Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File:                     UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier:          s2dQKTA3h/bDt4C+wGy2dR8/iv+qpO0GO2fasfA6tGM=
Subject key identifier:   C6:41:FA:D0:2E:64:86:71:8C:CA:35:47:0C:BA:01:E9:AD:2D:50:D6
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer:       /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial:       0198D4E0F1731DC681218B235BFEBB85F67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number:          07D7
Signing time:             Sat 23 Aug 2025 03:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:48 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:48 +0000
Files and hashes:         1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
                          2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: SJBYR53I6qJYp8WdjnKHCRwajsF8UzKIhT7n+gt5paM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:f1:73:1d:c6:81:21:8b:23:5b:fe:bb:85:f6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
        Validity
            Not Before: Aug 23 03:02:48 2025 GMT
            Not After : Aug 24 03:02:48 2025 GMT
        Subject: CN=c641fad02e6486718cca35470cba01e9ad2d50d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:5e:e7:3e:ba:27:1b:79:48:1e:3a:3e:a2:
                    17:f8:d7:85:58:5d:a2:55:0a:64:d0:09:80:7d:6a:
                    11:5a:99:3e:e4:ca:07:f2:21:b7:71:3c:f3:87:9b:
                    e7:92:6d:f3:ab:0d:b3:71:89:9f:4d:f2:ab:05:c8:
                    7b:d1:80:ff:06:96:73:fa:d4:15:54:16:67:70:70:
                    bd:c7:93:2f:90:fb:05:17:6d:c2:5e:23:c3:8c:3d:
                    82:52:09:02:70:9d:85:e5:2f:c6:9b:a0:90:8e:7d:
                    88:84:96:f3:76:2d:1d:21:5c:39:45:b0:e7:34:58:
                    9a:f3:b5:8e:d7:41:57:ab:24:81:de:11:3d:ea:b5:
                    5c:8a:66:d6:a6:9f:f5:78:e0:3d:22:95:b2:2d:b0:
                    50:52:69:a6:96:a6:a9:bc:18:6d:73:e2:21:56:c9:
                    3d:a8:6f:5b:2a:32:db:4f:ca:03:20:4b:42:d8:53:
                    0f:d4:03:12:d5:b2:5b:e7:fa:0b:ef:1c:7b:27:7e:
                    3a:7a:1c:ed:3c:5b:e8:d5:c0:bd:0f:27:c8:0e:30:
                    f5:a0:91:ca:e4:b2:b7:2a:58:0f:3e:3d:59:c0:0f:
                    9f:70:cd:1f:42:bd:a8:e4:22:11:cb:45:9b:88:ae:
                    ae:ca:15:5f:2d:72:9a:7c:89:bd:35:7c:e4:da:e0:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:41:FA:D0:2E:64:86:71:8C:CA:35:47:0C:BA:01:E9:AD:2D:50:D6
            X509v3 Authority Key Identifier:
                keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:1c:83:0c:77:ae:f0:ec:04:2d:b6:b2:c8:1d:90:fb:61:
         18:69:cd:0c:93:61:1b:dd:af:25:dc:14:9c:d7:1c:39:8f:54:
         39:5c:b0:d0:0c:0e:86:2b:ea:42:60:7b:aa:7e:27:e1:46:c0:
         64:a7:47:fb:d3:7d:48:07:5d:9c:63:a3:18:18:80:b5:84:76:
         29:2c:86:99:e8:a7:a2:1b:e6:55:73:ac:8c:6a:72:d5:f3:a4:
         29:ab:87:4c:f2:a9:5b:6c:6a:fa:a3:ed:74:06:d5:af:4b:d3:
         ed:d5:5f:6a:5b:75:16:ff:61:3a:f3:e3:24:ab:a2:28:f2:39:
         14:60:13:fb:60:17:7e:30:77:a5:b2:3e:70:3c:33:80:32:71:
         98:c7:55:09:12:b7:9a:6c:6d:3d:ec:3e:b5:2d:c6:ee:45:d2:
         bb:e1:e0:d1:3b:fa:40:60:b8:d1:01:35:d1:e8:08:21:e9:f2:
         93:df:24:57:0f:55:26:c9:75:8c:33:f0:e7:e4:86:e6:56:37:
         af:ef:f6:d5:9b:9b:c8:25:da:82:b3:34:1a:04:ae:f8:59:15:
         ea:c6:a2:ba:ce:1b:fb:af:4a:38:5e:38:d1:bd:9c:f8:f3:ed:
         71:1e:93:9c:02:2e:ba:03:a3:ed:89:47:f1:8a:be:5c:ac:a6:
         6a:fa:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:18 2025 by rpki-client