Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File:                     UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier:          GpqK8ARDfXbVoD8VjFYg+mmQn4XpXNiR8w19MpD2FJU=
Subject key identifier:   92:10:CA:B0:AB:B1:E7:71:C6:4E:C7:1C:65:72:0C:16:73:70:4E:FE
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer:       /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial:       0197B7456F26E6BB983C39AACF60F8CADB32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number:          10D0
Signing time:             Sat 28 Jun 2025 16:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:10 +0000
Files and hashes:         1: 4nwbGR9filruN4uTSLu-SAojUdQ.roa (hash: HwkXIEcexdoJKCLIxKh83QjsjcLInJ+XtPhMd0njyqw=)
                          2: BVlS5feNmWdOLJ165musLYEx5nE.roa (hash: SM/6EqVv5ryznml3uYjoiN2rUtzuVv9yrFvvgUs/n50=)
                          3: C9FeLXHlmSb6adQSBmHRmx1p1GQ.roa (hash: wsQwdaHpob1xHgKH8CTJtFsTYcrf5LAWX2Z18JuGPe4=)
                          4: EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa (hash: uAsvwaMtcMOr9i0+t37QKzdz9ftJWtmHdf0VDRcsGJI=)
                          5: PAbHc64weo8hVFOoyNw_KIYZGbQ.roa (hash: QrXbLReiK7UXgLaMSU+fS4kFmpcrsFUElNX3domZ2dw=)
                          6: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: NKk2kDlCvuzoZK5gmzV4tluSa7eHLJ+Feg5fSwcZdjQ=)
                          7: oMYlwSnWK6uPik-ogylklgWprko.roa (hash: bn3z21YSv1E9rQu+WAdfxy0yPZJ+K8++ghPX8u1VPlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:6f:26:e6:bb:98:3c:39:aa:cf:60:f8:ca:db:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
        Validity
            Not Before: Jun 28 16:01:10 2025 GMT
            Not After : Jun 29 16:01:10 2025 GMT
        Subject: CN=9210cab0abb1e771c64ec71c65720c1673704efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:0b:f6:c4:a4:48:96:5f:7b:fd:4b:e3:fc:
                    ab:4b:dc:c3:97:6c:e5:bd:a3:d6:0d:2b:25:81:21:
                    b1:9b:ec:43:17:99:60:12:ea:fe:ae:c0:73:04:26:
                    84:2a:c0:3d:14:23:95:4b:c1:fc:14:66:9a:34:5f:
                    13:d0:f6:f5:04:17:db:97:72:55:ea:a3:86:c1:31:
                    5b:4e:fa:01:d7:b1:ad:01:93:03:7c:56:0b:b3:bc:
                    62:5a:9a:26:e2:be:a8:55:06:0f:ae:68:03:07:19:
                    8c:1a:8b:1c:75:29:56:04:13:ef:eb:bf:fb:4c:83:
                    95:e1:d9:c9:73:ef:ee:cc:36:8e:1d:d0:70:63:86:
                    7d:6b:79:a4:05:44:8a:a0:56:1a:07:c0:dc:dc:49:
                    2f:5c:cb:49:ea:71:fb:27:82:8f:57:f3:a0:3f:94:
                    aa:ad:f1:f1:70:90:af:a0:d7:69:59:0a:9d:0c:d1:
                    33:a4:6b:0e:d5:a4:25:cb:22:90:fe:09:a2:5b:29:
                    fd:bd:3a:1d:4f:8a:68:5c:49:ea:da:82:33:a1:af:
                    8f:30:fc:fa:cc:a3:10:73:e6:b7:3b:63:a2:03:6f:
                    0a:7f:41:5a:69:0b:a5:27:25:6b:60:51:67:3e:22:
                    bc:ce:25:4c:50:a5:cd:c7:b4:8e:d5:52:55:0f:79:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:10:CA:B0:AB:B1:E7:71:C6:4E:C7:1C:65:72:0C:16:73:70:4E:FE
            X509v3 Authority Key Identifier:
                keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:ee:16:a7:2e:43:d2:4c:08:4d:44:7f:db:d8:05:71:82:
         23:7b:00:7c:b8:78:b5:81:aa:dc:ea:a4:25:81:2a:3e:d1:de:
         c3:18:14:f2:01:ab:3f:a6:09:9c:ed:12:e3:94:78:7b:3a:ec:
         e2:79:93:26:90:8f:7f:98:c4:be:c4:f6:5c:80:2f:aa:bd:4b:
         1b:b2:56:ed:63:b1:c8:61:b6:60:40:a3:44:02:ee:0f:ec:da:
         72:c7:72:da:b9:5f:91:72:93:70:47:1d:4b:8f:6a:04:73:67:
         7f:25:8f:b1:3a:1d:72:bf:14:e3:93:19:d7:b9:9d:73:a0:50:
         4e:76:4b:67:f6:78:6d:c3:54:7a:cb:aa:05:03:a2:e8:f0:ec:
         d7:a0:02:e4:7b:95:34:b7:c9:8b:f3:cf:df:52:49:36:48:c2:
         a1:a1:7e:3b:86:c8:d1:f0:8f:90:ec:89:55:f9:7a:b6:9a:8d:
         55:1b:a6:69:3c:8e:59:85:31:7d:69:1b:d5:20:9e:91:98:b5:
         b3:b1:ac:43:86:3d:2f:fd:43:97:94:b9:1b:f5:6f:4c:1c:ed:
         b7:79:91:22:b1:09:8a:bf:ac:67:4b:31:1a:04:a8:b6:01:21:
         c5:0a:b4:17:73:3b:b2:e8:a5:01:ad:71:92:99:4b:4b:34:1e:
         38:fc:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:26 2025 by rpki-client