Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          4GcIrTYSMdO5wfUMNDhm+xS+K1LUuHDOnUVHFN69za0=
Subject key identifier:   D3:57:83:2E:A2:C5:01:0B:5D:E7:4F:1E:4B:2E:76:58:7F:B9:97:50
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       01984A416F69DA3CAAEF777D312742DB0A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0D37
Signing time:             Sun 27 Jul 2025 05:00:59 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:59 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:59 +0000
Files and hashes:         1: 3bdkyDOPeFMUXLwSE8-H9WsoE5Q.roa (hash: PlZdxhGvkiUhGU+GOrrf1QUy/EtgNJlhb0ER9kfhqcI=)
                          2: AOSq8jvRD_WKVZyPJu4LaHoHpzE.roa (hash: n60VWQlqDY23/ZNqDJ0OTIszqL0LQ9YP9uU56T6Wofs=)
                          3: k0wxotDmupM_OCH-gumYl6-17mo.roa (hash: 3uzjcHPmVZPolSBJCFaFe8TY8/nPe+It+9iUZVl84Zw=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: +0uzNok4klJPtYB0Kr/BUNVPsrTZxMSLJRPAhZswgeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:6f:69:da:3c:aa:ef:77:7d:31:27:42:db:0a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Jul 27 05:00:59 2025 GMT
            Not After : Jul 28 05:00:59 2025 GMT
        Subject: CN=d357832ea2c5010b5de74f1e4b2e76587fb99750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:4a:d1:c1:4b:ba:4e:0c:cb:89:7f:09:f0:
                    e3:26:ef:ba:ca:cd:db:63:68:0c:2e:c6:d7:93:bd:
                    2c:22:68:6c:97:b0:c1:3b:b0:b1:e4:6f:b2:75:f5:
                    74:a9:c7:d2:1c:9b:25:ea:52:ef:f8:16:7e:73:d5:
                    82:51:2d:48:fc:4e:11:44:ed:a2:a4:be:19:36:27:
                    f4:39:29:25:46:f7:d8:8c:3c:ea:ec:cd:59:81:55:
                    9b:df:db:a5:7d:e3:3a:0b:30:8e:c4:af:c0:7a:2d:
                    73:e0:ce:e0:ec:79:0b:b9:1f:a0:4f:c3:4f:4c:a1:
                    8a:85:b4:80:d4:eb:3b:48:a3:c8:36:3c:0d:cf:f9:
                    13:bb:86:2b:73:28:5a:fa:76:21:f3:d4:1b:b4:30:
                    90:d7:89:4a:ac:c1:fd:3d:1f:ea:b8:a3:f2:75:43:
                    6e:21:d0:6c:53:6e:a4:60:1f:d1:3f:d7:f8:6d:27:
                    7b:7c:e8:09:fa:c6:de:da:57:77:06:f4:ea:4b:1e:
                    5a:6f:a6:ad:6a:97:24:ba:bd:85:59:f7:31:2a:07:
                    e3:7f:d3:a8:a3:cb:e0:32:12:82:b4:09:db:43:fc:
                    78:4a:b2:54:61:f1:0f:5d:26:c3:a2:a6:ae:6d:39:
                    2a:25:a1:58:6b:65:fb:ae:5b:69:d1:ed:44:bb:8f:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:83:2E:A2:C5:01:0B:5D:E7:4F:1E:4B:2E:76:58:7F:B9:97:50
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:25:ac:81:eb:ed:65:46:e1:e5:d0:e2:5b:17:80:16:df:74:
         84:3c:7f:f7:70:69:7b:f8:e5:7a:f5:3e:fb:be:46:3d:53:97:
         cc:2a:71:d9:d8:e5:ec:d8:15:99:97:ab:b9:01:84:61:a9:17:
         dc:38:c5:4f:8d:ea:dc:bb:12:cf:6d:7e:55:61:e9:a8:84:0b:
         58:65:bc:cc:01:3a:11:2f:03:aa:df:91:89:7a:73:43:e6:ab:
         1e:fc:49:27:f4:c1:04:96:ca:d4:89:4e:6f:a8:5b:1d:25:54:
         44:cd:61:4e:ad:0c:07:14:ae:63:28:92:84:d5:36:94:a2:44:
         7c:e1:ac:91:db:de:98:97:87:95:3d:d5:b4:04:a4:b8:ea:33:
         09:1b:04:33:6f:64:94:6c:f8:dc:b6:0f:ce:c7:3c:8e:2e:3e:
         0a:82:37:02:95:05:dd:0f:43:22:e1:c5:90:4b:3f:ac:a8:b1:
         c7:7f:09:8a:5b:7f:61:65:b9:c2:5b:21:a7:fc:18:48:b9:23:
         ca:e9:53:41:5b:3b:5f:de:5e:f7:69:8f:91:1e:b1:56:00:a4:
         ed:83:11:17:82:04:58:79:8a:b8:e0:f6:92:e5:19:86:52:62:
         99:1c:13:ee:ac:ac:b8:54:ff:1c:c8:07:ca:80:84:e0:86:67:
         65:d9:69:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQW9p2jyq73d9MSdC2wp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDViM2QzNzlkMjExNjJlMmI1MjJjNDM4MDFmYjk2MDM5
ODgyNDUwHhcNMjUwNzI3MDUwMDU5WhcNMjUwNzI4MDUwMDU5WjAzMTEwLwYDVQQD
EyhkMzU3ODMyZWEyYzUwMTBiNWRlNzRmMWU0YjJlNzY1ODdmYjk5NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk1K0cFLuk4My4l/CfDjJu+6ys3b
Y2gMLsbXk70sImhsl7DBO7Cx5G+ydfV0qcfSHJsl6lLv+BZ+c9WCUS1I/E4RRO2i
pL4ZNif0OSklRvfYjDzq7M1ZgVWb39ulfeM6CzCOxK/Aei1z4M7g7HkLuR+gT8NP
TKGKhbSA1Os7SKPINjwNz/kTu4Yrcyha+nYh89QbtDCQ14lKrMH9PR/quKPydUNu
IdBsU26kYB/RP9f4bSd7fOgJ+sbe2ld3BvTqSx5ab6atapckur2FWfcxKgfjf9Oo
o8vgMhKCtAnbQ/x4SrJUYfEPXSbDoqaubTkqJaFYa2X7rltp0e1Eu4/02QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNXgy6ixQELXedPHksudlh/uZdQMB8GA1UdIwQY
MBaAFLjVs9N50hFi4rUixDgB+5YDmIJFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMt
YjNlOTI1NWQyYjNlLzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMtYjNlOTI1NWQyYjNl
LzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyWsgevt
ZUbh5dDiWxeAFt90hDx/93Bpe/jlevU++75GPVOXzCpx2djl7NgVmZeruQGEYakX
3DjFT43q3LsSz21+VWHpqIQLWGW8zAE6ES8Dqt+RiXpzQ+arHvxJJ/TBBJbK1IlO
b6hbHSVURM1hTq0MBxSuYyiShNU2lKJEfOGskdvemJeHlT3VtASkuOozCRsEM29k
lGz43LYPzsc8ji4+CoI3ApUF3Q9DIuHFkEs/rKixx38Jilt/YWW5wlshp/wYSLkj
yulTQVs7X95e92mPkR6xVgCk7YMRF4IEWHmKuOD2kuUZhlJimRwT7qysuFT/HMgH
yoCE4IZnZdlpmA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:02 2025 by rpki-client