Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
File:                     uod-WyjQCydV1j3QxYHJ_klGBnU.mft (raw, json)
Hash identifier:          5E/uajwn8sYxv8AT8B6Ya/sR5d/3Q6oLl+PNc5EHCdc=
Subject key identifier:   43:4A:82:05:46:17:C3:ED:56:CC:28:17:79:F1:4F:36:4A:04:33:F6
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Certificate issuer:       /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial:       019921B056D0858FB5E306E20EBEA1E221CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
Manifest number:          1453
Signing time:             Sun 07 Sep 2025 01:00:28 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:28 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:28 +0000
Files and hashes:         1: 3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa (hash: 1GqCE7f/lxXaUMCcSfF7oAJQEmNwJn6ems4l4j09Bk8=)
                          2: uod-WyjQCydV1j3QxYHJ_klGBnU.crl (hash: VS5Sg7u2LgJeOEsAOL5Ub/GUd8OB4zSCzj9w531GdKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:56:d0:85:8f:b5:e3:06:e2:0e:be:a1:e2:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
        Validity
            Not Before: Sep  7 01:00:28 2025 GMT
            Not After : Sep  8 01:00:28 2025 GMT
        Subject: CN=434a82054617c3ed56cc281779f14f364a0433f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:e3:2e:eb:43:c9:46:e2:c2:43:e4:a5:52:
                    ae:d6:0a:99:63:d6:77:c4:39:2e:be:aa:35:83:1e:
                    12:4b:d2:89:66:8d:9a:19:dc:93:1a:0b:dc:77:fc:
                    09:b7:16:17:ac:89:56:a6:95:01:52:c5:db:5c:18:
                    31:9e:bd:3c:a1:9a:30:a1:0d:97:3e:65:7f:df:cc:
                    49:52:5b:1b:02:7c:f3:2c:07:f9:07:0e:7b:7d:69:
                    8a:71:41:64:e8:c6:80:d6:98:23:e6:a2:2a:cd:8d:
                    ce:77:91:fd:03:08:e9:c8:09:ca:71:83:72:ad:3c:
                    78:65:07:a0:bd:1f:1b:d2:c5:58:e2:de:60:c5:d4:
                    68:94:6e:d4:2e:71:31:28:30:09:47:61:ef:76:9c:
                    62:27:4c:96:87:f0:a0:1f:5d:60:c9:32:c4:a9:a9:
                    3a:33:3f:ba:ca:a1:ca:3f:6c:a3:b9:5e:4d:48:ed:
                    6a:6a:fc:54:61:b4:31:ee:92:d4:ef:5e:72:23:66:
                    ac:2e:0c:56:a8:80:d3:a5:12:cc:cf:e4:a3:46:7c:
                    09:b2:d3:3e:8d:ab:bf:be:96:73:5b:70:3e:a3:fc:
                    b1:dd:50:f0:7c:8d:95:8d:7f:52:e9:8c:a9:e6:81:
                    3c:70:b4:d4:5c:c6:64:ed:bc:76:fc:a5:78:0b:9c:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4A:82:05:46:17:C3:ED:56:CC:28:17:79:F1:4F:36:4A:04:33:F6
            X509v3 Authority Key Identifier:
                keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:be:6a:45:8d:b2:b5:94:89:a5:1c:6c:f9:b2:b2:1f:19:11:
         f2:a7:eb:e3:45:9f:7a:df:46:2e:45:d0:e9:23:d6:cd:29:1b:
         fa:7f:01:55:79:88:05:e3:d3:29:a0:95:a4:1d:f6:ac:99:f9:
         c3:ed:49:b0:9c:ea:1d:f3:50:52:c2:b7:24:1a:07:2a:18:a8:
         33:61:ec:da:cf:63:ca:02:1a:ed:6a:ba:30:66:03:fb:de:65:
         70:69:b1:e2:bc:f8:30:ce:7e:ff:36:ea:c3:08:c7:79:8c:76:
         cf:89:28:6a:35:43:9c:49:aa:b8:82:45:d0:d6:aa:1d:a8:75:
         99:5e:a6:f4:49:34:74:81:2c:29:69:f5:2a:a7:39:ef:17:20:
         69:34:27:06:ff:2a:68:8d:71:57:8d:dd:1f:c0:82:41:dd:6f:
         56:30:0e:65:5e:3b:2f:e5:a9:7b:1d:f0:3b:4c:5e:68:a0:1b:
         2d:b9:4f:5c:c0:11:7e:9e:9c:c5:8d:60:97:22:cc:11:93:8f:
         b2:5e:c4:60:68:f6:05:b4:d2:a1:ca:11:70:a1:77:91:09:9f:
         07:9d:9f:e8:54:d4:b6:3b:fe:e0:24:a8:7e:ff:e4:1b:e9:b8:
         79:eb:7b:52:82:5b:ad:1e:fe:7a:13:af:82:53:34:6a:9e:4b:
         6b:50:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:31 2025 by rpki-client