b:a0:bc:81:1c:40:64:
                    a9:d4:77:3f:0d:25:ea:cf:53:55:98:5b:ab:cf:c7:
                    91:fd:cc:08:f4:bb:3f:bc:28:ea:f8:97:a7:9f:a1:
                    90:78:b3:18:41:d6:f4:e4:fc:4f:b2:bc:f6:00:f4:
                    48:77:58:27:b5:0b:f0:ec:6b:29:1d:1c:d6:fb:e1:
                    ec:ee:f0:c6:5f:f0:07:58:f8:73:a3:2c:e9:85:66:
                    ea:a1:14:45:7d:1b:4e:18:32:3a:a7:f8:72:bc:9c:
                    e0:3f:88:a9:21:1e:95:a1:bc:b2:3e:55:5b:cc:2c:
                    75:02:d3:b6:d0:f8:ad:1f:a0:ac:cc:d8:32:81:00:
                    65:3d:d3:64:32:26:af:84:fd:c0:1d:01:13:b4:59:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:3C:90:BB:16:B2:47:8D:6B:9C:79:0A:E8:E6:F8:BA:1D:DA:14
            X509v3 Authority Key Identifier:
                keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:fa:ea:73:8a:3e:9b:d8:08:b3:0e:c1:af:66:ec:19:26:
         dc:44:9b:db:71:7b:d0:26:26:79:ff:0c:7c:f0:d2:23:76:31:
         9e:2f:81:f3:74:25:d2:15:7e:ff:12:15:0a:99:18:6a:45:55:
         6d:7f:20:51:a7:d4:b8:fb:fb:b5:66:03:2a:ca:f2:f8:0c:25:
         b0:f0:a7:67:b7:5e:ef:f8:dd:c3:b2:6d:0f:d9:1a:b6:ce:7f:
         f6:71:85:d9:7f:24:d4:ec:94:8e:69:e1:cc:fb:d0:28:94:c0:
         ab:bc:44:19:f1:61:f9:38:45:79:c2:72:fa:a7:37:bd:be:df:
         d8:53:08:44:9f:33:8d:1e:5d:4f:64:75:80:72:fc:da:c4:72:
         54:12:74:be:4c:10:4a:18:c3:5c:25:fb:13:ea:17:8c:f5:a3:
         87:32:21:34:d4:08:ec:8c:8c:a5:87:31:2e:1c:93:a7:4c:1e:
         c5:e0:23:1d:d5:7a:25:6d:aa:e6:20:d9:6d:b0:df:2a:6f:58:
         81:2e:48:77:70:49:57:bb:a0:bd:75:9a:c9:40:5b:28:9a:03:
         26:7b:6a:84:6c:c2:9f:aa:94:10:10:64:d3:ba:fd:10:d5:1a:
         fb:7f:e8:4d:ba:2d:86:b5:5a:04:93:25:69:0d:e3:c5:7d:c9:
         30:4f:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:24:56 2025 by rpki-client