Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
File:                     uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft (raw, json)
Hash identifier:          WzinnWPW8o1nkqA5bgUtQLUUuiL3bK/s+ZJR+qu6za8=
Subject key identifier:   FB:E5:87:96:67:77:09:FB:45:66:4B:0D:E7:6C:AF:7B:72:BC:DC:5C
Authority key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27
Certificate issuer:       /CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
Certificate serial:       0198D88479C3813A88D0B3A6C4B210E0F7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
Manifest number:          05A5
Signing time:             Sat 23 Aug 2025 20:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:17 +0000
Files and hashes:         1: uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl (hash: DzaY+MEMnz+ppZlYiWbvc7W05/NJ5lGsfTAQsdwqNM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:79:c3:81:3a:88:d0:b3:a6:c4:b2:10:e0:f7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
        Validity
            Not Before: Aug 23 20:00:17 2025 GMT
            Not After : Aug 24 20:00:17 2025 GMT
        Subject: CN=fbe58796677709fb45664b0de76caf7b72bcdc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:d3:7b:81:68:54:e1:4e:08:d2:cb:da:4a:
                    dc:a9:bf:84:28:6a:0e:14:2e:38:88:b3:03:10:fd:
                    68:89:00:9d:52:ab:fc:ec:c4:c3:3c:c5:4a:44:0e:
                    30:ed:9a:2c:11:89:18:41:ae:d8:c6:1b:9f:79:2a:
                    6b:13:6d:5d:dd:4a:60:75:81:a3:63:6e:08:b0:77:
                    65:20:a5:9d:b9:05:0c:e8:f6:88:ca:4a:1a:71:ec:
                    5a:dd:bd:52:ee:6a:83:5a:13:68:67:90:3e:62:5c:
                    45:ec:29:4a:0c:97:08:7e:09:a8:60:84:a5:c8:46:
                    b7:da:48:c2:9b:c1:09:f5:8b:c7:0a:71:9a:01:df:
                    59:8a:db:14:a6:b0:9e:f7:35:7b:72:c1:c0:d5:8d:
                    07:79:36:a5:b6:fd:df:32:c2:70:0f:2a:a1:25:eb:
                    00:1f:ee:47:17:11:f2:14:a2:5a:fa:e8:ef:a1:d2:
                    05:93:d8:7f:f7:90:b1:6e:44:27:b1:20:a0:22:29:
                    50:87:02:7d:8c:cb:6a:f5:dc:8d:09:e4:b7:27:c5:
                    64:9f:f4:3e:fb:84:1c:f2:61:6c:ab:eb:1a:db:f8:
                    8c:f1:aa:b8:70:a5:17:2f:d5:e2:e8:49:0c:83:7a:
                    68:cf:3c:be:d2:2d:a2:06:c3:14:2c:68:a5:a5:31:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E5:87:96:67:77:09:FB:45:66:4B:0D:E7:6C:AF:7B:72:BC:DC:5C
            X509v3 Authority Key Identifier:
                keyid:B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:97:d0:ba:37:d5:42:50:fd:0e:1d:6f:50:c0:24:ae:7f:df:
         d6:de:c8:56:11:cd:bf:6e:0c:b7:2c:30:60:ed:4e:93:a5:4f:
         63:35:e4:ce:6c:a7:36:a2:37:b9:c7:40:28:6f:5d:1e:95:f0:
         4a:54:9b:37:24:e1:57:0d:c6:99:fb:97:99:02:a9:1b:ab:0e:
         3b:44:c6:08:f8:40:76:8e:b7:65:8c:a2:11:24:72:31:14:cd:
         06:7a:80:bc:ad:d9:54:d6:37:5b:0d:d8:5d:d6:82:9c:33:d5:
         36:89:d8:47:ce:f2:5a:c8:83:7d:8e:85:0b:5f:54:69:e2:07:
         e8:a2:3f:9e:fd:a7:ee:19:01:12:37:f8:0d:b4:8f:39:d1:16:
         31:a4:9b:19:9d:ae:c1:31:b2:5b:b3:45:be:bc:6a:1d:e2:44:
         42:6b:75:5e:57:ba:98:49:ec:b3:ae:14:02:2f:c8:e1:02:4d:
         0e:e2:5a:08:06:0b:ea:ca:a7:3d:f1:c7:e8:ae:18:17:72:72:
         84:db:4c:71:ce:1e:7d:d3:aa:72:7e:fd:65:ab:19:87:a8:3a:
         08:05:59:f2:57:24:22:0a:ae:3e:59:ba:4e:95:8b:9b:26:1f:
         f8:a6:24:9e:0d:6b:6e:2e:22:55:55:87:a6:df:06:be:f6:a2:
         24:89:d9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:09:18 2025 by rpki-client