Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          Ut1nCCCnZNMkV7+/Zh5vjlWyJ/lq6E02DaO98KLXblo=
Subject key identifier:   48:A9:8F:EF:55:20:21:E2:6D:1B:FE:58:60:62:0B:F6:30:49:F7:56
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       0198D4A7D990157A03A39BE75F05D1867BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          07BA
Signing time:             Sat 23 Aug 2025 02:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:26 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: rkz63cTebjVZ6UcaD8Y0HC9SiaDXhXD4kF5+9122Tz0=)
                          2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d9:90:15:7a:03:a3:9b:e7:5f:05:d1:86:7b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Aug 23 02:00:26 2025 GMT
            Not After : Aug 24 02:00:26 2025 GMT
        Subject: CN=48a98fef552021e26d1bfe5860620bf63049f756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:7a:bc:f3:19:ee:67:eb:30:9d:aa:c7:b8:
                    25:02:c5:a9:90:53:88:bd:5e:78:a7:14:d3:c8:85:
                    42:05:44:cd:0f:ea:97:3c:0a:1c:a9:61:c3:30:6f:
                    cd:70:87:d7:8c:b2:25:58:e0:0a:ce:0e:20:bb:9f:
                    c0:0e:87:17:81:bd:37:b7:2e:c6:09:44:d9:c1:f1:
                    45:7e:07:61:31:45:9d:c3:f5:90:f8:8d:62:7f:15:
                    06:fd:0e:35:74:b6:08:81:84:59:61:a2:e0:28:27:
                    91:1d:1e:e4:f4:fe:b8:a0:1f:33:2e:3f:ab:46:9b:
                    ad:c5:b5:1f:05:0c:8f:7a:f0:1b:92:56:85:d6:3a:
                    9d:59:30:12:73:70:ef:60:d0:fe:63:25:b3:b9:0e:
                    41:52:9a:0f:8b:ff:df:af:ef:00:30:05:85:95:00:
                    91:7e:c6:20:ed:02:87:82:a5:b9:6b:5e:6b:e9:5d:
                    df:91:f9:51:61:c0:8c:70:b0:cf:6d:36:a2:9b:31:
                    f5:3b:82:f4:c0:7f:6e:c0:aa:ab:fb:80:78:9d:ae:
                    1f:be:24:ec:87:7d:96:a1:e5:1d:2a:6b:8e:93:03:
                    59:6f:3f:94:bb:7c:72:aa:d0:3a:96:9c:6c:d9:5f:
                    71:ba:b6:f6:79:c6:ec:5e:02:6e:e9:85:3d:71:e5:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:8F:EF:55:20:21:E2:6D:1B:FE:58:60:62:0B:F6:30:49:F7:56
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:88:90:b8:0a:16:f1:3e:db:d4:1b:04:03:93:52:b6:0f:6c:
         5c:5f:e7:ed:28:19:82:41:e7:5d:5a:cf:05:c5:e8:45:37:56:
         ee:94:4a:52:d6:88:c3:8e:32:e1:e7:d6:61:aa:cc:8e:09:f1:
         c1:2e:e8:1a:61:1f:97:4b:57:8c:e7:f4:59:8c:e7:01:d5:a2:
         78:8a:58:e2:d4:62:b1:e4:29:af:e9:58:a6:06:70:ff:bc:1c:
         34:df:8f:e9:e8:25:34:17:69:49:4f:e6:f9:cc:b5:a2:c8:dc:
         01:78:2b:f7:2f:f5:92:85:02:fc:8d:b1:0b:65:0b:cc:24:b1:
         a0:fb:91:85:2c:7d:e1:a7:a9:88:68:5d:2a:53:20:7f:95:dc:
         84:07:75:61:cb:12:33:cf:a6:33:6d:26:46:ab:50:d8:89:49:
         40:45:56:ae:56:f6:a7:9d:ba:89:8e:6f:64:49:0b:3c:96:34:
         6d:37:a6:37:46:77:65:f1:61:93:19:91:86:42:60:1b:9c:d5:
         d5:78:82:f4:f9:7b:f0:4d:20:a9:94:93:d0:4e:87:00:a8:16:
         76:ae:82:de:82:94:81:5b:ca:0f:74:21:0a:57:01:75:6f:df:
         63:bb:78:69:a3:ff:d6:4b:3a:51:26:68:3e:26:77:89:30:55:
         f9:97:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:49 2025 by rpki-client