Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          ilSxoo5eaAEoyceIXz/oaWbOkuPb0GJHB7NkwpSpGx4=
Subject key identifier:   31:32:3A:11:36:1C:DA:1A:92:10:07:80:39:74:70:4D:79:5D:3A:7D
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       0197B745BEFDCEAF02061A4B4180D0E1029D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          018F
Signing time:             Sat 28 Jun 2025 16:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:30 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: zPhSvtpxJ3JXkv95Bo6L8UnmdemUde1Xs4o/8orC4CQ=)
                          2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:be:fd:ce:af:02:06:1a:4b:41:80:d0:e1:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Jun 28 16:01:30 2025 GMT
            Not After : Jun 29 16:01:30 2025 GMT
        Subject: CN=31323a11361cda1a921007803974704d795d3a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:b8:1c:a5:d4:59:f7:ee:7f:79:24:6d:b5:
                    58:76:06:9b:d6:5b:b7:7a:c8:5e:36:f4:74:24:ae:
                    15:1e:47:09:78:a5:26:db:45:8b:b5:83:5d:3d:c0:
                    8d:7b:2b:d7:e4:bd:f5:a3:6d:b2:ee:e5:ba:29:4b:
                    48:50:77:8c:f0:e3:54:62:e5:e5:18:90:24:e0:f0:
                    d9:0a:17:d1:70:51:8f:92:ea:22:69:a9:3f:c3:24:
                    61:bc:5e:9b:57:5d:4c:a0:9d:2b:e3:1f:18:3c:9b:
                    b5:2a:f1:14:9c:16:c3:85:09:98:1a:c4:a7:76:ea:
                    68:e1:52:08:3f:3d:33:5b:09:da:07:0c:43:a8:fa:
                    14:eb:23:f7:98:59:a3:cf:11:44:6c:a2:7c:30:1c:
                    69:d8:dc:af:9c:d2:a8:6f:b2:c9:66:9f:ef:4c:74:
                    c4:6b:31:11:cd:4a:27:51:12:ac:ab:22:ef:c3:df:
                    76:1c:e3:f6:40:44:60:a6:90:b2:97:d3:2f:5c:c1:
                    46:ba:5f:21:a5:81:dd:a3:27:70:ca:bd:ae:34:c3:
                    f9:9a:22:33:e6:87:41:45:3c:7b:59:dd:8c:da:dc:
                    18:5c:da:4c:59:7d:6f:35:d3:ed:4a:b4:a0:ec:23:
                    11:66:ed:f3:28:0b:f7:bf:0f:f1:09:3c:04:78:64:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:32:3A:11:36:1C:DA:1A:92:10:07:80:39:74:70:4D:79:5D:3A:7D
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:00:a2:c3:61:ba:b9:41:48:4f:2f:af:19:2d:6a:f8:37:4c:
         df:a2:9a:fb:ed:58:8f:78:b1:b0:f1:d3:15:17:48:f8:f7:ca:
         3d:27:67:1b:f8:33:97:1e:58:aa:c2:5d:e6:ad:fa:df:97:fc:
         f7:1c:04:5d:bb:e2:aa:37:28:30:33:f5:c6:d2:b1:bf:c6:8c:
         a3:ae:5b:fe:cc:63:c7:7b:d4:d8:44:5c:aa:9f:04:22:09:61:
         bf:1d:c8:b0:af:78:fd:6f:91:f4:5a:79:8b:f0:19:26:04:a6:
         3c:58:4f:df:e7:eb:d8:8d:f7:89:db:cc:fc:92:21:43:f8:e4:
         2d:b8:20:d0:89:c9:14:d1:c2:76:73:23:2e:cf:30:31:11:eb:
         5b:34:f7:b6:48:b4:a3:1a:72:c5:ec:ba:68:c4:af:57:ea:56:
         72:38:bf:b9:5b:e3:90:18:d8:04:cb:6f:4a:e7:89:25:de:32:
         27:11:b1:b9:19:4e:04:dc:fd:01:bd:f8:ba:b6:15:d2:5d:5e:
         e3:97:b5:ed:99:2f:91:79:2e:f8:25:20:ed:fe:a9:35:42:d3:
         72:58:f6:7d:b9:04:9c:84:17:17:71:81:20:58:7c:eb:d6:5b:
         4e:21:54:5c:8e:d1:cc:fa:1a:ef:6c:50:b5:38:8d:38:71:75:
         48:c3:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:00 2025 by rpki-client