Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          0sw3TAtRO8a7TapebyCLPf4BEi412zVUYQZ2kkf+eOY=
Subject key identifier:   DC:D8:14:E2:62:E8:62:8F:DF:88:16:5B:CB:55:07:6E:4F:B0:03:D3
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       0198D4E0C5FA38FC35E9CB0D21B213920EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 03:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:37 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: JtfQdKH0am5ocVvfsJ49HtTnsb9QGmO//66Zk2polEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:c5:fa:38:fc:35:e9:cb:0d:21:b2:13:92:0e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Aug 23 03:02:37 2025 GMT
            Not After : Aug 24 03:02:37 2025 GMT
        Subject: CN=dcd814e262e8628fdf88165bcb55076e4fb003d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:53:bb:42:0b:3c:43:05:1f:a7:8c:04:42:
                    4e:1d:5a:99:8a:bc:ed:7f:c9:42:87:11:18:bc:99:
                    92:26:c3:99:f5:90:5c:3f:d7:12:47:12:d5:a7:43:
                    bd:f2:21:b4:e1:2d:20:53:af:a7:aa:3d:4f:cd:8d:
                    5e:d2:39:a8:a0:57:e9:68:f8:53:2c:8f:59:39:b0:
                    38:06:1a:8d:dd:81:95:b7:76:0d:21:dd:59:24:b9:
                    3e:b7:72:c2:ae:f8:9d:ed:d3:93:0f:7f:e9:41:0d:
                    99:39:af:41:0d:ee:1d:2f:c0:21:c5:9d:b3:c3:f0:
                    a2:38:f3:4c:ce:1e:bc:3b:aa:97:bf:5a:d5:94:32:
                    f9:a1:1c:52:1b:a9:ab:42:d0:84:de:5a:2b:9a:b7:
                    fd:29:57:20:ee:ef:0b:ab:d9:2c:17:de:02:aa:3f:
                    4a:39:e2:da:b6:01:22:89:27:df:4b:60:c4:29:c1:
                    9b:05:9a:11:4a:67:6a:78:bb:7b:40:cd:c8:2b:c2:
                    f7:20:5d:35:ce:3d:a9:a4:bb:6b:84:6b:8a:4e:f0:
                    45:9f:ab:7c:ca:54:0b:e3:ab:96:12:a7:4f:d4:19:
                    2a:26:e5:95:ce:18:2c:6d:da:9e:01:8f:24:91:93:
                    ce:76:41:a9:60:65:cd:18:7d:3e:8e:06:12:09:a0:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:14:E2:62:E8:62:8F:DF:88:16:5B:CB:55:07:6E:4F:B0:03:D3
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:81:25:98:ac:ea:b3:dc:46:55:94:e6:db:04:09:b5:c7:16:
         09:40:aa:cd:61:e7:f4:d0:e0:5c:b0:7c:dc:48:5f:94:3d:74:
         ef:cc:76:07:11:4d:41:f5:80:ec:3f:64:c3:00:3b:d8:92:f4:
         54:eb:70:99:d9:9a:44:c7:31:ce:ec:32:56:ca:ae:bd:44:ea:
         09:31:6a:1b:83:96:38:05:1d:8a:d0:87:53:f7:5f:66:ac:bd:
         38:33:97:43:bb:1f:72:be:7f:a7:c1:79:d1:60:ee:fe:c1:66:
         65:50:a0:52:8d:4a:5c:da:10:9c:4b:71:60:45:9f:c9:d2:0f:
         52:89:74:b9:4c:0a:52:e0:53:5a:f5:b6:52:7a:ea:32:e7:27:
         d5:09:5c:29:3d:4b:ad:6f:bd:fd:e6:14:63:ee:89:8b:f2:38:
         d8:31:f0:68:01:19:73:87:97:1b:9f:64:7c:d9:91:f1:09:f4:
         51:53:ce:a8:c0:24:d7:0d:6d:40:d3:61:07:ef:2a:fe:be:b7:
         73:79:0b:b6:72:df:67:01:18:29:12:dc:72:dc:ca:06:c3:dd:
         ae:44:5b:51:8e:9e:86:89:01:23:00:7c:2b:40:03:15:63:6d:
         76:96:2c:b9:2e:b1:fc:2a:62:1c:8c:b3:df:60:5d:05:43:e5:
         8b:b7:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:49 2025 by rpki-client