Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          AgVo7WilvB9uqGKJ+3QeTJU+o0EXnmratlp1RpRZ2r0=
Subject key identifier:   12:A8:97:9C:30:00:8A:24:21:DB:1C:AE:93:78:88:54:EB:E1:53:96
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       0197BFDAD96888BD271F08BE0C81EFCE6EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          A8
Signing time:             Mon 30 Jun 2025 08:01:20 +0000
Manifest this update:     Mon 30 Jun 2025 08:01:20 +0000
Manifest next update:     Tue 01 Jul 2025 08:01:20 +0000
Files and hashes:         1: 3BdeI36IkUxOlCqSmaZfu8I0p4g.roa (hash: 5N4fYvWW73MoWuT7eG7LCKSc0LhblTQNkeac5h0QDT0=)
                          2: J-tMpk5WYUX1K1Qmuu6Ph_YR8jI.roa (hash: syGXPnVZkPmCP6scK/qrH242HNGAM2IMBeBWZO7dNhw=)
                          3: Mo1KLijCjdKejveVvrm5xxbqdQs.roa (hash: leNTRPm65+UvZO2KDz9fYjRkuCupD94Um3Fgr0yh624=)
                          4: NsP8M1MMA3vcd67Jqg1Acd0f8pc.roa (hash: o+Png3e+yZxXIdxIbA8MaZ+s3tRftA963n78jgudtXk=)
                          5: WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa (hash: a3d83I3OM26Rcumlwo5C8tjA1sldnSwvJlMfN0DSpuw=)
                          6: dNdlikygHYW9_VCSMxVInvo5wAE.roa (hash: oANbFDFE9Ng6o6gqO/EcOwZNCNKxlzdWPW9zD7faSZw=)
                          7: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: xbu94TcZhh+DStFg2OJpYlHMqDhxeeKcD3djKf5ry4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:da:d9:68:88:bd:27:1f:08:be:0c:81:ef:ce:6e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Jun 30 08:01:20 2025 GMT
            Not After : Jul  1 08:01:20 2025 GMT
        Subject: CN=12a8979c30008a2421db1cae93788854ebe15396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:ae:94:89:8f:2a:81:dc:ae:df:df:a5:4a:
                    64:bf:72:57:78:a7:9f:47:2b:fd:ef:24:bf:ff:11:
                    5e:69:57:86:01:a3:93:3a:e7:4e:58:33:63:eb:d0:
                    99:46:c3:a3:fa:d3:13:a8:66:2f:09:92:aa:f2:a9:
                    80:10:e1:a4:50:7f:78:ab:be:83:b5:a4:25:96:70:
                    5b:99:87:bc:13:e1:4a:3c:58:1a:9a:7b:61:88:69:
                    c5:46:fa:b7:5f:7e:8d:3a:03:f9:f6:86:f1:3e:f6:
                    3c:d9:7c:d5:fe:28:c9:3e:ed:df:b0:64:6a:03:6c:
                    0a:bb:55:0a:41:ee:b6:8f:1c:38:1c:97:b0:d2:74:
                    2a:c5:b6:e2:cb:43:db:a9:b5:55:fb:ee:94:5d:f8:
                    65:fd:2e:91:af:27:23:0a:85:6d:aa:10:a6:9c:66:
                    6c:41:c7:b5:54:0e:59:76:4e:38:47:e6:9f:24:32:
                    9c:97:ec:e1:5e:88:12:72:ca:8b:c9:cc:c2:45:20:
                    3e:75:8a:9c:73:c9:ec:f2:37:b5:50:e2:a9:63:ad:
                    46:91:06:e5:db:6c:64:91:b0:b7:89:29:7f:25:3b:
                    a5:69:ff:fe:0d:b3:82:ab:96:f6:46:71:be:d3:1d:
                    5a:21:76:b1:98:0c:a3:35:69:25:87:5e:0c:67:b7:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A8:97:9C:30:00:8A:24:21:DB:1C:AE:93:78:88:54:EB:E1:53:96
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:d5:28:73:90:49:ba:02:c3:2e:e2:b7:fb:79:e6:ca:c2:
         26:64:02:68:d9:19:76:8b:0e:07:68:f2:e0:82:74:e5:e5:4e:
         e3:42:02:3f:8b:dc:1f:ff:07:9d:ed:55:79:ea:a1:c2:e5:08:
         a3:36:9e:63:18:41:d5:d0:fd:24:a0:9e:5a:bd:20:dd:8a:12:
         66:b0:54:87:9a:20:ba:03:ee:94:1c:98:c3:19:be:6c:9d:19:
         c8:5d:7f:14:46:d4:dc:69:c9:a7:93:5f:00:e5:be:78:09:7c:
         6a:da:cd:d9:a7:95:e4:d9:a9:52:70:db:96:9d:e3:26:eb:76:
         47:2c:bc:59:f2:62:f8:cd:52:e4:70:80:43:33:56:9f:92:0d:
         50:b6:90:2f:c1:4c:e6:bf:1e:f9:cd:8e:39:b7:49:30:0c:b8:
         7f:29:96:0d:f9:31:38:a0:ee:3a:c2:6a:ce:1d:06:ba:a6:a1:
         52:d7:1a:d9:31:61:01:ee:f1:00:00:d6:32:51:b4:5b:92:93:
         e6:a7:3a:3a:ac:de:38:04:47:4d:03:e8:3d:c0:2a:52:84:5f:
         8b:1f:83:7f:22:a2:fa:b0:fd:d8:c8:eb:b2:fd:e0:62:ba:01:
         40:fc:bd:81:51:cf:f5:61:7f:94:c0:15:3f:0a:20:38:34:c5:
         20:70:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:27:26 2025 by rpki-client