Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File:                     uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier:          BUHl2zxvoWeAE/W/tmutevN/NDcRqcCOGofhReDOtSQ=
Subject key identifier:   DC:A5:3C:DF:EE:B7:B5:F6:E0:D3:9C:70:71:44:33:D3:26:54:18:51
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer:       /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial:       0198D5F135601B75D551E676B3E5F2E0C46D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number:          0374
Signing time:             Sat 23 Aug 2025 08:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:11 +0000
Files and hashes:         1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
                          2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
                          3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
                          4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
                          5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: yR5/tdn1aJnyxpn9z5VnAMsnnf7jVv2TwlPIWf0KTCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:35:60:1b:75:d5:51:e6:76:b3:e5:f2:e0:c4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
        Validity
            Not Before: Aug 23 08:00:11 2025 GMT
            Not After : Aug 24 08:00:11 2025 GMT
        Subject: CN=dca53cdfeeb7b5f6e0d39c70714433d326541851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:03:9f:15:ee:ee:12:2f:30:9c:cf:96:59:
                    69:65:7d:15:86:a9:7a:15:b4:56:66:9e:05:14:28:
                    e6:8e:d7:0a:55:8d:55:53:d8:b3:b4:5d:dd:1f:4d:
                    ee:d0:f6:aa:96:a6:8c:d9:98:ea:45:03:0e:5d:e4:
                    0f:a1:e5:38:a9:ae:a5:97:20:b8:5b:d5:dd:c4:5a:
                    cd:04:3d:16:08:64:6a:e9:fa:54:03:7c:ad:30:d4:
                    dd:f4:2b:6a:d5:0d:ab:25:f3:aa:dd:e2:62:aa:30:
                    a4:a5:74:d6:ed:e2:6b:9f:e7:95:d4:61:d5:aa:f0:
                    75:e7:45:ba:c7:59:e2:08:02:e3:b2:3a:8d:4b:b3:
                    17:67:ea:af:75:b1:87:82:94:72:bf:f3:70:b1:ed:
                    1c:0b:69:20:16:30:09:9c:c1:cb:54:29:20:bd:96:
                    d8:89:62:98:7a:80:d8:8a:1c:6a:5a:bb:3a:f1:a5:
                    bc:99:46:7e:4f:73:fa:46:cd:06:4d:5d:b9:a9:10:
                    49:8b:8a:54:56:de:24:8f:9c:d0:fa:d8:83:6e:cc:
                    e1:91:ec:b6:e0:19:e3:f9:79:31:7c:63:3d:45:7e:
                    44:61:8a:c1:c7:62:b8:e1:bf:63:f3:fd:7b:a4:56:
                    ca:e3:76:29:fa:43:5b:39:7c:4d:dd:4a:0e:df:4c:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A5:3C:DF:EE:B7:B5:F6:E0:D3:9C:70:71:44:33:D3:26:54:18:51
            X509v3 Authority Key Identifier:
                keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:5c:f8:1b:76:37:8e:aa:7f:9b:bf:d5:0d:76:79:d8:b2:
         ab:b2:85:01:46:7e:42:c8:f7:24:f5:69:19:31:db:d6:48:74:
         9a:96:ee:40:5b:3d:d0:2b:54:fd:a7:c6:2a:27:1f:da:d4:96:
         ff:86:a8:01:36:3f:4e:78:bb:ce:ad:39:56:42:17:85:d8:d1:
         08:d0:a3:47:03:d3:02:3b:e9:c0:48:54:16:bf:f9:48:a4:dd:
         db:f5:74:e0:c4:4f:5a:c2:47:62:f2:a8:2b:d2:9e:40:cc:a9:
         e3:93:3c:5b:fa:cb:c8:9f:37:dd:92:f6:6e:06:38:1e:dd:a7:
         50:77:ca:8e:30:59:cf:5f:29:c0:d8:25:58:ad:cf:56:a4:80:
         31:76:c8:f3:13:f6:c2:35:ff:42:2b:6c:6a:9b:33:4c:3a:b6:
         55:2f:ca:6b:6e:9f:66:03:05:f7:48:19:5e:63:63:20:e6:50:
         99:bb:50:27:fa:52:3e:b7:77:4b:dc:46:19:30:91:7d:8e:f8:
         53:ba:f6:53:f6:7b:e9:64:b2:b4:c8:52:a1:f3:c9:a4:e0:de:
         5f:d4:c1:29:8b:9e:0d:98:55:71:88:94:24:2b:ef:0c:66:0a:
         fa:79:69:bc:9b:52:30:fe:e1:e3:5e:a7:82:6d:7d:ef:0e:bd:
         3f:32:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:51 2025 by rpki-client