Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File:                     UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier:          ZkVo9N8OzkRqFjKKEYQVUQUK0jON7ilCG64jJ03npco=
Subject key identifier:   45:DA:B0:F2:52:B5:E5:93:1C:14:21:24:13:BB:73:99:C1:32:92:BD
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer:       /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial:       0198D4729E80BBC5F7A6C50DDB0E6447F746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number:          0A56
Signing time:             Sat 23 Aug 2025 01:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:18 +0000
Files and hashes:         1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
                          2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: pox0dgu7YMAwfYIVEOvn46ir2esvkk5Hujv4dmPphHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:9e:80:bb:c5:f7:a6:c5:0d:db:0e:64:47:f7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
        Validity
            Not Before: Aug 23 01:02:18 2025 GMT
            Not After : Aug 24 01:02:18 2025 GMT
        Subject: CN=45dab0f252b5e5931c14212413bb7399c13292bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:2c:d9:3b:cf:a6:6b:75:55:b1:05:a3:52:
                    3a:5f:fd:f9:48:4b:f4:52:75:5b:67:9e:2c:b8:66:
                    ee:bf:8c:d2:9c:2e:50:ba:b3:18:2c:c6:0d:b0:c5:
                    b3:af:b9:cd:ac:44:75:55:47:66:fc:0a:c1:fe:91:
                    5b:b3:85:be:80:91:ed:48:91:3a:9e:f9:64:bf:08:
                    65:b7:37:40:04:36:d5:c6:c0:45:c6:bd:37:bf:24:
                    1f:7a:c9:a9:17:22:1a:dd:34:c6:6e:03:b7:c4:cd:
                    3a:fb:51:40:ba:59:8e:75:87:2f:6c:9a:6c:70:85:
                    6b:ec:b2:49:22:39:d5:ce:51:d9:00:50:ab:25:b4:
                    71:86:33:ea:9e:0d:90:7a:e4:2e:25:2e:53:93:c1:
                    af:e7:81:50:e2:79:3f:18:1e:48:7b:db:dc:d3:75:
                    32:39:33:b0:09:4a:74:62:96:22:de:63:91:77:60:
                    9b:ee:bb:c5:76:eb:e6:8b:77:d6:3a:3b:e9:38:34:
                    6b:3c:51:83:ca:6a:53:f8:0a:ee:73:75:2a:84:41:
                    42:e5:51:a8:96:97:83:c8:4f:46:72:15:4c:9c:87:
                    3f:30:47:9c:9a:14:bc:9d:85:41:00:87:a5:18:4b:
                    03:e1:35:91:db:1f:57:69:6c:b0:cc:c0:ae:49:8f:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:B0:F2:52:B5:E5:93:1C:14:21:24:13:BB:73:99:C1:32:92:BD
            X509v3 Authority Key Identifier:
                keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fa:a1:2c:59:e0:94:58:67:43:e8:81:1a:c7:d0:db:3f:ea:
         5d:fe:31:1c:0d:f5:e7:33:cc:a1:5a:ed:98:e9:8d:ab:ac:e3:
         97:18:08:b0:8e:2e:a1:6f:7a:b4:27:30:56:1a:98:8e:c4:ea:
         e7:be:e5:98:ff:a5:3d:9e:91:1f:9e:51:da:26:cd:13:3f:9a:
         3c:eb:82:a4:63:b4:6c:40:91:9e:6a:6e:d1:38:6a:eb:1b:b9:
         39:3f:10:96:89:89:81:6d:78:e1:d8:ec:db:52:46:c3:b1:61:
         9f:ea:9f:cc:67:3c:84:a5:ac:20:57:da:4c:a7:14:83:d8:f2:
         36:17:d0:5a:4d:b4:58:d5:70:a7:48:93:8f:fe:f2:10:9f:66:
         2c:14:33:b6:fa:95:6b:5a:68:54:2c:22:62:d7:c2:0d:e4:c1:
         ce:0f:bf:4b:e8:44:cf:ad:b6:a3:5d:fd:9d:73:80:7d:ba:52:
         28:4a:f4:62:c4:83:8f:48:cd:e3:72:50:d7:9e:78:a1:66:56:
         a4:34:ea:d6:56:f6:84:bb:7f:a8:3c:1e:d2:31:b6:5d:50:d5:
         8e:70:fa:e1:30:7b:ba:87:ff:f1:0e:c6:b9:fd:e9:e6:1c:c4:
         82:e3:ae:fa:e8:7c:25:7a:b0:f6:13:57:5d:fe:8e:97:82:41:
         e1:e4:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:12 2025 by rpki-client