Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
File:                     ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft (raw, json)
Hash identifier:          zpNU0HhZk6AuMBtCKvRRo78swFGYPAfdHyAo44MkSAU=
Subject key identifier:   45:55:87:D7:38:26:8E:91:D0:CE:84:34:B6:35:EA:4A:5A:DF:9B:4F
Authority key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
Certificate issuer:       /CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Certificate serial:       0198D5BBC722401D2465DD85CC02A448108E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
Manifest number:          15DD
Signing time:             Sat 23 Aug 2025 07:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:49 +0000
Files and hashes:         1: ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl (hash: bj4lDjLUkkj3t2lBkaB+FaCxN9nRHGo4/+mR/yESkOc=)
                          2: osNkGM30SnMymb2Awx_H5QpAsjo.roa (hash: HAaDhq9nK6jC5S5RvUgE6hoFlbMOsKI55ry4MCnd8LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c7:22:40:1d:24:65:dd:85:cc:02:a4:48:10:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50bb4c781a5b393ff07fb405e528179f5ab87726
        Validity
            Not Before: Aug 23 07:01:49 2025 GMT
            Not After : Aug 24 07:01:49 2025 GMT
        Subject: CN=455587d738268e91d0ce8434b635ea4a5adf9b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:23:db:0b:ca:5a:12:05:05:2c:f5:c6:c0:
                    5d:2d:ac:4f:5e:29:04:58:2a:15:ae:80:92:ab:e3:
                    e9:21:95:a5:6c:a3:7b:28:bf:16:30:80:70:3e:98:
                    e7:1c:aa:47:f8:ba:aa:a5:7d:5b:50:8f:8b:8a:43:
                    54:3f:24:15:4c:52:50:72:16:a2:7e:11:a6:d8:80:
                    27:73:e4:9f:c0:2b:39:d2:35:c4:a6:76:6b:c7:30:
                    fb:b3:5f:da:bf:7b:14:fa:9c:05:43:ee:b6:1f:ca:
                    67:25:7c:33:4d:73:27:4b:3a:27:60:8d:7c:f5:66:
                    68:0d:c1:bf:78:e6:82:f4:f7:6c:c6:32:32:4a:73:
                    b6:85:3e:54:2a:40:75:3e:39:73:10:b3:83:a3:9c:
                    4b:3c:eb:0f:d7:e7:c1:5a:b6:86:28:21:5e:27:65:
                    0a:b0:84:2d:5d:37:d0:1d:62:9b:34:df:83:a2:71:
                    ed:d6:f2:ca:28:f6:b2:bf:17:19:b9:68:81:ce:5a:
                    42:8d:b6:67:4b:3a:3d:51:ed:63:12:3b:d4:06:03:
                    76:64:f9:a2:19:a9:08:57:20:c9:2f:a7:2a:11:fa:
                    9d:ab:5c:8e:84:20:a6:f0:69:cf:f6:0a:f4:73:a6:
                    b4:2a:f1:5a:64:f6:6f:77:c8:64:7a:8a:73:23:3d:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:87:D7:38:26:8E:91:D0:CE:84:34:B6:35:EA:4A:5A:DF:9B:4F
            X509v3 Authority Key Identifier:
                keyid:50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:94:90:f9:fd:10:7e:63:08:a0:2d:45:1a:48:f3:99:42:fe:
         94:1f:13:68:4a:d9:28:05:39:b5:24:c8:8c:10:c1:3c:93:f0:
         3c:37:9c:54:e1:f0:a8:31:f7:2b:d2:b0:fb:b9:c3:ee:1d:40:
         e3:13:fe:d2:f3:80:76:45:a1:ea:77:ac:b8:91:11:28:c0:08:
         e3:77:f5:9f:ce:a9:1f:b6:6c:38:23:47:a9:d3:b5:1c:db:18:
         39:5c:94:80:62:f7:59:de:c8:43:c1:f8:92:8e:19:ad:ed:be:
         b8:3a:f8:0e:c6:d6:42:9b:60:83:1a:bd:86:69:22:8a:4b:ed:
         93:d8:28:fb:fc:31:7f:30:87:b1:1e:ec:27:7a:b2:7c:e1:b6:
         45:44:46:fc:b7:94:2f:0e:2e:b9:6f:88:53:d5:fc:a7:31:d0:
         0d:0b:e1:1c:50:f9:31:9e:fe:2b:a9:f2:b2:ad:02:8a:09:f4:
         27:2e:2f:d1:2c:e9:9b:e2:98:6e:d9:9f:58:ef:74:6a:bc:e6:
         21:90:d5:b6:83:d9:59:42:13:54:f4:c5:25:f9:bf:a0:9e:fb:
         c7:9d:55:3e:1d:0e:05:e5:40:26:11:13:56:1b:8b:f9:98:48:
         3d:19:77:b0:6d:50:64:62:84:10:22:6f:31:89:91:77:de:e2:
         8a:54:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:57 2025 by rpki-client