Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
File:                     UwUgCbp4mNI2HKLufRMBJPnSUSU.mft (raw, json)
Hash identifier:          QIreZOAqlIw3iZw/+NzP4iH4Yz0musF7pSvRjMyknfw=
Subject key identifier:   AF:BA:27:5B:6F:E1:AD:47:69:19:04:5E:D6:68:78:6F:F7:80:1D:B3
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Certificate issuer:       /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial:       0199228CC2EB7108A40763246410A5FC2316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 05:01:14 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:14 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:14 +0000
Files and hashes:         1: CxOk9LmHNEmsk0bxkFd_ya6kVMw.roa (hash: O9c9fUKfwHQgnelPj+XeJfzisbErQmRyHoqOIpWTkUc=)
                          2: UwUgCbp4mNI2HKLufRMBJPnSUSU.crl (hash: I7fVlO3YpcGEp0axcDc1qkVSvSBv+6W/NpEIePT4cLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:c2:eb:71:08:a4:07:63:24:64:10:a5:fc:23:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
        Validity
            Not Before: Sep  7 05:01:14 2025 GMT
            Not After : Sep  8 05:01:14 2025 GMT
        Subject: CN=afba275b6fe1ad476919045ed668786ff7801db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:e1:8f:25:80:47:34:18:76:92:e8:18:79:
                    a1:11:c6:e0:5b:0a:03:03:cc:7d:bb:8d:97:bb:c9:
                    36:2f:bb:c1:8d:28:c9:f1:9a:3a:0b:3b:cd:d5:3e:
                    77:c3:44:39:cd:08:c7:a4:45:06:17:12:07:6c:6a:
                    6a:cf:b1:3b:67:19:3c:1c:55:03:95:e6:0b:09:38:
                    55:cb:45:46:e0:52:29:49:b4:56:18:40:43:2a:2b:
                    d3:ca:43:6c:ea:b8:aa:bf:fe:ba:f3:d7:c0:ee:9f:
                    80:cc:07:eb:d6:51:2b:b5:c3:c7:ab:47:4d:70:b0:
                    98:c8:be:d3:bd:34:48:e0:cd:8e:23:6a:37:cc:a0:
                    91:45:72:dc:3e:4a:b8:d2:11:49:4d:2b:1f:a8:d8:
                    9d:bd:b0:e7:ad:aa:ec:5d:b8:8d:4a:bb:49:2d:1c:
                    d5:fe:9d:73:ce:84:69:4a:42:8f:2a:d7:59:c0:58:
                    77:ca:f1:2f:77:d7:97:ba:e5:49:55:b0:be:03:c4:
                    2c:6d:ec:f4:cb:f8:c6:1b:4d:b0:7c:db:e6:45:eb:
                    71:c5:c2:44:93:dd:88:8f:65:22:d1:b3:e4:f2:63:
                    07:a8:91:7f:04:1c:e7:ad:9f:78:68:bd:69:6e:99:
                    3f:8f:cd:03:a2:65:e2:77:c4:34:61:5e:5c:74:1c:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BA:27:5B:6F:E1:AD:47:69:19:04:5E:D6:68:78:6F:F7:80:1D:B3
            X509v3 Authority Key Identifier:
                keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:79:c4:0a:05:33:48:03:ed:5d:3c:10:5e:d7:ea:92:b7:c9:
         ca:22:98:ca:66:1f:16:ed:a9:20:37:cf:0f:e2:36:4b:bc:f3:
         0f:c9:59:a9:27:aa:10:34:6f:bd:1d:6a:c7:57:d4:b0:52:b1:
         4d:7b:aa:c1:ce:1b:df:bb:8d:4f:5d:61:cf:66:16:74:83:94:
         17:99:6c:f1:f9:a6:9f:7c:ce:b2:68:85:af:8c:74:b5:5c:5a:
         01:4c:da:85:4d:78:e4:71:5f:22:d0:51:48:88:ee:9e:de:8c:
         3f:72:9b:e5:f4:fa:ff:7b:b0:1d:6a:80:6b:8b:65:da:9e:60:
         ac:84:70:96:e6:6a:bb:d8:aa:f7:ac:eb:d1:a1:78:08:e2:ea:
         88:41:88:86:39:c6:3b:37:7d:61:bb:27:0d:f2:a4:c8:97:f8:
         4f:ab:05:cb:48:be:c1:cf:b5:a0:00:a4:b5:f1:25:94:fc:2d:
         2f:01:9d:03:a3:50:29:81:ef:f7:ea:57:be:49:3f:a1:39:78:
         bf:b5:53:94:de:fc:a7:f9:38:6c:02:b8:c1:34:38:e2:63:a3:
         df:5f:8b:28:5f:75:df:6b:86:20:db:e8:0a:06:bc:51:02:9e:
         95:08:fa:48:8d:da:58:b8:24:52:0f:e3:8c:84:16:50:89:aa:
         67:73:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:15 2025 by rpki-client