Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          2WQ0J9czxGtxSyIgCS0eP9JxTlC9UKnzTI3KhaXASt8=
Subject key identifier:   10:12:96:BC:0B:77:D6:8D:3F:A3:DC:4A:C5:63:A8:18:A1:2A:FD:E3
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       0197B5C509BDAF92E85DF6CD9C213169E873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          0500
Signing time:             Sat 28 Jun 2025 09:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:17 +0000
Files and hashes:         1: CtRLEvt809yNddQQC3-YdVEz8S0.roa (hash: iOnEw767paDA6G2cUVNf8J3Qp7lK0IUOS20QbdMgtb4=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: /XyXZcNm6Thz1O8AjN/066vzBEnv07sP+XaNUS0CB/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:09:bd:af:92:e8:5d:f6:cd:9c:21:31:69:e8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Jun 28 09:01:17 2025 GMT
            Not After : Jun 29 09:01:17 2025 GMT
        Subject: CN=101296bc0b77d68d3fa3dc4ac563a818a12afde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:13:4f:bc:ce:f8:3a:fd:17:d6:90:ab:59:
                    61:a3:ec:9e:4a:ce:b7:ff:80:e9:a0:b2:af:54:a7:
                    5e:48:78:e3:f3:1f:63:6e:1f:e7:e1:29:26:c8:3e:
                    8b:1a:a7:62:7a:79:3d:83:99:8b:1c:ca:7d:de:53:
                    c2:f4:9a:0a:cc:cb:49:ef:32:e9:c7:7f:94:ba:a8:
                    bd:9b:80:ff:c0:57:d2:7e:56:69:d5:08:be:5d:82:
                    6b:6e:04:de:56:5e:3b:04:3b:d6:cf:ae:29:6f:d9:
                    3c:48:80:e5:cb:4f:64:52:14:3c:19:b7:23:81:2d:
                    74:49:50:f2:98:7d:77:2c:1c:5e:fa:8f:bc:a9:d0:
                    34:d9:7c:4d:81:f2:a1:2a:9e:e7:fb:d0:3d:70:30:
                    1f:43:b0:1a:4e:67:7f:98:e8:4d:7e:2c:ca:76:3a:
                    8a:93:50:18:18:34:f2:23:3c:8a:0f:56:12:74:55:
                    ae:da:9c:11:7f:0a:44:8d:b7:34:48:d1:2e:61:12:
                    9f:ad:d7:41:99:e0:0d:bc:e1:b8:e7:da:33:ce:67:
                    c5:86:97:5f:0d:a1:dc:76:a8:2a:a6:19:5a:13:31:
                    1b:2b:e6:54:6c:5a:18:31:20:ae:01:d2:3f:76:a0:
                    7d:3c:69:47:02:6e:5d:15:4a:24:4f:69:80:01:dd:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:96:BC:0B:77:D6:8D:3F:A3:DC:4A:C5:63:A8:18:A1:2A:FD:E3
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:98:6f:21:4e:0b:15:e2:7e:19:4a:06:24:b8:32:fb:d7:
         35:b3:03:ae:c2:2b:6a:ec:ff:b8:2d:8e:da:95:4f:6d:a5:88:
         c3:38:c6:88:f9:4a:19:87:3c:62:33:d2:85:0a:38:1b:4d:55:
         18:22:75:89:93:71:76:cc:8d:62:94:2e:8d:dd:a3:22:8e:15:
         46:37:50:1e:fa:51:3d:4f:6a:a9:a4:89:db:ed:35:af:2b:82:
         17:77:07:02:42:23:8e:c2:ad:0d:71:69:f3:0a:d6:90:b3:04:
         f6:b3:bf:14:99:e1:4e:f6:5c:f7:01:a4:83:15:2d:98:68:08:
         dd:4d:2d:fd:7c:81:40:dd:f6:fe:a3:9e:01:f6:29:a5:ba:ab:
         87:c4:72:22:9c:76:f5:f9:16:27:85:8e:89:5f:24:38:64:33:
         fe:f4:1e:c7:28:ad:91:bd:6d:ec:06:3f:41:e6:96:d7:b2:4c:
         63:8d:2b:aa:5d:e0:c6:35:69:a7:f1:7c:1f:51:43:01:3d:5f:
         99:59:22:08:ae:eb:fa:5d:0b:f9:8a:4c:50:12:b9:90:d7:60:
         77:23:91:cb:bb:71:6a:37:ad:9e:67:b7:0e:94:1c:7b:a2:f7:
         0e:91:a0:cf:49:15:76:cc:70:45:b9:c7:33:a6:4d:75:df:98:
         44:6f:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:48 2025 by rpki-client