Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          DfJ2ib4VxskARFohpOcCc8KtTLDba0QgT15O6AVfa/w=
Subject key identifier:   38:BF:A3:BC:7A:04:AB:96:EA:F3:3D:85:5D:F4:82:F2:CC:49:27:63
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       0198D54EB823F5B5EEB632139F46A7DD0EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:42 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:42 +0000
Files and hashes:         1: AZwj0Iuykway_WQBa3ENsQ_JxtA.roa (hash: Q7rNa7RTxQcsrsOIx/wgjhqBI7OG9HoBnLFXa7zfZYE=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: A89i0ubOLI6NWxrOP94fkyR1fQllxoA9QIctvCPALeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:b8:23:f5:b5:ee:b6:32:13:9f:46:a7:dd:0e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Aug 23 05:02:42 2025 GMT
            Not After : Aug 24 05:02:42 2025 GMT
        Subject: CN=38bfa3bc7a04ab96eaf33d855df482f2cc492763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:11:c9:1a:60:49:80:d2:1b:36:30:0c:9f:
                    95:2e:12:80:61:42:c2:15:ed:30:42:c6:63:60:8d:
                    3b:2f:77:84:29:d6:1e:0c:40:55:33:f2:38:47:77:
                    49:cb:20:f6:5d:67:85:ff:b1:7c:78:72:7a:23:80:
                    14:b2:f5:a4:84:d1:76:ad:91:1e:a5:b2:3e:9c:57:
                    99:24:d9:8e:fd:d8:70:fd:7d:d8:05:08:b5:77:0b:
                    7a:0a:8e:fb:ef:f4:5c:f8:95:ef:21:02:52:a4:31:
                    85:d9:52:c9:5b:6f:f9:d8:ab:94:63:d7:8b:f2:0a:
                    ee:0b:ff:7c:06:83:53:0d:b9:2e:e4:a1:6b:23:b4:
                    72:4b:5b:d1:0a:30:20:0e:49:4f:90:2c:a0:6b:4c:
                    09:5b:76:60:7a:02:98:90:e0:1f:9a:ac:ed:c4:3a:
                    13:c4:d0:60:95:25:1d:94:83:a4:14:15:e9:6f:2f:
                    1e:03:ac:ea:1b:2d:22:14:78:4f:57:f8:61:fe:07:
                    25:45:2e:de:06:34:12:c6:b0:47:52:ea:5e:39:47:
                    1c:ab:fa:72:0c:6e:46:c8:3e:87:a8:5f:b5:af:f9:
                    91:2d:08:d6:4f:aa:e3:9f:25:84:7e:d5:30:28:4a:
                    99:d9:6b:c4:d1:24:92:09:71:98:54:5f:40:05:27:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:A3:BC:7A:04:AB:96:EA:F3:3D:85:5D:F4:82:F2:CC:49:27:63
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:69:ac:10:54:a1:4a:30:bf:1d:50:f8:12:60:c3:88:53:
         8c:e1:38:d3:16:c7:c4:d1:8d:05:19:55:27:d8:28:c6:34:71:
         da:b5:d3:3e:f9:32:f1:fd:a7:57:62:9f:8e:27:9d:83:1b:51:
         5c:69:ad:98:87:21:61:8e:c7:fb:5a:e1:6e:e8:5c:1a:30:a3:
         da:a4:d4:3b:a6:db:73:f7:5d:90:24:22:f7:20:dc:18:61:de:
         0f:d3:39:f0:a0:5b:6b:c9:43:48:df:00:a5:3b:f6:3d:24:94:
         bc:e4:c2:20:01:28:bd:f1:da:a2:ea:69:22:4a:e0:1f:19:0d:
         7a:f9:cf:5c:be:a4:f3:49:ce:1f:57:5f:40:46:0f:da:d6:fa:
         ce:2c:06:b0:17:b5:ed:0a:ae:05:35:01:05:40:84:dd:35:5e:
         3b:ea:f6:1c:96:3f:e9:dc:87:15:d9:d8:ed:08:d7:e9:5f:bf:
         97:06:a6:79:47:b1:25:67:32:8e:73:30:fc:c7:c1:e4:67:87:
         26:8f:fa:01:9e:66:6a:e5:5b:aa:3b:53:fc:2d:1c:6e:bf:48:
         f1:6e:d3:7d:a3:40:5e:fa:de:42:02:d9:4f:a3:2e:c3:3b:f2:
         87:d2:2f:42:91:75:99:68:09:be:15:89:20:07:c6:1e:18:14:
         02:fa:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:54 2025 by rpki-client