Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
File:                     Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft (raw, json)
Hash identifier:          JoxmaTFgEiENFtVPIvvqmr1qY1Qqf/UvavmrCuDG9ow=
Subject key identifier:   9E:31:11:C2:6C:F7:D9:C4:C0:E8:DA:A4:DD:FC:F9:06:53:C2:E4:80
Authority key identifier: 53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C
Certificate issuer:       /CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
Certificate serial:       019916BF848B607612163002E12055F65957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
Manifest number:          080E
Signing time:             Thu 04 Sep 2025 22:01:14 +0000
Manifest this update:     Thu 04 Sep 2025 22:01:14 +0000
Manifest next update:     Fri 05 Sep 2025 22:01:14 +0000
Files and hashes:         1: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl (hash: xCWxkos/BVlqI2gldfHxMECXKStuHSrdA1lENiGyPrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:bf:84:8b:60:76:12:16:30:02:e1:20:55:f6:59:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
        Validity
            Not Before: Sep  4 22:01:14 2025 GMT
            Not After : Sep  5 22:01:14 2025 GMT
        Subject: CN=9e3111c26cf7d9c4c0e8daa4ddfcf90653c2e480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:2a:31:4a:93:f8:d3:82:39:ad:34:6b:5a:
                    bf:33:5e:5c:dc:a1:4e:d6:c1:e4:6b:a7:df:e5:4b:
                    ec:d1:52:ca:a5:1c:ca:20:e9:26:d9:0f:2b:2d:ce:
                    9d:b2:14:50:fc:9c:46:95:10:3d:ba:16:2a:88:2c:
                    01:d8:9a:a7:56:c0:c1:95:76:63:f0:b7:45:5d:ac:
                    15:c2:80:a2:43:bd:ce:d2:f5:c3:2e:32:8c:5b:fe:
                    27:cf:5a:01:86:0c:d2:67:b8:ef:e3:02:53:b7:0d:
                    98:6a:f8:b3:07:ee:48:3c:15:b0:63:8f:ba:6b:a1:
                    b6:bf:e5:e3:c0:c9:23:d1:33:86:30:14:04:0d:1c:
                    2e:2d:5e:08:ef:3f:3b:9f:b4:9e:53:76:00:b4:ab:
                    8f:6a:4a:8a:4d:f8:db:01:f4:ff:fe:0f:2b:57:df:
                    4f:1b:6c:c3:47:e2:66:7f:cf:8e:c3:f7:e2:a2:89:
                    82:f9:a2:5c:6b:5c:d7:81:13:14:c1:d2:9e:1c:d2:
                    9e:67:62:85:d4:e3:b1:e3:5d:b2:e7:77:65:43:59:
                    09:6f:3e:85:21:f0:a4:b1:31:17:b5:60:cc:9c:a9:
                    14:12:f2:df:d1:94:7a:4b:06:ab:83:14:bc:e1:5b:
                    78:4b:3a:0e:a7:1d:6f:0c:43:2e:24:15:e0:61:7e:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:11:C2:6C:F7:D9:C4:C0:E8:DA:A4:DD:FC:F9:06:53:C2:E4:80
            X509v3 Authority Key Identifier:
                keyid:53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:6e:f6:06:48:92:9d:ca:b1:d3:e0:88:c7:15:48:28:d1:
         4c:ed:9d:b2:9f:d2:8a:e0:61:30:79:6b:ee:58:f5:b6:73:f6:
         cf:34:e0:d1:13:c3:0e:11:0b:0a:6b:e6:a8:b5:79:d4:15:80:
         52:da:f4:f2:94:a0:29:6c:b1:f9:de:f8:de:de:96:1e:e9:a2:
         dc:1e:d6:c2:83:b3:00:41:00:fa:a0:5f:a4:1a:05:70:f6:47:
         ae:e9:a5:e7:72:fb:0d:c7:eb:f4:38:c0:1e:68:54:8a:e9:04:
         38:ec:e9:b9:8d:7c:ad:46:8e:e4:0f:de:12:6a:93:ed:de:e1:
         56:8c:70:4e:0d:ff:2a:44:84:88:d6:e0:99:60:ca:4c:15:df:
         4b:1e:ac:ce:b6:c6:b7:99:5f:e7:17:b0:0a:0e:9e:7a:31:7f:
         62:0e:a0:64:30:94:d2:62:b4:d3:0d:42:23:7d:3b:1c:81:aa:
         88:cb:d8:f9:15:90:90:ad:a9:d2:6a:65:31:a8:87:2e:7f:c0:
         64:4b:30:88:a0:a2:7e:93:68:2e:30:21:8a:80:7b:0f:f9:36:
         a9:3a:dc:a3:27:03:fa:80:33:1e:5d:6e:46:09:b8:74:ac:d3:
         8c:a7:df:10:cb:f3:88:c4:2c:e7:65:fd:4a:d2:52:87:f9:12:
         8c:2e:a4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWv4SLYHYSFjAC4SBV9llXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzdkZGZhNjUzMGZjYzY3Zjc2OTM3ZGViZTNkODIwOGNi
OTkwMmMwHhcNMjUwOTA0MjIwMTE0WhcNMjUwOTA1MjIwMTE0WjAzMTEwLwYDVQQD
Eyg5ZTMxMTFjMjZjZjdkOWM0YzBlOGRhYTRkZGZjZjkwNjUzYzJlNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrIqMUqT+NOCOa00a1q/M15c3KFO
1sHka6ff5Uvs0VLKpRzKIOkm2Q8rLc6dshRQ/JxGlRA9uhYqiCwB2JqnVsDBlXZj
8LdFXawVwoCiQ73O0vXDLjKMW/4nz1oBhgzSZ7jv4wJTtw2YavizB+5IPBWwY4+6
a6G2v+XjwMkj0TOGMBQEDRwuLV4I7z87n7SeU3YAtKuPakqKTfjbAfT//g8rV99P
G2zDR+Jmf8+Ow/fioomC+aJca1zXgRMUwdKeHNKeZ2KF1OOx412y53dlQ1kJbz6F
IfCksTEXtWDMnKkUEvLf0ZR6SwargxS84Vt4SzoOpx1vDEMuJBXgYX4FhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4xEcJs99nEwOjapN38+QZTwuSAMB8GA1UdIwQY
MBaAFFM33fplMPzGf3aTfevj2CCMuZAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYt
ZGRlMzY1NzRiMTc4LzEvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYtZGRlMzY1NzRiMTc4
LzEvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqFu9gZI
kp3KsdPgiMcVSCjRTO2dsp/SiuBhMHlr7lj1tnP2zzTg0RPDDhELCmvmqLV51BWA
Utr08pSgKWyx+d743t6WHumi3B7WwoOzAEEA+qBfpBoFcPZHruml53L7Dcfr9DjA
HmhUiukEOOzpuY18rUaO5A/eEmqT7d7hVoxwTg3/KkSEiNbgmWDKTBXfSx6szrbG
t5lf5xewCg6eejF/Yg6gZDCU0mK00w1CI307HIGqiMvY+RWQkK2p0mplMaiHLn/A
ZEswiKCifpNoLjAhioB7D/k2qTrcoycD+oAzHl1uRgm4dKzTjKffEMvziMQs52X9
StJSh/kSjC6kqw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:21:35 2025 by rpki-client