Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          MlLrkuEL5yCZQVHsBrk8eRFEA8oK0v3c9Nf79rf5Od4=
Subject key identifier:   15:33:A5:31:BA:43:32:96:2B:F0:8D:C6:A8:27:EB:92:67:85:07:32
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       0198D54E1E6547648D5ABD4039BFE09E07FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0D7C
Signing time:             Sat 23 Aug 2025 05:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:03 +0000
Files and hashes:         1: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
                          2: Wyw6f7z9XFhQdDF9UwLgPYFT6_Q.roa (hash: 1RzZ4RihPLYHjPztE9UylSZaMNlezfJjIV9fNaanWRg=)
                          3: X9RNdUxkmLFNiFpUP9LHqq5hH5Q.roa (hash: sO05RjG57ukJeOdbo7TbIC4ef+lfKmg1XE7a20jQ0B4=)
                          4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
                          5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: TZ3MZ1BrGEyvutM5Q1aa2lecsSdQL/M7u4zdfQ/EbZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:1e:65:47:64:8d:5a:bd:40:39:bf:e0:9e:07:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Aug 23 05:02:03 2025 GMT
            Not After : Aug 24 05:02:03 2025 GMT
        Subject: CN=1533a531ba4332962bf08dc6a827eb9267850732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:24:05:91:06:0e:28:05:3e:de:a5:8c:0b:
                    de:fd:af:2c:56:53:50:d3:20:9f:24:a1:21:77:a4:
                    8d:4f:e3:50:8b:f9:ad:a9:39:4d:f3:34:36:51:91:
                    13:39:f8:f1:fa:a0:27:5f:c3:f2:8d:84:0d:a0:e2:
                    b3:2e:43:cc:2b:de:91:d4:2a:1f:f1:6a:40:fe:be:
                    e9:5b:80:8e:5e:12:ca:bc:7a:29:58:a2:42:26:09:
                    b8:de:8a:35:f8:7e:c2:68:44:49:55:43:47:02:0e:
                    f5:4e:8a:a8:43:f4:34:05:8c:e7:65:4f:34:9c:2e:
                    96:06:fd:be:8b:5c:33:78:15:64:14:14:c8:0e:27:
                    48:8d:62:62:32:ef:cd:a6:ce:4d:37:33:75:d2:44:
                    57:98:93:ce:4b:b3:cb:b8:db:13:28:45:24:4e:42:
                    14:88:03:f0:e9:bf:7b:4f:05:c2:ad:31:b3:18:60:
                    41:ea:74:10:5b:3d:f1:ab:99:2d:6d:f5:fb:a2:0c:
                    98:03:f4:35:c9:0e:08:37:97:b3:01:34:18:b2:20:
                    dd:cd:54:da:fe:bf:b4:c8:59:6c:1b:85:74:71:bb:
                    c2:16:11:30:61:be:99:c8:d5:a2:b0:4e:bf:69:50:
                    bb:3f:e5:51:9b:6e:28:6b:6e:10:1c:f8:ba:0e:4a:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:33:A5:31:BA:43:32:96:2B:F0:8D:C6:A8:27:EB:92:67:85:07:32
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:13:82:1f:cd:c9:61:64:eb:bd:e5:e4:8b:2c:21:b9:33:
         53:b5:e2:58:9e:8e:fe:bb:4f:bc:e7:e4:46:74:c1:52:72:c4:
         f9:22:34:5b:c6:5b:25:4a:90:b0:70:1c:2b:2f:a4:6a:f6:fd:
         8e:55:68:08:e1:be:19:19:8f:4c:a2:1b:64:e6:09:de:20:a5:
         68:fa:10:2a:5b:5f:c7:ad:66:75:5a:9c:45:14:4b:8d:4e:d3:
         66:36:56:4a:4f:a6:68:ac:da:9f:30:e3:42:00:86:84:d4:1a:
         99:e9:29:0a:a6:22:d2:3c:77:c1:24:11:79:20:c4:3e:90:a8:
         ef:aa:06:3b:00:27:ea:a0:67:ce:d1:c7:c5:3e:9d:d2:1e:88:
         6f:d8:5d:95:21:90:ee:54:05:da:9f:4b:07:a8:49:84:d9:e5:
         b1:f4:6e:db:36:26:d5:3a:ff:8d:3e:97:3f:2d:a6:a7:08:c6:
         0f:4a:39:d4:be:c8:f1:22:86:6a:94:47:16:45:bc:32:1e:4c:
         01:ad:65:7e:e5:e3:8b:7e:0b:56:b7:2c:55:f6:af:5d:ff:0e:
         51:3c:65:e1:f3:29:1b:d8:e3:f7:f3:dd:d4:6f:ef:46:de:dc:
         a2:45:99:35:30:ae:45:e5:37:97:5e:18:ed:09:8b:85:98:b5:
         f4:09:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:56 2025 by rpki-client