Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          jzJ4OHi04JQrzFL0MHQSMTxGJH3d3DpMLS5Z1Vwkbds=
Subject key identifier:   6A:AC:DB:5E:83:C6:AE:55:BE:89:E6:F3:46:5B:EE:97:31:30:EC:94
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       0198443E95E5AF5E06F7468380CA1B8B15D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          0F8A
Signing time:             Sat 26 Jul 2025 01:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:08 +0000
Files and hashes:         1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=)
                          2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=)
                          3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: xeaQcrFNjJAtDLJl0QNaXuSaSdq2K88nsa1EQ5gR4Pw=)
                          4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=)
                          5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:95:e5:af:5e:06:f7:46:83:80:ca:1b:8b:15:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Jul 26 01:00:08 2025 GMT
            Not After : Jul 27 01:00:08 2025 GMT
        Subject: CN=6aacdb5e83c6ae55be89e6f3465bee973130ec94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fc:78:73:d5:49:85:8e:20:09:cd:d5:58:93:
                    d0:b8:00:48:67:aa:61:e7:94:20:9f:79:69:f3:d7:
                    51:23:d1:40:d5:f8:60:3e:0a:1a:9e:a9:31:57:88:
                    81:9a:8e:ab:34:cc:6a:4e:da:9f:38:e1:f2:a5:de:
                    c0:d0:77:bf:74:d0:1f:6e:c5:f7:78:ca:48:fa:e1:
                    28:31:e9:09:12:42:3e:fe:38:62:61:46:5d:5d:b4:
                    82:ce:0b:1d:10:36:3b:c4:42:f2:5d:80:69:13:97:
                    a4:80:5b:a7:c4:c4:6b:3f:2c:3d:11:6f:2e:dd:f6:
                    0b:99:0a:b2:cf:40:d2:a4:8d:a1:c9:38:9e:06:ac:
                    15:1c:ae:7e:db:2e:b7:84:f2:7b:f7:6b:27:3b:92:
                    e8:1d:49:e2:da:73:0a:96:20:3e:a4:ae:d0:63:d0:
                    38:3b:24:5c:9b:3b:d3:32:c5:7a:c5:da:b4:5f:43:
                    56:e2:dd:79:68:cf:cb:33:a8:41:f1:50:de:9b:f4:
                    47:40:28:7b:b8:13:a1:fc:84:c3:78:ee:30:1c:7b:
                    38:5d:b2:60:c6:9e:81:f6:09:a2:43:86:17:a3:cf:
                    2c:0d:32:4f:0a:15:1f:08:8c:19:f9:2c:75:c3:2f:
                    f3:47:c6:c9:11:4b:2a:f6:4f:16:37:3e:1e:95:70:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:DB:5E:83:C6:AE:55:BE:89:E6:F3:46:5B:EE:97:31:30:EC:94
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:52:d5:ba:09:57:e3:6d:c3:e9:0e:98:ce:f0:0a:ee:9b:
         6f:89:32:33:9e:91:14:d3:a6:7b:98:54:e9:64:c8:b5:78:6c:
         18:b7:b2:9c:db:e6:44:ab:5c:09:03:65:6c:02:b6:d7:49:92:
         63:c8:c7:cb:20:17:aa:e0:52:96:9b:ba:16:5e:1a:17:a1:5b:
         e1:28:01:8d:0b:d0:25:76:97:1c:2c:10:d1:8f:0b:50:bc:23:
         f6:5e:59:b8:6a:54:b9:e5:8f:b2:d5:9f:d2:2a:c2:46:2b:d4:
         e8:e5:73:e4:f1:9c:d2:8c:b2:9a:be:18:1d:d7:94:54:fa:07:
         f9:8f:73:73:eb:fe:73:c9:f7:a9:fb:61:dc:0a:b3:df:a5:98:
         23:8f:30:b1:cb:f4:d6:34:01:0c:a1:ca:f3:5b:b8:98:66:4d:
         7e:c2:ae:b6:35:6e:8a:b6:47:d9:d1:86:11:18:1d:0f:72:57:
         41:64:9e:6b:e9:a9:9b:e4:9d:4b:31:8a:a7:1e:f9:01:77:e8:
         0b:23:2f:32:8e:b9:87:15:0b:ee:0c:6e:d0:73:a6:f7:8e:61:
         68:43:eb:68:fc:42:04:dd:23:31:bb:4f:d3:c1:d8:89:34:6b:
         46:b3:85:65:61:2a:f0:cd:06:c6:84:49:39:60:39:2c:4e:a5:
         ef:03:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:07:52 2025 by rpki-client