Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          7p/Z7C21vo/8rWnpoMqsxFKIkbz/9pLJfn5arBZy/gM=
Subject key identifier:   7D:42:F1:FE:15:87:B5:05:8E:BB:D6:3B:05:1B:86:54:74:38:AF:15
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019937CA68F38BC574CC9932287F0060AAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          167B
Signing time:             Thu 11 Sep 2025 08:00:36 +0000
Manifest this update:     Thu 11 Sep 2025 08:00:36 +0000
Manifest next update:     Fri 12 Sep 2025 08:00:36 +0000
Files and hashes:         1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: hSamnPLV63o5iK2XN5ZN8IOFFO3IPZs1eoHUg8iMNvo=)
                          2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
                          3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:ca:68:f3:8b:c5:74:cc:99:32:28:7f:00:60:aa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Sep 11 08:00:36 2025 GMT
            Not After : Sep 12 08:00:36 2025 GMT
        Subject: CN=7d42f1fe1587b5058ebbd63b051b86547438af15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:f9:d1:45:c2:79:98:4e:bf:10:4b:8b:c7:
                    01:41:fc:ed:b4:4c:38:23:2e:d5:df:89:87:2d:6d:
                    95:9e:4f:d3:4c:8d:46:54:31:4f:0e:55:ac:ae:30:
                    2e:67:ce:d8:6e:49:bf:b2:89:7a:c4:f0:30:0e:5d:
                    a1:b6:f9:83:98:5c:15:c6:23:eb:ee:95:41:34:c5:
                    e7:56:9a:c6:14:7f:1b:a7:52:0e:a0:00:4c:80:5a:
                    e9:55:39:2d:61:49:98:0d:da:d4:c4:16:74:e0:22:
                    34:80:b6:ba:f0:da:0d:e9:f7:b5:2f:33:71:63:35:
                    94:78:f7:aa:fb:a5:94:f4:12:9c:c6:a1:c0:ea:7b:
                    23:c4:a8:5f:b5:99:bd:ad:f1:3f:b1:ce:eb:60:5d:
                    e6:83:a4:c0:a0:61:78:56:db:07:27:03:1c:7e:dd:
                    fc:6a:7c:56:f1:40:75:9c:86:2b:89:d7:99:e5:ab:
                    4c:2b:73:d0:af:16:f1:9c:0f:d7:41:27:53:4a:97:
                    20:80:3e:3b:dc:77:b4:47:98:7f:c3:f4:13:dc:f2:
                    20:5f:41:b4:89:a2:27:29:a7:44:5d:2d:74:b2:c2:
                    86:e2:1e:26:2c:fa:d6:7c:fc:2b:d2:8d:8f:46:0f:
                    bb:46:c8:25:de:dc:5b:c2:91:fe:47:1a:bc:fd:90:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:F1:FE:15:87:B5:05:8E:BB:D6:3B:05:1B:86:54:74:38:AF:15
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:93:a2:48:50:f0:42:19:c3:c6:12:3e:1d:0b:47:94:5e:50:
         10:f2:1c:c8:6d:3e:53:40:34:62:e4:da:4a:cc:d2:2a:29:2c:
         49:50:c5:4b:66:33:f3:21:43:2c:50:ef:65:12:de:b3:49:e1:
         02:e1:25:2e:e8:b2:e9:86:70:28:cc:8e:c5:44:4c:57:4d:5b:
         d2:38:33:bc:6a:30:3f:e2:c0:4b:d5:5b:8f:d6:19:47:5d:6f:
         f7:92:70:75:20:fd:38:e2:db:c8:9d:ef:c3:02:24:1a:b0:d4:
         f7:46:90:c3:12:da:94:8c:39:b0:b2:c6:94:59:35:22:ff:4d:
         30:2d:01:e6:3c:0e:50:35:b7:58:96:a1:cb:8b:48:a9:62:3f:
         76:9f:6f:05:6c:eb:b4:1f:28:c0:b5:a6:c6:98:75:39:62:47:
         12:a9:74:5b:77:f4:cc:1e:86:66:eb:98:4a:f4:8b:8f:f7:21:
         7a:98:68:9c:44:d6:2e:3d:e5:64:46:2a:74:94:51:3b:50:73:
         1a:d5:60:77:85:ba:c4:fa:d7:38:61:d8:6e:97:66:a3:78:11:
         56:b4:3c:97:1e:dd:5a:7f:08:0c:25:cc:ba:0b:9d:d4:12:e8:
         5c:e7:83:61:ef:e0:2d:4c:74:14:07:4e:fe:93:55:10:da:4c:
         48:73:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:29:22 2025 by rpki-client