Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File:                     uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier:          024SnmIh+5jMXaNY+u9Fd7NUCDqBouWJrkw7R7VQSwo=
Subject key identifier:   4F:43:D3:B6:A2:F9:3D:EF:99:AE:6C:AD:59:27:8B:F3:4E:87:47:DA
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer:       /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial:       0198D515E6C080BC4BEE5A67E9DD3D63FB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 04:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:38 +0000
Files and hashes:         1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=)
                          2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: iNIzNAcDDQRXO1dkOSQ+v7XLDYm1SdvOlqQJD0+FPyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:e6:c0:80:bc:4b:ee:5a:67:e9:dd:3d:63:fb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
        Validity
            Not Before: Aug 23 04:00:38 2025 GMT
            Not After : Aug 24 04:00:38 2025 GMT
        Subject: CN=4f43d3b6a2f93def99ae6cad59278bf34e8747da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:1e:57:a9:22:e1:62:1b:34:5a:fa:8a:5d:
                    d8:d9:54:87:f4:e5:84:75:d1:19:91:59:2e:ff:f7:
                    cf:d9:13:4a:1b:bb:c9:59:c8:44:fa:50:66:f7:61:
                    00:c7:5d:32:86:f1:e0:da:f1:02:19:1c:ae:df:05:
                    54:1c:ca:bd:3a:e7:5c:7f:d6:ab:f2:08:78:70:ee:
                    a1:57:75:f1:d1:3b:22:01:e9:2c:43:c0:09:ec:0d:
                    57:74:ba:91:03:03:b0:1e:1a:f8:1b:85:17:40:fe:
                    15:f7:61:49:ab:bd:db:d1:63:31:50:aa:ab:62:12:
                    5b:4f:fd:4c:79:f7:40:3f:54:6a:7f:a0:75:72:d9:
                    93:af:a9:75:e4:0e:5f:34:0d:60:34:8c:b9:d6:32:
                    c8:aa:fb:ab:5f:cb:91:d8:bb:33:9f:f7:c2:59:ac:
                    17:d7:db:e1:0e:35:a1:48:cb:d0:c0:a9:6c:02:fd:
                    02:82:b0:b2:de:6a:99:46:0b:3d:50:0a:c1:cf:98:
                    23:37:9a:ff:96:69:23:64:49:7f:16:83:ef:fe:9e:
                    b0:be:2b:62:7e:13:6e:b3:4d:77:ea:db:4f:5b:08:
                    35:89:0b:98:44:3d:53:00:25:3e:0f:29:79:22:47:
                    06:da:a9:50:af:7e:88:9d:f2:66:60:45:8c:d6:4e:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:43:D3:B6:A2:F9:3D:EF:99:AE:6C:AD:59:27:8B:F3:4E:87:47:DA
            X509v3 Authority Key Identifier:
                keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:dd:21:ed:ea:99:87:81:be:02:33:8a:fc:53:28:d9:77:
         d6:04:68:22:3f:ed:da:76:23:9a:b5:9a:9f:e4:2d:7d:5d:1d:
         f7:a9:af:8a:9e:ba:80:c0:46:7e:68:fb:27:f9:6f:c0:5f:7f:
         b0:5f:07:78:5e:be:c6:4d:13:18:1c:24:01:de:66:44:f7:83:
         f6:56:a4:6b:88:95:6e:69:89:b7:7d:99:97:a3:24:bc:fa:78:
         28:64:c6:cb:ed:06:5e:0c:dd:c6:ce:f9:fa:7f:ce:75:a8:dd:
         32:81:60:70:f9:0c:55:60:39:e5:0e:2c:b2:83:3b:c6:82:3e:
         95:09:c2:d1:ac:f3:62:d0:84:6e:52:65:2e:d7:5b:b1:43:7e:
         d0:17:07:e9:f3:3c:4d:a0:c8:6e:1d:63:c3:b6:43:d3:74:74:
         5a:94:c8:af:1f:17:37:29:61:c8:99:62:a0:23:50:68:e2:ba:
         06:71:38:ff:c3:09:1a:26:ec:89:47:37:0e:f9:30:cb:56:6c:
         c3:b7:32:9a:9f:91:86:ab:6c:ee:ec:ec:27:1d:c7:3e:bb:6d:
         0e:88:ff:d8:82:77:3b:47:08:d4:cc:16:98:03:40:66:98:ce:
         c0:8e:d3:6f:c2:48:30:ad:ea:ff:d6:7e:c8:41:74:67:11:1f:
         d8:c1:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:30 2025 by rpki-client