Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          JIRuMlQ2lR3k8BDB+DtJUEEQZr19YZW7MY1TtnCRc3o=
Subject key identifier:   1B:8A:05:C7:D2:D4:25:F0:D7:B5:C3:48:E8:78:CB:E5:DC:F6:59:F2
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01992E59948F4FEF92906B49AF08ABE3F848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1309
Signing time:             Tue 09 Sep 2025 12:00:46 +0000
Manifest this update:     Tue 09 Sep 2025 12:00:46 +0000
Manifest next update:     Wed 10 Sep 2025 12:00:46 +0000
Files and hashes:         1: 6qEQVs9RJhELhTSt-yx6PdqTH4k.roa (hash: MJPHmKEomDKDrIf3X9T4A591PCDIN9biU5Xak896EvA=)
                          2: SWCjjUaxCAvLsIqlq6JIIAKsNyg.roa (hash: IheYNJ5DBR2ARWU4KPU8QmLGQuMxzruzWVG2AoLba3s=)
                          3: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          4: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
                          5: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
                          6: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          7: jOJMuOf3wW9QD0EWILNZcKmfsMY.roa (hash: IwHFADa8djjRXX5pH/rvBdr8XX2U2mjyDg3i8wc0tqI=)
                          8: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: zeDTYkLy7f3QKnWVAyVGBHJb9XtlZwgSDW2tt4pyAeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:59:94:8f:4f:ef:92:90:6b:49:af:08:ab:e3:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Sep  9 12:00:46 2025 GMT
            Not After : Sep 10 12:00:46 2025 GMT
        Subject: CN=1b8a05c7d2d425f0d7b5c348e878cbe5dcf659f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:ee:5a:b4:86:19:dd:90:f7:88:10:e7:89:
                    e6:0f:17:f6:aa:43:4a:b5:58:86:8d:77:02:c9:ec:
                    50:3e:77:54:c3:a0:fa:e9:e0:08:08:33:0a:ce:f0:
                    98:26:17:a4:92:c7:89:50:e0:fe:83:3f:2a:ae:fe:
                    7c:5d:df:b2:66:06:ef:72:68:af:c3:2b:9c:2a:b5:
                    dc:25:26:8f:a0:68:e6:04:9c:db:09:65:32:a9:46:
                    e1:29:a5:82:28:5a:6d:ae:2b:aa:42:35:e1:d4:3f:
                    4e:b7:6e:93:c8:4e:81:75:9b:2a:fa:c4:f9:18:d0:
                    08:a0:fd:92:30:17:8d:e0:c8:00:a0:60:f6:5f:25:
                    f8:44:35:a7:18:36:82:03:83:74:ef:b9:11:c6:f3:
                    70:6e:89:1a:dc:45:57:16:53:63:8c:93:33:63:5e:
                    2d:31:c0:df:8d:66:61:09:a7:e7:5d:d9:c8:97:fb:
                    80:ff:8a:9d:e1:e4:b6:f3:48:df:06:76:95:7d:8f:
                    b2:26:bb:a6:37:25:c0:40:cd:90:11:2c:ca:06:a5:
                    6e:ba:a2:12:61:d6:a1:bd:c5:f4:67:21:18:3b:bc:
                    a1:57:2b:c3:e4:82:7e:0a:37:e4:8e:8d:da:cd:a5:
                    23:11:58:b6:96:fd:89:4f:10:de:89:31:a7:2c:1d:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8A:05:C7:D2:D4:25:F0:D7:B5:C3:48:E8:78:CB:E5:DC:F6:59:F2
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:c2:94:89:e7:80:a7:2d:66:6e:a4:1f:2d:62:3a:97:71:
         81:f1:35:a4:38:41:33:ea:e4:22:e2:cc:0b:9f:08:0e:7a:ba:
         20:5d:ef:be:91:3f:12:e2:66:0a:27:4d:35:06:6b:8e:59:16:
         aa:70:1c:dc:5c:e0:da:7d:41:0e:9a:eb:85:4d:70:8c:5b:03:
         9a:3a:21:ac:e3:7b:e2:b5:b1:7c:7d:42:0f:6b:ef:00:0b:fc:
         10:24:02:1c:b8:7d:20:2b:b0:d7:22:f7:92:8e:a6:8d:30:ce:
         06:c5:83:ae:35:31:ea:32:af:04:f1:47:e9:b7:25:9e:c4:f0:
         c8:2b:ba:ac:38:c3:cb:0f:31:57:c7:b5:e0:9c:65:71:d8:40:
         5f:84:0c:62:21:3e:7f:6b:fe:bb:5a:86:bf:9e:21:2e:c8:7f:
         c4:a8:dc:54:09:49:6f:ad:45:ed:0d:e5:6e:03:67:08:88:05:
         8a:5a:c2:23:2c:3a:54:ac:75:bb:d6:2b:a4:b1:fe:12:ee:84:
         98:ea:40:d6:21:ab:ae:29:b3:70:6d:fd:27:99:b1:60:7e:54:
         ca:a7:9c:9a:18:1c:9d:c2:83:84:a2:93:dd:e3:18:85:e9:dc:
         d8:39:9b:c2:3d:eb:67:02:a9:41:96:38:7b:26:f6:be:fa:11:
         20:1d:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:18:36 2025 by rpki-client