Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          AFpi2TpVwLAuQQ7PTnn/tInRAg1+wXpPZDxN4Qup81A=
Subject key identifier:   57:0A:FC:EE:5E:64:B3:2A:56:38:53:CB:83:B2:9B:04:52:C8:FB:A6
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       0197B8C5B1737283E436ABCA8467E108AB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          1599
Signing time:             Sat 28 Jun 2025 23:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:53 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: kDbte3oj9jsy1Wib2YclAZBPonP/BAngSB8Vbhf0ziQ=)
                          2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:b1:73:72:83:e4:36:ab:ca:84:67:e1:08:ab:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Jun 28 23:00:53 2025 GMT
            Not After : Jun 29 23:00:53 2025 GMT
        Subject: CN=570afcee5e64b32a563853cb83b29b0452c8fba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:bf:fd:23:a5:c1:c8:3f:a9:84:a1:7a:69:
                    09:67:4b:3e:40:ec:d9:00:57:41:78:57:e7:6b:aa:
                    54:58:cd:d2:36:28:2a:56:e4:66:f5:20:73:78:ff:
                    aa:40:e7:b5:5d:81:0c:86:c8:3b:6c:b2:5e:1b:c8:
                    c4:1f:94:5b:8a:98:27:fd:5f:e1:45:74:f6:dd:ac:
                    cb:88:5a:38:3b:ff:54:3e:c4:96:7b:16:41:65:c2:
                    09:19:f7:4a:7f:ab:ce:66:a7:18:56:5c:25:29:ae:
                    2a:5a:21:fd:3b:74:1a:1c:9d:92:d8:bd:85:be:28:
                    10:a7:31:30:2f:a8:72:3b:9c:2e:4a:78:06:73:98:
                    90:aa:aa:9d:b7:bf:a9:5b:4d:c0:36:87:bd:2a:7e:
                    45:52:1d:37:fc:7e:c2:6b:e1:c9:fc:5a:a9:f9:c2:
                    99:a9:ad:4e:79:6d:0c:8e:0c:8d:b9:28:66:08:88:
                    31:1e:fa:aa:cb:8b:60:2f:4b:b9:e8:ec:b3:64:b8:
                    5b:65:fd:73:a4:bb:ec:96:71:1a:10:96:ff:f9:2a:
                    bc:22:30:5b:d0:d5:d8:2f:e6:ec:5a:ac:fb:2c:60:
                    cd:bf:0c:53:b3:3e:bb:84:d3:5f:fd:96:89:f6:c9:
                    a3:ac:8f:ab:f0:e2:4f:58:f7:7d:c8:b3:82:d1:40:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:FC:EE:5E:64:B3:2A:56:38:53:CB:83:B2:9B:04:52:C8:FB:A6
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:71:cf:9f:e8:29:04:be:44:4b:3c:22:c5:bf:95:20:39:
         fd:70:2d:65:79:16:a2:0b:19:1d:42:f3:8f:77:0f:e0:57:03:
         0c:24:f9:4b:7b:50:06:e6:07:ae:26:32:d9:fe:a2:a4:33:19:
         34:42:30:90:fe:08:fb:8e:81:c6:25:fb:2d:38:72:18:59:88:
         d2:0b:da:64:b3:9f:d6:4c:2a:b6:cb:38:98:d1:ff:be:25:a6:
         2d:b0:22:b6:60:5d:de:35:a5:32:21:e4:ff:43:42:8c:7e:b0:
         de:f6:aa:32:d3:bb:08:e5:b4:c9:6f:c5:d0:e6:dd:a2:06:df:
         8b:e8:9f:cd:dd:56:d3:83:47:4d:8b:a4:bc:0a:2f:59:9e:ba:
         ba:89:10:ee:18:e2:13:2e:ee:69:b7:88:33:83:25:37:28:40:
         f8:69:a4:57:8f:38:a2:56:76:72:a4:3d:4a:db:21:77:43:61:
         f2:23:fa:0f:c5:c2:14:47:fb:02:e3:50:4d:55:7f:7a:3e:ac:
         89:7d:ee:fc:4c:03:bd:68:25:32:78:a0:bc:2f:85:f4:7c:41:
         c5:38:7a:0c:16:e5:ed:24:52:4d:cc:e0:dd:74:a2:37:b2:dd:
         71:79:3e:31:e1:62:1a:47:22:a6:6e:28:45:09:61:43:73:c5:
         7d:18:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:55 2025 by rpki-client