Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          K4Jr33A1BrBZBPbOzqb11ICo885SiPIqqkZ1kFxGNTQ=
Subject key identifier:   64:56:2A:9E:9B:FB:97:93:69:E0:49:B6:9C:72:47:01:75:74:76:A0
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       0198D47406368F9016DD5EC4298397189E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          0CE4
Signing time:             Sat 23 Aug 2025 01:03:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:50 +0000
Files and hashes:         1: 4TbrBuZsL88VAAl1QCLmAWghqCg.roa (hash: iopY3SVCE/nuv4+imI+6O+SS27RRrP9dzDqH0wZ+omg=)
                          2: FKQuu6Kj3XuAbhD_hkdmiIg9ru0.roa (hash: BfDYVCCLX0UZgPY+reA/hpbk3+E5qzw6fvZYP021pLk=)
                          3: TBdRYI4Vp-3SsMereWjuJuGMK6c.roa (hash: bWYcU1CjUZXhUk+i248J8pYxf7A24hSe76RbYqPhQc4=)
                          4: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: GjAfyce8Il8lRhwoOdpaP16dnDz0w1qKmfnGlyMSfSQ=)
                          5: V_fCtcHRcIvlGMfQMllvvNseZ5s.roa (hash: pcOqzRDVwxnAc2XcbL2lzklSAVLcGx3z65HCfsZTOqA=)
                          6: XZBUdypJdRsW9C7-bbCqwM2XeyY.roa (hash: Sw9HTQQH5rOvV845qg6T2/HMx+a+lVBlr9o8rtw6bfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:06:36:8f:90:16:dd:5e:c4:29:83:97:18:9e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Aug 23 01:03:50 2025 GMT
            Not After : Aug 24 01:03:50 2025 GMT
        Subject: CN=64562a9e9bfb979369e049b69c724701757476a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:d2:a2:c1:70:a5:0a:92:ac:31:98:15:72:
                    09:f7:e8:01:22:1e:82:11:45:70:b2:c3:30:a6:98:
                    95:e8:5d:07:ea:b4:a7:77:f1:61:5a:b5:62:f0:31:
                    b5:ed:fa:25:78:db:21:7e:4e:a4:59:67:05:8b:22:
                    b6:70:36:34:3c:da:18:fa:0b:df:f9:ae:49:04:c4:
                    2f:b5:8b:7c:63:e2:52:c1:4d:08:fc:b5:9f:60:82:
                    80:71:a8:43:39:e1:c1:37:cd:ab:ca:20:9a:2a:55:
                    e2:fc:40:68:c5:c0:31:2a:2f:23:01:94:df:91:3b:
                    2f:dd:2d:21:e9:58:b9:d1:e4:86:e2:51:87:2a:5a:
                    26:e5:32:3d:4c:bc:ee:37:22:7b:a0:aa:27:a0:62:
                    c7:64:9c:e8:e7:b6:7f:a5:22:a4:4c:62:3f:ed:f2:
                    fd:9c:34:f6:ed:77:a7:58:19:cf:0d:00:b0:29:91:
                    75:70:7d:a8:a6:72:d7:69:97:fa:f6:f1:6c:19:a8:
                    ca:a0:8e:0a:03:97:86:ec:67:fc:94:eb:6c:49:d7:
                    c0:84:34:8a:cb:37:16:83:90:de:ff:d8:ce:73:b0:
                    90:02:b5:b4:d0:20:bd:ee:cb:77:ad:8a:2c:10:38:
                    d5:90:d7:25:5f:e6:5f:0b:22:87:55:3a:7f:6a:bf:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:2A:9E:9B:FB:97:93:69:E0:49:B6:9C:72:47:01:75:74:76:A0
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:fc:dd:ce:af:36:58:a6:a5:02:b9:81:f8:26:96:13:7d:
         03:58:b7:ff:d1:a2:ad:84:93:6d:c7:49:f1:71:e8:87:db:c1:
         5d:08:b4:c3:d6:7e:56:d2:f1:02:f9:c1:8b:bf:c9:96:4f:86:
         c0:31:8c:38:9b:4f:35:f5:ae:d3:d7:24:66:be:9c:b5:e2:e7:
         5c:54:3c:f3:3e:e8:ba:6b:98:90:c5:fe:e5:72:29:93:5a:03:
         28:a3:5f:44:92:85:f0:76:92:09:49:98:14:fb:3f:73:4e:e4:
         49:f1:23:e5:6e:63:92:bb:c2:c8:72:6f:ee:e8:99:d3:1c:f6:
         fc:d7:14:45:6a:3a:dd:4e:8e:69:71:5a:2f:cc:19:fd:78:bf:
         c8:b8:46:f7:f6:23:51:ce:6c:a8:78:a4:50:8f:a1:03:b9:4c:
         4f:e7:3a:78:51:c9:41:d1:71:8e:2b:4e:48:b9:37:50:5d:7d:
         00:c8:ce:bf:6b:f5:75:4f:b1:e0:e2:22:cc:88:66:43:8c:69:
         2a:d9:03:0f:da:7e:9a:4c:d6:54:58:18:6a:eb:07:97:70:0a:
         09:84:9b:61:75:9a:df:25:51:7f:80:25:9c:be:58:ff:ae:b1:
         65:c6:82:d0:75:8c:b4:1c:59:86:4e:c5:d9:02:32:0d:5c:94:
         8d:ae:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:44 2025 by rpki-client