Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File:                     Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier:          uJlEaSsEQK7dRrvu0Z96sOz5o7foj+LoHmP3efZJ4zE=
Subject key identifier:   63:5C:CF:2F:07:98:E3:5F:71:18:9C:24:81:96:C4:68:E3:87:0F:1A
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer:       /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial:       019923A0A1CFB11793867049CD79FBD3CE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number:          119C
Signing time:             Sun 07 Sep 2025 10:02:33 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:33 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:33 +0000
Files and hashes:         1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: WMi7PJvguRoJzXOX8fVX10e64A3kEyZww3/Jw7SLZDY=)
                          2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:a1:cf:b1:17:93:86:70:49:cd:79:fb:d3:ce:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
        Validity
            Not Before: Sep  7 10:02:33 2025 GMT
            Not After : Sep  8 10:02:33 2025 GMT
        Subject: CN=635ccf2f0798e35f71189c248196c468e3870f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:3e:fa:2f:9b:60:d7:c3:06:e6:91:b5:0c:
                    a4:06:30:cc:50:85:73:57:4c:d6:e4:fc:df:03:11:
                    63:f3:a6:f2:0b:7c:c6:39:0b:7f:31:2e:12:53:f3:
                    2b:7c:f0:29:5b:33:a0:e4:ea:c3:6a:08:31:59:c0:
                    38:c8:b3:f2:4c:4c:df:10:c5:84:b3:1d:5f:3a:ab:
                    1c:30:25:40:07:64:83:c6:32:9e:f2:74:7e:bd:d7:
                    2e:5f:c8:a6:32:dc:4e:a1:c3:2a:dd:4a:01:2e:fd:
                    b6:8b:63:73:ac:77:18:f1:a2:65:ae:28:fa:4c:a9:
                    4c:3a:5e:a1:84:26:f0:71:f3:f1:18:a1:69:53:86:
                    a9:3c:6a:ca:10:f7:0c:10:8f:3d:f0:23:fd:c5:c1:
                    e4:a9:df:1f:e0:89:74:63:09:4b:58:a8:18:d2:35:
                    ee:de:09:ac:ad:3a:b5:58:c9:71:87:6b:bd:be:a2:
                    2b:a4:fc:d9:41:85:29:33:6b:1d:f4:61:4a:39:cc:
                    70:53:9b:f2:48:a9:79:5f:06:80:b1:0e:a3:41:2e:
                    8b:42:c4:b2:28:da:44:0f:7d:7d:d6:fb:d9:2f:d5:
                    b0:09:75:17:94:88:5c:de:0f:53:18:90:ef:70:69:
                    be:ad:12:76:82:dc:bb:6b:fb:27:aa:8a:82:8b:fe:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:CF:2F:07:98:E3:5F:71:18:9C:24:81:96:C4:68:E3:87:0F:1A
            X509v3 Authority Key Identifier:
                keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:00:16:da:91:a9:19:99:16:8c:8f:7f:37:8e:18:82:8c:
         8e:4a:d2:1d:ec:95:63:4e:00:6b:6a:5a:10:a1:7c:f1:f8:c6:
         76:6c:f8:57:83:4c:97:ac:68:21:45:bc:16:11:9c:1c:b2:32:
         30:89:83:d1:20:26:23:fa:aa:38:d8:0d:18:b5:e9:f8:96:e4:
         ac:0b:7d:5c:05:80:06:d5:60:7c:b7:88:e8:c6:4d:46:9d:0b:
         96:0b:27:eb:b2:a1:7e:88:05:eb:77:74:c5:e9:08:80:b2:68:
         93:6b:8a:b1:c5:27:bd:f2:3a:fe:b9:38:19:b7:c0:d7:f7:ad:
         bc:69:f2:e5:db:12:f8:0c:ac:bf:2f:e4:97:f2:4f:6c:d8:ed:
         b8:3d:12:7d:51:a3:10:a1:d3:db:43:41:27:11:07:f1:45:23:
         b9:39:8c:f0:9e:fc:5b:15:45:57:0d:70:78:82:c3:b4:44:0a:
         2a:ab:db:5e:6b:8a:49:8f:f3:a3:86:b9:66:dc:3a:41:8e:2c:
         10:e9:26:c8:2e:f2:c4:33:cd:e1:34:b9:39:e6:c4:07:e0:d0:
         4e:8c:66:48:dc:10:f4:fb:74:b2:e4:7a:eb:48:68:85:b3:18:
         6d:71:07:6b:9d:ca:4a:90:fc:0f:f2:f3:e1:72:30:ca:30:10:
         32:e1:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:26 2025 by rpki-client