Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File:                     uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier:          hAEXOImEZ8iIuO/qhHfyhmgftSlKoFChuA0CWeMxyDo=
Subject key identifier:   B1:47:1A:D2:FA:A5:B0:4E:91:D4:3A:D7:74:BF:D4:4F:15:FE:C8:0A
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       019A7225DD0E3B6051A87C31A1B55E420CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number:          1722
Signing time:             Tue 11 Nov 2025 09:01:15 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:15 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:15 +0000
Files and hashes:         1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
                          2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: LOBeLIBVxY+C9xlWmv6tBbNxPJX/OiJqn0ol/Wn324o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:dd:0e:3b:60:51:a8:7c:31:a1:b5:5e:42:0c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Nov 11 09:01:15 2025 GMT
            Not After : Nov 12 09:01:15 2025 GMT
        Subject: CN=b1471ad2faa5b04e91d43ad774bfd44f15fec80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:e6:d1:3c:4d:83:4b:85:37:7b:6c:af:bf:
                    76:de:de:94:bd:9f:4f:f9:ad:1b:0d:83:53:50:7a:
                    b7:41:90:80:27:ab:4e:5a:eb:46:f3:3f:3e:ab:d1:
                    77:44:8b:76:4e:76:d7:57:c1:be:82:74:5c:7e:3b:
                    44:ea:0e:cd:37:92:60:5a:84:79:8a:ff:9e:59:72:
                    2c:9b:a4:ae:4f:31:6a:0e:52:49:5c:72:4c:b1:ce:
                    32:0d:6a:3e:bb:b4:fe:3a:21:50:53:4c:1d:e6:c5:
                    14:52:7a:58:1a:c7:45:06:3f:50:d4:d7:58:b7:42:
                    30:65:f6:a8:5e:89:29:19:a6:d3:32:f6:13:66:04:
                    8f:6f:00:a3:3a:4d:0a:45:b1:93:30:21:69:fa:ec:
                    bd:89:88:7c:67:43:93:9a:76:d5:12:13:6c:12:d0:
                    c4:ee:20:28:4c:30:a4:33:2d:37:a1:70:be:50:b7:
                    8d:de:e3:89:50:23:1a:ee:f9:f9:c4:f1:00:9a:ed:
                    6d:13:a4:1a:f5:c7:bc:a3:5d:2c:53:85:05:f6:6a:
                    a3:49:6c:e5:a2:1b:3b:6a:e9:9f:17:24:f8:a1:f2:
                    03:4a:75:e0:84:f1:09:c9:55:5b:0e:5a:15:e9:fa:
                    c4:27:ee:bd:31:d1:6c:3f:d5:13:be:6e:90:20:8c:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:1A:D2:FA:A5:B0:4E:91:D4:3A:D7:74:BF:D4:4F:15:FE:C8:0A
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:02:fa:b6:cb:13:96:82:0b:42:c2:b4:20:44:51:5f:17:
         eb:28:78:1e:5f:3a:f2:47:75:20:e4:ae:ef:0e:07:09:0e:29:
         65:12:c1:6e:42:7b:b1:73:6d:cf:c5:49:91:0f:35:e0:e3:bc:
         fc:1f:d1:7c:67:cf:04:af:3f:39:7c:d8:fa:84:01:85:c1:38:
         b6:dc:cc:5e:81:d3:75:26:a3:fb:4c:4b:40:df:f9:af:81:b5:
         fe:9a:b1:d6:41:98:6c:e4:08:42:9b:29:0c:a4:27:63:4c:60:
         a0:94:27:e2:7b:33:d2:34:c6:8b:e8:18:77:cf:94:0f:7d:50:
         12:9a:38:03:30:c9:26:78:ad:05:75:4d:97:66:f3:ab:b8:8b:
         b2:65:5a:40:11:fe:ed:05:37:9a:ba:60:1d:87:76:69:cc:53:
         05:e7:0f:6e:3b:26:a2:7c:eb:6d:de:5f:30:c4:9e:eb:ff:73:
         49:ce:fe:fc:05:bf:30:ed:91:06:26:3c:60:16:3b:0e:c5:cd:
         e9:73:ae:fa:28:e8:50:1a:61:81:07:86:85:7f:1b:c3:71:97:
         97:bc:5d:9d:e0:4b:37:91:f5:67:dc:b3:76:ac:84:ae:de:6f:
         e8:3a:0b:9a:c0:70:7e:b8:4e:e3:f8:81:98:88:e6:98:04:27:
         05:d5:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client