Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier:          bvEnh7Zwn1RRHH4y14v+lVK9BZdrCZKTjJB3syHsDNQ=
Subject key identifier:   3C:CB:40:38:90:CE:AD:12:4E:C4:31:B3:1A:B6:A6:8A:2A:AF:03:02
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer:       /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial:       0198D66069AFCF27D6D7023D1401631A33EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number:          0C12
Signing time:             Sat 23 Aug 2025 10:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:39 +0000
Files and hashes:         1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: kuHhADf9he1P2YssbpPCbk4wnO/uRWtIN7p42j0+g8s=)
                          2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:69:af:cf:27:d6:d7:02:3d:14:01:63:1a:33:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Validity
            Not Before: Aug 23 10:01:39 2025 GMT
            Not After : Aug 24 10:01:39 2025 GMT
        Subject: CN=3ccb403890cead124ec431b31ab6a68a2aaf0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:8f:db:2d:26:26:c1:80:bc:fa:76:26:95:
                    a6:52:2d:5e:9d:3c:28:44:b8:21:f3:fc:40:a1:35:
                    df:4d:07:a1:48:71:22:df:12:0b:20:a8:d4:14:84:
                    a8:0e:49:f1:63:2f:0a:a9:92:99:f6:62:3b:2e:4f:
                    dc:cf:1d:d4:97:34:10:72:a1:05:d1:7b:fc:48:60:
                    d2:6c:e3:36:04:f1:89:8d:4a:53:79:6a:2b:7c:54:
                    c5:99:8d:4a:60:60:b9:84:f2:64:56:5c:29:27:ba:
                    bf:d2:9e:20:32:ef:13:ac:8b:3d:bd:ff:54:83:5d:
                    79:ac:6c:ae:e1:ba:f6:cd:35:e5:92:56:94:b0:f3:
                    bb:a9:cc:78:0a:b1:f7:78:b8:a9:82:2e:6d:97:2c:
                    07:cf:f9:00:6e:86:dd:20:dc:9f:03:bb:71:3c:ca:
                    e8:e4:42:a6:74:59:cd:03:47:a0:26:62:66:aa:9e:
                    64:27:3d:f6:71:40:9c:0f:2f:40:27:d0:94:dd:5d:
                    2f:e8:62:45:b3:e3:0b:2d:15:bd:cd:9e:31:e5:16:
                    6d:ac:fe:b8:c9:09:46:0c:cf:24:9b:2f:7b:33:40:
                    58:a5:da:d9:b9:6c:fd:bc:b0:3a:29:19:83:0d:cf:
                    7a:b8:d0:fb:1b:b7:af:1d:49:4a:45:c9:6b:84:fa:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:40:38:90:CE:AD:12:4E:C4:31:B3:1A:B6:A6:8A:2A:AF:03:02
            X509v3 Authority Key Identifier:
                keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:97:a3:72:a9:67:81:65:e2:92:4e:cc:a3:80:fd:e5:96:
         9e:3b:75:3e:47:28:92:cf:4a:85:e1:2e:db:42:75:d5:48:86:
         e1:61:27:b1:a0:e2:4c:4a:f8:b1:34:a2:4b:08:56:e9:ee:9c:
         fc:23:7a:df:27:de:cb:ef:2a:63:75:66:06:78:40:c6:37:fa:
         ce:3d:20:ff:b1:c2:95:2a:bd:20:83:01:08:d0:d7:7f:c5:af:
         1f:c0:73:48:6b:69:5e:1e:a3:23:80:74:54:d5:c0:68:57:33:
         b1:57:a3:c4:d7:5e:ef:3e:a8:df:0a:57:3e:b9:30:fa:05:f2:
         18:17:f2:17:c3:82:6a:0a:45:5d:ba:a8:8e:08:95:7c:6d:62:
         21:f1:a8:ce:b0:6e:2e:d1:b0:b3:e0:07:a1:b3:cc:2b:74:18:
         7e:2a:3c:6d:60:43:67:a3:51:26:80:c6:76:e1:ca:6e:5e:bb:
         b7:e0:8b:c3:df:09:8e:1d:e0:f0:cd:ef:d4:bd:0f:c6:89:f7:
         c5:41:94:bb:c4:19:3d:6c:44:12:04:65:18:7f:7b:73:4d:9f:
         70:e1:1b:89:c4:eb:de:f6:d1:36:67:f7:6b:9a:49:11:4e:66:
         38:ec:22:49:09:ee:59:df:a4:1f:c7:88:2c:18:97:a4:29:f7:
         7f:47:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:30 2025 by rpki-client