Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File:                     UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier:          kLYrRVp4E+JIi7H2kFgpgKNM2BVnS5QhbkrNvEuRZ2g=
Subject key identifier:   6D:C1:7F:64:3C:00:9B:92:D2:4A:7D:84:E8:A7:07:61:5C:0A:BE:ED
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer:       /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial:       019921E7E4D54A354112659A4DA979520A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 02:01:09 +0000
Manifest this update:     Sun 07 Sep 2025 02:01:09 +0000
Manifest next update:     Mon 08 Sep 2025 02:01:09 +0000
Files and hashes:         1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: DnRq1QlnGz8coGZT4/NwlwAswcStluISgdwWBFLhsmM=)
                          2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:e4:d5:4a:35:41:12:65:9a:4d:a9:79:52:0a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
        Validity
            Not Before: Sep  7 02:01:09 2025 GMT
            Not After : Sep  8 02:01:09 2025 GMT
        Subject: CN=6dc17f643c009b92d24a7d84e8a707615c0abeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:8d:a9:b6:a3:24:20:eb:8b:97:5b:8c:3a:
                    50:97:a1:fb:73:3e:54:13:66:0d:7c:ec:76:9b:e7:
                    dd:e1:75:32:47:2c:9f:a9:6d:6b:78:79:27:27:43:
                    20:29:0a:d0:96:fa:09:29:af:b9:3c:04:7b:c3:50:
                    c4:a8:f3:0e:73:b7:93:de:b9:7f:67:93:a9:44:41:
                    1a:3e:66:ef:22:62:e5:cc:a8:36:62:3d:0b:f6:ae:
                    f1:b1:8f:73:5f:8c:12:bb:35:b0:e5:fa:fb:c5:54:
                    e2:9c:5c:9b:52:a4:56:05:8b:a9:ec:4e:d0:3f:84:
                    fc:45:7b:df:7e:3e:68:58:c6:08:d2:5d:ec:78:d9:
                    1a:b0:e3:c1:43:03:1c:2d:0e:1b:13:4c:83:a0:ad:
                    61:3f:cc:0b:6d:9c:29:cd:6f:e5:63:dc:e0:3b:bd:
                    80:22:c1:ca:1f:d9:e4:f2:3c:5e:0c:47:96:f9:de:
                    af:a7:0e:7b:57:16:35:34:53:d2:8a:e1:27:2e:c9:
                    d0:91:59:04:9e:c3:b2:5f:9a:fb:43:da:a5:fb:63:
                    33:84:b6:1f:57:45:07:20:c4:c5:76:39:60:55:4a:
                    57:c3:f6:97:8a:04:a8:c2:a1:40:09:f7:c1:47:30:
                    2a:e5:af:6a:e0:b3:a7:33:9d:5a:89:07:10:13:6f:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C1:7F:64:3C:00:9B:92:D2:4A:7D:84:E8:A7:07:61:5C:0A:BE:ED
            X509v3 Authority Key Identifier:
                keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:9d:a6:46:03:29:66:72:33:ee:c0:1d:5a:80:da:ab:c7:
         f9:a7:e2:c1:25:82:2f:73:6e:e5:6c:ce:57:77:f4:57:3e:5a:
         51:1a:fd:e4:ae:63:73:e0:b3:05:22:b0:d2:66:87:f1:58:44:
         90:01:11:51:9b:df:be:74:43:c6:58:92:a0:ba:4f:9f:a0:11:
         e3:83:1e:76:b9:10:b3:db:bf:88:a2:69:79:79:26:1e:21:83:
         56:c0:d0:11:6a:07:67:ee:cb:fa:24:d8:25:6d:7f:2d:88:9d:
         f6:bf:09:95:73:33:00:8a:bf:8b:a3:d6:bc:ca:5b:01:88:8d:
         57:73:b8:96:3a:c3:aa:74:34:c8:92:2b:6d:36:2a:53:b5:1d:
         3d:4e:44:2f:d4:66:66:99:1c:3b:2b:b1:46:fa:5a:b0:fe:7c:
         d5:47:82:e7:e7:b5:f2:65:c6:b6:18:43:9c:ed:27:b7:56:98:
         57:6f:d3:83:7d:75:37:56:58:2f:26:26:ac:46:00:65:48:2c:
         c1:d0:f7:10:3d:f5:30:6b:23:ce:dc:ce:03:e3:34:fc:ab:b5:
         2c:15:63:dc:c5:4c:fb:99:b1:55:c7:44:b4:0d:e0:68:ac:8f:
         62:e0:35:3f:5e:49:41:40:70:08:cf:f4:7e:b7:14:2d:2c:44:
         4c:6a:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:54 2025 by rpki-client