Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          AK7Jc8qUAbh69a7jcanN12dIzmBMtIhgKXRLNyh6qXI=
Subject key identifier:   1E:92:C4:99:26:F2:6C:50:37:C6:61:5A:40:06:9C:DE:76:CA:E8:5C
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       0197CC83BF57A527C12BD2FC844EBBC50B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          0198
Signing time:             Wed 02 Jul 2025 19:01:15 +0000
Manifest this update:     Wed 02 Jul 2025 19:01:15 +0000
Manifest next update:     Thu 03 Jul 2025 19:01:15 +0000
Files and hashes:         1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=)
                          2: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          3: LzqGXQnC-qnRKkQW8ZtzaQ68Swo.roa (hash: oeald+VPB6DzmQgP1eDlCAW2zHveX5ZnMDE5xwR1Bxk=)
                          4: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=)
                          5: W_QbYX9ZTefRSwKnL72ps23YkbU.roa (hash: O+yO4y0kWUxUwS+WjWuH503NMuQYxW5RzvY5stzKpfg=)
                          6: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: S4+uOYcfsK0x3SJEUVTF927KBRjOgIe1aLy+85ElU34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:83:bf:57:a5:27:c1:2b:d2:fc:84:4e:bb:c5:0b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Jul  2 19:01:15 2025 GMT
            Not After : Jul  3 19:01:15 2025 GMT
        Subject: CN=1e92c49926f26c5037c6615a40069cde76cae85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:b3:2b:db:d3:1a:46:c1:b6:da:fe:7c:f6:
                    1d:01:97:c3:63:00:29:78:d3:e3:3d:06:5d:92:d9:
                    0e:e0:aa:ce:8e:16:c1:e2:5f:2f:f0:6e:67:1b:b8:
                    f4:bc:6d:6a:4c:f8:a1:5e:ea:d4:31:0a:20:97:60:
                    80:5f:73:ed:93:fb:dd:a9:1f:e0:b3:ca:06:3c:b5:
                    4f:58:4a:7b:13:2e:12:1e:77:13:06:3b:8f:b7:0f:
                    6e:e0:1d:07:36:fb:f6:af:b7:30:b0:87:39:e9:37:
                    2a:53:a7:a9:7c:7e:74:1b:09:72:32:b1:9a:81:73:
                    6d:9c:ce:21:5e:a0:33:fe:de:d6:2a:10:d9:60:58:
                    be:63:c3:52:cf:37:6e:26:21:95:6f:6c:01:40:d5:
                    cd:6e:fb:fe:54:6d:bb:24:25:da:a5:fa:0f:73:36:
                    b3:6a:6a:47:00:39:37:dd:dd:61:20:d9:c7:59:16:
                    94:f2:0f:8b:5d:6e:c9:b0:aa:85:b3:bc:cb:72:d5:
                    35:fb:1b:37:21:75:da:74:cd:56:c4:61:c3:c8:7f:
                    2a:ec:a8:b7:4e:af:fa:fa:1f:51:f6:02:3e:ef:f7:
                    8c:e8:81:2f:88:ef:75:32:81:4c:44:19:1f:75:91:
                    f0:04:67:21:bc:bf:84:b1:48:2b:1e:4f:eb:92:b1:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:92:C4:99:26:F2:6C:50:37:C6:61:5A:40:06:9C:DE:76:CA:E8:5C
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:8d:02:33:aa:b8:bd:88:88:ad:b4:2f:80:5d:68:09:72:
         6e:cc:11:5a:dd:02:15:6d:cf:d4:fd:66:6b:18:1c:21:40:01:
         d2:51:48:05:41:3f:d1:f5:50:4e:69:e4:65:b9:64:e0:c0:72:
         e8:ea:b5:a0:32:3d:d3:cd:df:c5:94:9d:d5:06:1d:88:46:4a:
         b9:fb:5c:6e:db:6f:8d:aa:34:a5:b3:59:2f:dc:a0:8d:d6:83:
         0c:88:d0:44:2a:88:ed:76:b2:74:96:8f:50:96:80:34:73:12:
         3e:0a:f8:c0:73:1f:a1:37:41:bb:64:fc:6f:97:c5:ea:fe:37:
         f7:5b:46:57:c6:3e:54:53:37:d2:1b:bd:0f:c8:c9:b3:a0:3a:
         7e:b9:bd:3f:b6:63:61:3e:9d:b9:d9:3d:ef:67:ab:c4:09:e8:
         28:30:09:ae:79:0e:7b:59:0e:23:31:6e:53:cb:6b:05:87:ea:
         5b:a8:b8:b3:dc:5c:ac:31:a3:a9:ac:27:af:90:5d:55:3a:c3:
         f0:ab:79:19:d0:91:b4:d8:b5:35:eb:31:a8:4d:a7:53:f6:93:
         35:dc:f1:97:f5:66:fa:36:67:f7:85:d1:dc:80:25:24:9e:4b:
         63:5c:de:d1:56:6f:82:0d:7d:4b:f9:d3:c6:12:88:95:34:ed:
         51:48:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:05:10 2025 by rpki-client