Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File:                     u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier:          WWbH+B2oCPcoXkk7BYR6WvaVwcQa2vFLREUIgas3MAo=
Subject key identifier:   6F:94:51:29:4F:6D:BC:69:A4:B7:00:A7:5A:73:CE:87:0A:A0:DE:E3
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer:       /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial:       0198D583BED940473629B40E28BFBB2C0C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number:          0424
Signing time:             Sat 23 Aug 2025 06:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:37 +0000
Files and hashes:         1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
                          2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: aX/+cVUTfZ5N5NpVuJke5rYrezqedxqjidWQRo698y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:be:d9:40:47:36:29:b4:0e:28:bf:bb:2c:0c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
        Validity
            Not Before: Aug 23 06:00:37 2025 GMT
            Not After : Aug 24 06:00:37 2025 GMT
        Subject: CN=6f9451294f6dbc69a4b700a75a73ce870aa0dee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:50:1d:c4:81:19:65:c0:9f:2c:ae:b7:60:
                    e5:85:d2:a4:fb:85:04:be:7b:b8:d1:1f:8b:6b:89:
                    91:a4:b3:42:f4:fb:fa:58:33:94:5f:b6:7a:93:57:
                    cb:43:c5:e6:5c:40:5c:37:cc:0c:36:da:be:b9:8c:
                    3e:df:1b:ec:ed:e8:a7:ed:7b:e4:4d:8e:ab:ea:56:
                    d0:31:f6:53:32:c0:92:be:9d:52:34:76:bc:1d:4e:
                    e2:27:8e:b5:12:e0:24:ac:40:fd:9e:b6:85:2d:a0:
                    dd:33:27:07:29:c5:09:7b:5e:54:b4:54:98:cb:71:
                    b2:7a:1c:81:e6:78:a3:f9:3e:6a:95:4f:f2:0c:9c:
                    0b:e9:23:7f:2c:9f:8a:e6:7a:33:3e:07:74:66:5e:
                    87:59:9c:bf:dc:1f:b7:97:2e:f4:b9:cd:00:8a:89:
                    b1:0c:95:4d:28:df:41:c6:d8:f0:10:87:5b:bb:03:
                    2d:88:8e:84:73:05:23:fe:3c:6a:b2:82:7b:ff:a3:
                    06:da:f4:d2:47:41:c8:e6:0d:fc:eb:06:86:18:df:
                    fe:95:6a:2f:ad:69:19:f5:c4:34:29:25:3b:0f:b8:
                    1f:4b:99:5d:1f:fa:eb:ca:32:f7:af:ee:23:d5:d3:
                    da:bf:3e:00:93:f8:96:3b:73:55:a3:db:3b:38:47:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:51:29:4F:6D:BC:69:A4:B7:00:A7:5A:73:CE:87:0A:A0:DE:E3
            X509v3 Authority Key Identifier:
                keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ba:07:87:fc:39:50:8b:44:eb:d4:94:ce:90:8c:b5:f1:9b:
         62:b8:9e:08:ad:4c:a5:19:89:92:82:d4:3d:da:3a:7c:f1:d2:
         b6:25:e5:26:ca:01:95:14:88:a7:44:8c:5b:aa:d3:f6:e1:30:
         9a:44:42:db:e2:8d:67:f1:c8:5b:5c:80:a5:b0:2b:12:cd:8f:
         38:1f:9d:c3:cf:da:8d:50:14:5f:e2:c2:24:54:9c:74:df:00:
         fd:8b:19:f5:41:e3:8d:5e:e6:cc:82:a3:ca:6e:08:83:42:ca:
         05:d6:8e:93:42:85:1f:f6:f0:4c:41:62:c6:5a:d7:e8:a5:c2:
         89:1a:c3:4f:a3:fd:de:81:79:eb:34:ac:e0:99:71:e2:27:2c:
         9d:21:3e:b9:7d:00:08:52:b0:2d:69:b5:57:49:3e:4f:16:6a:
         a7:d6:1a:aa:4a:31:4b:09:1c:94:37:4e:e3:8b:54:1c:8a:7e:
         f4:ca:c4:a6:69:6f:9c:d3:5a:68:ad:4d:c4:ea:ff:c1:f4:c8:
         40:61:ae:84:9b:d6:95:4d:18:3b:1f:12:aa:12:9f:52:69:9c:
         c3:a6:a8:da:89:18:46:4d:6e:29:00:ed:c7:25:67:60:7f:af:
         32:95:98:87:58:93:4d:e5:f4:18:bc:dc:4a:86:c8:c1:7b:8c:
         40:bc:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:03 2025 by rpki-client