Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File:                     UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier:          kpunkDXcMbHAH/UHiP55OoQCzjAT0qXARjLRr5joaAg=
Subject key identifier:   9A:A9:49:31:67:F3:3D:7A:ED:7C:A8:8E:5A:2E:3F:1A:D7:C8:25:D2
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       0198D6CDBDF5760C38710946D269F4EFC8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number:          1490
Signing time:             Sat 23 Aug 2025 12:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:04 +0000
Files and hashes:         1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: 0s0pNfpec7yXu3CEOxYcWlX5Y9hzo4S/fiqjzUSsp40=)
                          2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:bd:f5:76:0c:38:71:09:46:d2:69:f4:ef:c8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: Aug 23 12:01:04 2025 GMT
            Not After : Aug 24 12:01:04 2025 GMT
        Subject: CN=9aa9493167f33d7aed7ca88e5a2e3f1ad7c825d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:fd:b3:d7:82:6c:3d:fb:43:ca:62:0b:91:
                    e6:77:d4:28:a2:ce:e3:ce:7b:58:c2:f6:06:48:d3:
                    54:47:58:92:8f:48:7a:7d:7a:2e:ad:3f:24:cf:a0:
                    7e:a7:5b:31:af:83:ad:5e:0e:7d:b7:0b:af:4c:19:
                    95:f1:0b:d6:14:e8:d6:46:08:f0:b2:f7:6a:57:ac:
                    e4:f0:ac:3c:ec:5b:30:88:22:f6:3d:b0:1e:da:b5:
                    6d:ee:06:91:68:de:86:1c:12:26:43:3c:48:a5:ad:
                    ae:da:26:aa:71:e6:08:66:95:22:3d:bd:93:e9:d5:
                    68:03:ec:1f:81:c5:68:bb:05:49:dc:a9:66:66:8d:
                    26:a5:38:c3:09:e2:a1:b3:d5:76:50:ec:e1:38:83:
                    a9:35:3f:12:30:39:b1:f2:35:90:26:eb:52:f9:a0:
                    d6:52:46:51:86:56:a0:ec:93:c6:ce:ae:57:4f:68:
                    fc:7b:86:89:48:17:63:cb:06:dc:7e:e8:b1:b1:92:
                    1d:63:ba:6d:a5:10:3b:29:bb:d8:03:01:19:09:f5:
                    d2:d4:fe:24:fc:d7:fc:78:64:8b:af:b0:1c:21:f3:
                    3d:92:74:ee:bf:16:d2:88:1b:29:a9:ea:24:d6:24:
                    23:c3:e1:70:a2:ee:c3:8a:39:48:8f:5d:77:00:01:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A9:49:31:67:F3:3D:7A:ED:7C:A8:8E:5A:2E:3F:1A:D7:C8:25:D2
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:5d:ec:06:a5:ad:4c:38:95:32:d6:76:65:98:95:b5:d2:
         21:e7:c9:20:95:3a:d7:db:18:72:75:cf:d8:66:64:9c:14:37:
         9c:83:b1:2d:12:60:60:9d:ed:e7:eb:6b:99:1e:ef:db:56:86:
         e2:30:ce:03:14:da:4e:c4:af:39:53:a6:71:25:72:cc:ea:47:
         07:f8:20:50:67:3b:7a:24:1a:f5:e5:3d:ba:eb:8c:1c:1c:71:
         97:91:f8:83:f6:f1:d1:9c:27:9e:98:ca:a9:cc:22:43:b1:aa:
         e5:24:93:09:3d:39:4d:d2:0f:d4:c6:f8:a3:f2:19:a5:ac:69:
         77:f4:f0:81:cd:f3:83:c5:6f:a5:56:ea:c6:de:ed:8c:f8:1e:
         a9:09:96:58:82:5a:b3:d7:ce:fb:39:6e:01:90:38:dc:fa:5a:
         e9:f4:63:92:c3:57:37:9c:a0:ee:0b:62:a1:68:94:17:87:cc:
         e1:59:46:78:da:48:81:39:ee:7b:47:b4:9f:48:f4:7e:e0:a2:
         55:78:b6:33:09:54:83:2f:f1:7d:3a:01:53:25:6b:a8:7f:5e:
         ed:10:d0:f4:1f:d6:c6:c4:c5:28:86:4a:5f:31:4e:81:9c:4f:
         4b:46:31:9c:02:48:eb:af:5e:43:20:3f:11:b1:40:3c:b3:ba:
         ab:80:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:17 2025 by rpki-client