Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File:                     2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier:          X4EgtGPcNMSs2kxtdnu9x5E4/6WgKov5RzouXSpLsOw=
Subject key identifier:   E8:3E:05:20:48:BA:67:6E:81:6C:72:04:4B:05:C7:6F:B9:60:91:C1
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer:       /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial:       0198D77329221C489CE1DC267E7BB4D5B098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number:          130D
Signing time:             Sat 23 Aug 2025 15:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:45 +0000
Files and hashes:         1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: 4Jj+nmCYS9kAxB5J+y58W4nWmnsl+lftETvRi/JoUt0=)
                          2: XbqqIgUuiPQ7s4i6gwADBbMAwT4.roa (hash: cRp4FxnA8UimLs+QIeRi/nTr91UWmFZBwZVHNphDdoA=)
                          3: jnFs14ubYigoY0h9h1_Eofh0724.roa (hash: cmLBP5v8zTmaWqQDLZqcYtnuqxPCD1kybV6k+KwkWhM=)
                          4: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:29:22:1c:48:9c:e1:dc:26:7e:7b:b4:d5:b0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
        Validity
            Not Before: Aug 23 15:01:45 2025 GMT
            Not After : Aug 24 15:01:45 2025 GMT
        Subject: CN=e83e052048ba676e816c72044b05c76fb96091c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:4b:3b:12:1e:d8:7c:cd:bf:92:da:4a:78:
                    cb:a1:f5:4a:d0:81:fa:0a:20:87:ee:88:66:5d:cb:
                    76:0f:fd:90:8b:7f:4a:28:76:c0:b9:b5:cc:ec:1c:
                    09:40:e6:04:39:f5:f2:e0:21:79:ae:ef:2f:69:63:
                    7c:cf:bd:f2:b5:14:ea:66:fd:51:00:eb:95:a9:73:
                    d9:f9:95:0a:ee:6e:db:b4:65:3a:f6:bb:03:e5:3e:
                    54:27:91:70:03:17:fa:fb:2d:75:e3:85:a7:f6:6f:
                    de:91:37:21:6d:aa:62:a1:b8:1e:c4:cf:fd:1e:b9:
                    07:57:fe:cf:91:0f:9c:37:d8:48:8f:3a:55:8b:fb:
                    0e:7d:4b:0c:1d:26:9f:3e:5b:86:09:21:06:fc:a4:
                    a3:78:13:16:8b:1f:fc:ef:ad:b3:f0:22:c2:9d:bf:
                    e8:7a:98:e1:a2:54:93:ee:59:88:0c:7d:3e:03:55:
                    d5:08:a3:49:71:47:46:7f:2a:70:e7:8c:c7:d4:01:
                    c4:f7:80:0a:00:2a:29:23:a3:00:fc:60:67:cd:f0:
                    0b:9b:f3:c5:47:2f:52:f1:48:75:ea:cc:5c:fe:09:
                    8c:9c:ac:d1:63:d5:8d:89:b8:7c:5a:68:7b:99:fc:
                    37:42:e8:35:eb:f8:f2:13:22:4c:54:60:02:b8:3f:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:05:20:48:BA:67:6E:81:6C:72:04:4B:05:C7:6F:B9:60:91:C1
            X509v3 Authority Key Identifier:
                keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:54:d5:ff:3a:6b:03:75:00:fc:75:1c:cb:11:2a:19:e6:
         c4:8d:cf:cb:a8:ee:4f:67:20:7b:73:92:f0:7c:6d:1c:5b:b7:
         18:eb:cf:25:ac:d3:65:fa:a1:e2:08:88:77:ca:4b:b8:8a:57:
         7f:4e:0f:91:55:23:cf:60:7e:da:7f:32:98:a9:02:64:4c:4c:
         d8:4e:3a:31:e6:56:35:fc:08:55:29:b4:44:c3:fb:f8:c3:fe:
         c2:cf:13:51:2e:5c:db:8a:b8:94:ff:dd:b5:72:fc:09:67:eb:
         c0:9b:92:fb:2a:2b:61:cc:2c:36:de:c6:d5:e6:f4:e3:f0:7e:
         05:82:f8:57:aa:d2:67:5d:be:a0:df:26:55:7e:a5:10:28:c6:
         58:ee:b8:d7:2b:9c:9c:6c:25:e9:20:ff:c1:b2:88:36:26:f7:
         05:5d:7e:05:c3:fc:59:39:dc:ca:33:af:1c:90:a0:d2:61:e6:
         c8:c7:6f:ee:df:90:1c:2c:71:b5:3d:19:dd:5b:a8:ae:f9:cc:
         dd:94:35:d0:f5:6e:d9:70:b7:9a:8c:4a:a7:23:4b:30:91:93:
         80:7e:91:79:55:9f:cb:65:7d:fd:49:67:3c:cf:27:5f:35:ab:
         a2:f4:ff:de:07:c1:70:c2:38:ad:d4:c0:71:23:cd:ed:c4:04:
         d5:4e:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:56 2025 by rpki-client