Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File:                     UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier:          wZNM8u9nTJqnqTwHuVruANf4svTg2wI0q8M23Ud0oK4=
Subject key identifier:   87:DA:5D:28:94:1F:54:D9:3B:F7:7E:8B:ED:40:94:60:0F:12:7A:E1
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer:       /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial:       0198D92B2A1FD49F810135E329F35CD02D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number:          0E68
Signing time:             Sat 23 Aug 2025 23:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 23:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 23:02:20 +0000
Files and hashes:         1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: mj89njSrADoHGUnRB+zfMok/ezcHwMN8tqUu4iKVAkE=)
                          2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:2b:2a:1f:d4:9f:81:01:35:e3:29:f3:5c:d0:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
        Validity
            Not Before: Aug 23 23:02:20 2025 GMT
            Not After : Aug 24 23:02:20 2025 GMT
        Subject: CN=87da5d28941f54d93bf77e8bed4094600f127ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:da:34:bd:ef:05:6b:9a:ad:a2:c8:15:f9:
                    9e:d8:dd:00:82:ce:62:e0:53:a4:5b:64:79:9e:06:
                    dc:ee:40:fb:2b:fe:ca:92:61:fb:ab:96:13:62:ac:
                    86:d9:32:50:9f:c9:1c:73:ef:d1:4a:b0:3d:13:09:
                    e9:67:ec:e4:4b:80:18:c5:ec:52:90:ab:2c:eb:c9:
                    f4:ad:22:36:76:04:33:ee:77:38:c7:cd:51:64:11:
                    af:20:52:0b:b7:3c:47:8b:da:dc:db:f1:e2:d8:a2:
                    3a:e6:b7:69:75:b2:4a:56:b4:fd:72:b6:66:d6:e3:
                    30:50:3f:5e:8f:54:06:7b:5f:e8:32:f3:20:df:c0:
                    16:de:ea:e7:8e:18:97:35:36:b1:9d:8b:58:b2:a0:
                    4c:12:10:87:a5:8a:73:9a:63:6e:1a:7f:4f:4e:a2:
                    1a:fb:12:33:16:ab:5f:af:07:22:66:bb:2f:96:c9:
                    8c:6b:c8:30:38:ab:4f:2a:29:bf:15:8c:9b:3f:b0:
                    e6:1f:45:e5:eb:5c:39:d7:b5:ba:dd:a6:70:c5:b0:
                    bb:28:4d:68:e2:68:15:ce:43:e3:2b:6c:f5:12:85:
                    25:8b:a6:5e:df:ae:39:51:ac:54:4e:e0:66:27:db:
                    78:92:c1:68:bd:a0:bd:2d:ef:d3:03:40:f7:96:7b:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DA:5D:28:94:1F:54:D9:3B:F7:7E:8B:ED:40:94:60:0F:12:7A:E1
            X509v3 Authority Key Identifier:
                keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:48:f7:6c:59:82:6f:0a:87:ec:c8:88:5b:3b:cd:90:ce:
         3c:ed:e9:c3:72:d2:93:05:b5:5d:97:2a:fc:70:56:94:03:37:
         48:21:39:99:03:8b:7f:cd:01:14:98:03:03:e5:2b:83:c8:0c:
         63:7e:24:0d:0d:30:0f:64:3e:c6:9a:84:14:14:9f:b7:74:3e:
         90:4e:2e:f3:2a:a7:ac:96:c2:2e:1f:12:66:2c:ce:a3:4c:f4:
         38:e7:cb:60:a5:5e:53:7d:4e:d9:c8:e6:7f:d1:16:d9:7a:22:
         d8:6f:39:aa:64:4a:e8:68:61:15:0c:6b:ce:fd:b3:c7:43:c5:
         9d:13:e5:e3:33:c0:c2:d0:f3:e9:11:90:c1:cc:c3:88:34:07:
         c4:a4:4c:e1:e0:1a:66:8b:2c:42:93:65:b5:7a:7b:52:23:e4:
         58:52:2d:42:72:d4:43:14:f9:5a:e9:4a:31:d5:fc:d4:35:08:
         d7:1c:c8:48:f6:ad:1b:99:51:7c:f8:8c:d8:76:a5:f7:20:05:
         6f:9f:ff:38:62:c4:19:01:5a:f8:fd:d8:7b:5a:86:8a:a5:5f:
         58:64:d0:06:ec:1a:fc:d8:9c:37:70:43:e7:b5:b5:29:af:e2:
         e1:5b:70:ab:8a:1b:24:47:0d:53:71:96:23:7b:84:44:9b:73:
         c3:2a:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:24:38 2025 by rpki-client