Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
File:                     UHQRWPPtZb7hveEvNPiVr7DdUNU.mft (raw, json)
Hash identifier:          p6/1h7m26imm6We++ORDLrA5t4OlaZ2BhUwWJFfhFYE=
Subject key identifier:   F3:A3:6C:3C:FC:23:9A:32:1C:45:99:27:8D:1B:7E:EA:ED:36:43:4D
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Certificate issuer:       /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial:       0199FC21BE51417F683567A603D8845C2C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
Manifest number:          1724
Signing time:             Sun 19 Oct 2025 11:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:33 +0000
Files and hashes:         1: 1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa (hash: RYE6k3//z5KNEk7H3IQ1JZYxDGCNXiKaq546ajQsong=)
                          2: C-2Nv77vdORBtXODMBObwRD87Wk.roa (hash: N6t7RosiMXetfLBziLoQs8MiQEYjeO1vmrwr27Ix98Y=)
                          3: HEwByDo5NsJkjq0KP_e43JX1Y-I.roa (hash: KBL6f/ipp4MstSEvkMgxey8LBfXIJhOUyz3ctrFmblM=)
                          4: UHQRWPPtZb7hveEvNPiVr7DdUNU.crl (hash: V8BYsPRLrY+KlUoqCEJbRObe3WLGEHzpqL8f4oVsjvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:be:51:41:7f:68:35:67:a6:03:d8:84:5c:2c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
        Validity
            Not Before: Oct 19 11:01:33 2025 GMT
            Not After : Oct 20 11:01:33 2025 GMT
        Subject: CN=f3a36c3cfc239a321c4599278d1b7eeaed36434d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:06:99:2d:27:6c:f5:64:07:f5:76:ff:00:
                    ee:05:33:d1:bc:cd:9c:3a:52:29:2c:71:2b:f2:3f:
                    50:09:5d:d4:2e:3e:1c:6f:e9:bf:ce:49:e4:05:3b:
                    00:e6:3a:6f:ea:9a:2f:83:8e:9e:7f:2d:af:22:10:
                    7c:c7:7a:f3:71:66:35:0d:f1:1f:b8:2c:a8:dc:0a:
                    ff:2d:52:b5:68:39:f0:1a:3a:a5:60:65:e0:0c:c3:
                    23:c5:5b:35:13:c6:49:bc:2c:8b:85:4c:2e:e3:a5:
                    11:c6:3c:d6:d2:ef:7d:6b:a0:9e:65:b8:2b:cb:66:
                    fd:75:93:e1:25:06:6a:56:89:06:d1:43:b5:76:65:
                    2e:54:fc:14:95:1d:c9:21:26:5b:27:27:2c:f6:0e:
                    83:e6:25:06:b0:c3:06:47:7c:dd:c3:03:08:0d:a2:
                    18:8f:24:c2:2a:71:44:3e:80:a8:93:71:17:d4:32:
                    d5:ae:c9:3f:33:51:2f:98:f7:1f:61:df:08:a2:47:
                    72:15:8a:41:b3:b1:ee:3c:12:e9:41:f6:39:61:93:
                    cd:4b:e2:3d:83:03:8c:8a:86:09:15:2a:22:37:11:
                    43:7b:80:8e:93:97:94:d1:9a:a1:0a:2d:96:47:b5:
                    bf:e1:15:11:1a:24:8e:56:3f:75:06:06:38:30:e6:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:6C:3C:FC:23:9A:32:1C:45:99:27:8D:1B:7E:EA:ED:36:43:4D
            X509v3 Authority Key Identifier:
                keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:6d:6d:97:27:c6:0e:6a:78:fa:01:12:11:87:2f:ea:86:
         51:5e:84:2a:57:f6:29:2c:80:3d:9f:68:e2:9c:c9:25:72:dd:
         4c:f0:2d:20:c0:85:b3:88:98:c0:8e:0b:5b:f6:24:12:a8:a6:
         f4:bc:5e:18:d7:67:c8:8c:eb:78:0a:4f:4a:ba:0d:60:92:70:
         4a:b4:0f:e5:b7:5d:c2:17:29:a7:9d:2b:c3:9d:65:66:98:a2:
         e5:9d:b8:20:08:23:84:13:65:8f:69:ee:b6:63:93:14:5d:39:
         09:3b:dd:ea:08:6c:eb:4c:c7:ad:33:99:f6:84:5c:92:fe:38:
         f4:65:38:c6:a9:9e:97:f1:50:ce:c3:e4:78:d4:96:43:bf:c2:
         b6:32:48:bc:dc:a5:b3:07:36:43:f1:10:20:1f:ba:1e:bd:a3:
         eb:70:97:c3:c5:b2:13:79:f2:31:e8:c5:e1:fd:3e:ed:73:08:
         1c:4e:92:51:88:04:2e:1b:4f:3e:0b:96:e3:3a:8a:c6:75:b5:
         97:9f:25:ef:3c:04:39:58:6d:75:02:a0:b8:db:42:72:43:c7:
         0c:c7:8f:b3:37:93:fc:93:00:d9:ca:97:fe:80:87:59:d3:88:
         8b:87:5d:4e:ae:59:64:ed:b9:fe:9c:b2:3d:58:f1:c3:75:0f:
         b6:b5:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:39 2025 by rpki-client