Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File:                     UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier:          1yfiFTTvg92c8QlgtE7RWCvPfDx9heCZJRAaQUg5CF0=
Subject key identifier:   68:CE:3A:CF:CC:B4:45:B3:8E:5F:01:14:48:1A:00:E0:B1:20:AA:9A
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer:       /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial:       019922FA82A219A5C6547E38EB69730F3FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number:          0490
Signing time:             Sun 07 Sep 2025 07:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:06 +0000
Files and hashes:         1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
                          2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: 5TSFYgF1J096/5wpCqDkDu3tsdIzNoa5oTqAmSu5b/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:82:a2:19:a5:c6:54:7e:38:eb:69:73:0f:3f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
        Validity
            Not Before: Sep  7 07:01:06 2025 GMT
            Not After : Sep  8 07:01:06 2025 GMT
        Subject: CN=68ce3acfccb445b38e5f0114481a00e0b120aa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:89:bb:6e:3c:6f:fb:13:5f:1d:25:a6:a5:
                    5a:f3:47:ec:34:18:ac:0f:51:53:f6:63:56:15:e1:
                    b5:23:cb:cd:26:3f:f2:21:7e:93:c1:fe:be:c5:db:
                    23:7c:03:a6:0e:ce:48:ea:39:1f:00:1e:66:9b:a0:
                    d6:5a:ff:76:04:ce:b4:0e:67:67:1d:9e:04:53:f4:
                    32:25:e0:1c:25:67:0e:fc:ad:af:1b:21:bc:7e:0c:
                    4c:47:cf:3f:07:23:81:90:92:83:39:b3:60:77:68:
                    8e:fa:17:c1:20:fc:32:69:de:5b:71:5d:23:19:81:
                    29:f7:1e:21:c6:47:78:37:e4:ee:b3:e0:bc:84:7b:
                    8c:fd:f4:55:6d:fa:cf:ac:5c:3d:d4:87:ba:0a:a0:
                    31:ef:af:89:ee:1f:51:f6:a1:d3:97:f9:57:c8:04:
                    06:b0:48:d0:b2:b6:57:16:cc:fe:50:6e:3c:a4:4b:
                    89:7e:d6:59:18:b7:96:51:7a:10:8a:f4:e3:68:bc:
                    43:e7:bb:d8:07:c6:f1:ba:3e:6b:6f:64:18:a1:22:
                    6a:0d:f5:42:9c:31:ea:42:7b:9c:4b:e6:84:4c:28:
                    f9:8e:d6:82:7c:05:09:82:6a:13:bd:49:61:5f:d6:
                    26:c2:c7:63:6d:5c:d7:f8:3f:b5:9b:a8:dc:5a:70:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:3A:CF:CC:B4:45:B3:8E:5F:01:14:48:1A:00:E0:B1:20:AA:9A
            X509v3 Authority Key Identifier:
                keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:31:f3:06:80:8d:b0:d9:f3:07:15:a1:3f:f4:9d:9c:be:87:
         7a:5c:ee:c4:51:00:96:a8:c3:1c:95:b0:83:1e:6e:28:79:cf:
         e1:9b:49:c4:99:a7:7e:dd:b0:b8:c4:21:b3:e3:a5:07:b7:9e:
         52:8c:32:c5:fd:2f:e6:d6:b1:27:a3:79:88:5b:cf:ea:02:cb:
         ea:9c:f3:7f:f3:5c:96:fb:16:5f:e0:a7:8e:85:51:bd:7b:58:
         a8:27:15:85:7f:84:65:0b:ac:68:7c:b2:b0:3c:ec:e3:88:d1:
         2e:85:7d:9c:7b:4c:6d:15:e2:d1:ae:5d:1e:36:b0:0e:29:7f:
         e1:9f:c5:53:7d:f0:17:f6:ba:8c:c3:11:d7:97:64:e6:4b:83:
         f9:b1:a9:4f:44:d6:5e:38:89:b4:f6:65:c6:0d:2b:54:34:79:
         36:1a:82:6e:ce:94:53:00:6a:fe:dc:28:62:3b:56:54:8c:35:
         cb:6c:5b:16:aa:2b:29:11:76:9b:67:8e:fd:70:40:24:21:4b:
         c5:8f:ab:d2:de:98:3a:02:5c:1b:1f:59:c4:cd:9a:3d:15:6d:
         a1:45:bb:47:31:3f:fb:68:b4:c1:c0:1b:90:9b:a5:51:43:8d:
         50:08:27:ae:ec:9e:a7:89:e4:22:08:d2:57:b1:61:8e:80:97:
         93:1f:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:41 2025 by rpki-client