Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File:                     uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier:          Np7CaCL61DKUt3LHBus+AiCRRyV688SlKLWiYe9gzUY=
Subject key identifier:   23:04:62:D2:9D:C7:63:60:A5:BD:BA:81:85:86:3F:A0:02:A8:FC:43
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer:       /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial:       019921B0703883750AE736D9D6CA2A8D0555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number:          0561
Signing time:             Sun 07 Sep 2025 01:00:35 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:35 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:35 +0000
Files and hashes:         1: 6CYEFdNOzyIbBisD1D5M9NGwi4c.roa (hash: TPBGKST5Y+J6z2fr0kA62OOn3rCc61+iQygU8zg4rmY=)
                          2: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (hash: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=)
                          3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: FxMiJ5I2iYnYZzskQsC/S0G/BBjkrK8iNyrmU1FJn7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:70:38:83:75:0a:e7:36:d9:d6:ca:2a:8d:05:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
        Validity
            Not Before: Sep  7 01:00:35 2025 GMT
            Not After : Sep  8 01:00:35 2025 GMT
        Subject: CN=230462d29dc76360a5bdba8185863fa002a8fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:6a:a6:79:9c:8c:61:58:44:b7:b5:51:9d:
                    07:01:a8:36:68:98:75:b7:cb:80:f6:42:74:94:92:
                    5d:ff:57:3b:dc:db:ad:76:c2:26:d5:fc:23:df:30:
                    0d:d4:b5:87:1e:2e:14:18:f2:74:f1:9c:e9:51:3c:
                    f9:bc:35:e4:14:cb:2d:dd:39:c9:ea:ba:cb:10:fb:
                    dd:28:b9:3c:30:e7:77:b0:9b:d6:3c:78:2e:6f:41:
                    ff:97:85:b8:9a:61:44:68:13:69:ae:11:03:51:24:
                    e1:85:40:15:3a:50:fa:b7:ce:42:91:f5:d6:09:a8:
                    c3:b5:2f:d1:6f:bd:72:51:26:ad:6e:d0:d6:64:32:
                    5d:73:58:e6:8d:6f:9d:2b:f4:3f:fe:fb:42:be:6a:
                    80:18:f4:02:32:b9:24:0a:9d:5b:44:d8:d3:cd:b1:
                    f0:4d:e5:4c:e0:73:73:08:06:95:8b:7f:63:47:25:
                    7f:82:3b:e6:4d:40:51:da:bd:80:38:46:ff:72:4d:
                    fa:f8:d9:2a:5f:e9:a2:16:21:8d:77:f0:2f:11:c3:
                    d3:eb:f6:e8:5b:74:e9:44:4b:fd:b2:af:36:30:5c:
                    2f:b7:fb:91:f7:e1:df:31:2c:7b:a6:ad:d9:09:a0:
                    29:6b:3a:d0:d1:42:16:c8:b1:5a:48:1d:31:a6:d2:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:04:62:D2:9D:C7:63:60:A5:BD:BA:81:85:86:3F:A0:02:A8:FC:43
            X509v3 Authority Key Identifier:
                keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:39:30:09:a4:f2:99:34:e7:21:bd:bd:90:19:bc:33:55:f8:
         18:f3:7b:c5:59:39:93:be:e3:29:81:e9:ef:89:53:a1:c5:9f:
         46:3a:41:14:21:93:9d:6b:1a:b4:5f:9d:3f:8f:d4:1b:39:e7:
         dc:34:e0:fd:89:53:1b:9d:1d:f5:78:ff:98:1a:b2:02:9a:d2:
         ae:df:41:d5:d1:9c:93:6f:d5:f6:78:ef:5a:c5:f1:b4:96:aa:
         78:01:12:fb:a0:3c:c9:01:eb:43:2a:de:1b:9e:7b:5b:1c:eb:
         0d:3c:e2:2f:74:32:25:e1:65:30:c2:56:0c:ae:78:47:b3:e7:
         96:98:4d:6b:00:b7:49:ff:27:b4:67:49:60:40:71:3b:f9:79:
         fd:ce:96:f6:30:b0:71:8d:00:43:0b:24:ec:6f:91:fb:f7:d4:
         5c:bd:ad:f2:90:4c:a4:ac:08:c6:15:7f:46:79:95:61:3d:52:
         fe:db:01:f9:d7:d7:52:3c:40:17:e0:48:c2:b4:65:d4:d6:4e:
         a1:20:b5:db:af:6b:cd:52:09:b3:b2:e1:5e:20:9f:e6:f5:91:
         5c:ba:1d:76:4f:93:46:56:14:be:f7:19:45:4e:2a:4d:85:49:
         db:45:b9:28:b6:45:82:53:3f:d0:90:c8:96:f0:a7:84:ea:7d:
         65:c3:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client