Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          dyVLy6452Ifuhs7/x1coApO/XB8zF1NZz+UlJYaQEqQ=
Subject key identifier:   36:A4:6A:D4:79:C2:2E:D2:90:7F:4C:1A:65:D7:D4:D0:F8:E7:1C:25
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       0198D65F4A40E5628D6B55D4C0D8A776C82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          03DA
Signing time:             Sat 23 Aug 2025 10:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:25 +0000
Files and hashes:         1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
                          2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
                          3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
                          4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: MM+d4+VR7fkqU1LbEHEFA02QDSpEWZJwE2jAdGXP8So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:4a:40:e5:62:8d:6b:55:d4:c0:d8:a7:76:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Aug 23 10:00:25 2025 GMT
            Not After : Aug 24 10:00:25 2025 GMT
        Subject: CN=36a46ad479c22ed2907f4c1a65d7d4d0f8e71c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:77:d2:22:7a:22:70:3d:0a:31:7a:fd:db:
                    4f:86:c4:81:77:a3:ab:29:03:d0:01:16:ba:63:75:
                    b0:d5:9d:ff:da:82:db:10:31:eb:a8:8b:4f:c1:f9:
                    52:ca:7b:a6:57:4a:9d:a9:13:06:9f:2b:dc:b0:93:
                    1f:a9:d8:22:63:0b:c4:79:ad:1a:3b:ee:99:57:4f:
                    0d:2c:fb:30:21:e9:de:bd:a5:6c:70:46:1c:0e:7c:
                    c8:90:55:a7:98:2c:aa:a0:6c:42:af:29:a4:d3:89:
                    98:60:2f:34:ab:94:cc:06:af:6c:e1:82:d1:7d:17:
                    3e:f9:70:88:a0:77:43:ed:60:68:1f:ad:60:bc:39:
                    0e:61:81:d3:17:fc:e1:c9:b8:0e:e2:c3:10:75:bf:
                    d8:45:2b:fd:da:90:37:dc:7b:48:89:ae:e4:31:da:
                    30:bb:85:ee:88:0d:bd:a6:f0:9f:83:b9:9a:6b:1c:
                    13:e1:98:56:0c:74:00:1d:f5:9b:db:78:3e:c1:aa:
                    e0:b7:5c:7a:04:04:3c:92:0e:6e:d5:11:c3:ee:54:
                    06:c7:5f:76:5a:c8:48:f3:de:04:6a:e3:f6:8a:fd:
                    46:50:7e:52:34:de:3f:3e:df:96:71:bc:b7:6e:f8:
                    9b:47:7e:ee:f2:c7:ae:07:94:98:a5:02:23:ef:62:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:6A:D4:79:C2:2E:D2:90:7F:4C:1A:65:D7:D4:D0:F8:E7:1C:25
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:79:74:28:3e:6f:1b:85:a6:41:0f:c2:ed:34:85:cb:9b:
         0d:10:d1:6c:3d:f8:bd:b4:9b:c6:68:3f:da:1c:8d:83:af:64:
         39:6c:ba:eb:9a:e2:26:f2:9b:1b:b6:0c:35:fa:55:c7:f2:22:
         c4:71:79:4e:3e:fe:a9:c5:bf:2d:a3:d0:9f:97:5d:39:bb:b8:
         c1:9c:6d:89:1d:53:8e:1c:fe:bc:de:50:35:78:18:a1:1b:07:
         7e:5d:32:4f:dd:49:3c:2d:d4:fe:c2:6e:59:68:96:0e:c2:09:
         cb:62:33:6f:12:26:ac:56:29:7a:4d:db:20:4d:5d:ab:3a:9d:
         f6:a0:92:54:b5:73:b0:9b:1d:5e:74:55:f6:18:6d:ad:b1:85:
         63:ab:18:c6:f8:86:07:e1:e2:21:83:5c:6d:06:a0:c1:6a:e5:
         3e:59:fc:c5:94:ed:5a:42:0d:85:bd:ec:96:6f:5b:b3:6e:a4:
         3c:b0:4c:e9:82:21:50:3d:df:95:54:b5:a5:1a:b6:4b:cd:b6:
         6a:ff:f5:f5:b8:06:68:3f:63:5a:3e:50:07:b4:6f:49:44:df:
         15:37:b9:4b:d5:39:f2:aa:cc:b1:a6:50:ba:b3:b2:4d:86:af:
         c3:cc:3a:b2:3a:27:fd:af:23:9e:ad:51:28:b4:9b:98:93:06:
         b0:ee:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:18 2025 by rpki-client