Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File:                     uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier:          x0yhIiU6NI57e/tna0hFMd+mS/iS0Fj5aYwROASuBtg=
Subject key identifier:   6C:30:8E:D2:47:FC:21:C4:E7:A4:B1:6B:51:26:0A:A1:DB:3C:5B:E5
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer:       /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial:       0198D65F921E8FEF6023A4CBB43B23B58A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:44 +0000
Files and hashes:         1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
                          2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: CH3SHIALYQKjmb2zbj9vPRLOFxxm/VmdVyiGv2/pGN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:92:1e:8f:ef:60:23:a4:cb:b4:3b:23:b5:8a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
        Validity
            Not Before: Aug 23 10:00:44 2025 GMT
            Not After : Aug 24 10:00:44 2025 GMT
        Subject: CN=6c308ed247fc21c4e7a4b16b51260aa1db3c5be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:2b:45:e5:c0:24:70:46:6e:3e:04:8d:08:
                    e9:ec:3c:6e:70:8b:86:de:9f:52:81:5a:b5:db:0a:
                    fc:4c:5d:d6:0b:a4:45:cf:87:ba:35:a6:fb:1f:a1:
                    b0:49:54:46:58:da:45:3c:7a:4b:f8:04:d1:8b:50:
                    87:5a:a7:00:c6:0a:98:d9:c2:c7:86:a6:6c:60:1c:
                    9f:52:8a:f9:01:30:ca:8d:5b:f0:94:31:51:04:db:
                    a1:aa:2e:9a:aa:25:3f:55:94:b4:74:aa:47:d6:08:
                    84:50:38:48:51:95:f2:bb:3b:b9:b6:7c:a3:8d:49:
                    d3:5d:a3:2a:3e:fd:be:68:bc:22:8f:1c:76:9f:2f:
                    2a:f6:71:00:a6:2c:27:1e:79:cc:8d:af:cb:b3:74:
                    24:ab:b7:50:6a:11:91:cc:57:a1:42:cc:37:c0:2f:
                    99:7a:8c:6f:02:95:fa:dc:eb:40:96:5a:be:ab:4a:
                    44:3e:88:85:bf:39:d0:1d:9f:03:f7:b4:3a:3f:0e:
                    f7:cc:9f:6c:9f:f6:c7:5d:74:28:b8:af:f9:5c:62:
                    f1:d8:8c:95:5e:e4:b8:da:85:9b:08:20:f4:87:46:
                    a9:27:cf:e4:62:1b:b4:9a:a4:7a:82:e5:ad:ef:29:
                    f8:ff:ca:d9:bb:8f:cb:1d:be:8c:51:65:8c:c7:09:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:30:8E:D2:47:FC:21:C4:E7:A4:B1:6B:51:26:0A:A1:DB:3C:5B:E5
            X509v3 Authority Key Identifier:
                keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:44:2b:a1:45:f0:78:95:43:b2:7f:10:af:c3:c7:83:8c:82:
         bb:52:f6:65:89:52:70:6d:d5:69:53:4d:bb:0e:c8:85:bc:95:
         90:a4:49:9e:c1:ef:40:99:fd:c5:ec:58:e8:67:83:52:eb:4d:
         78:bd:8f:ce:b8:0b:a6:bd:12:2c:fd:c4:82:d4:61:86:db:6f:
         9d:98:da:d9:bd:8e:56:60:2a:d8:80:7a:d7:12:ff:2d:2a:00:
         d7:52:70:f2:62:85:94:b1:06:42:fe:12:96:58:e0:47:e1:9a:
         55:f6:00:47:57:7f:ce:f7:5e:e6:68:a7:47:14:73:5b:58:a3:
         32:b1:b5:e1:c5:bf:1e:ce:cf:25:4e:ce:54:11:29:a5:8c:92:
         ca:98:b7:23:ef:ea:bd:b2:d5:c0:6f:b9:94:f6:46:7a:a3:33:
         29:a2:16:e8:93:e9:d4:1a:a5:cf:7b:93:26:c9:a3:85:d4:42:
         11:86:64:68:b8:48:5a:05:47:02:5b:27:ed:18:ec:1b:58:88:
         5b:55:f0:47:42:3a:28:94:cf:d1:dc:b7:54:a8:50:11:79:4c:
         b8:5b:98:aa:f2:16:6a:4a:a5:af:20:10:a3:0c:0b:61:ee:28:
         a1:d5:ff:d6:af:c5:2f:7e:2d:76:9a:8e:9b:eb:a4:74:df:07:
         fb:f6:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:32 2025 by rpki-client