Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          jB9v5lgcjC+LImZ6Mt8GvF/UWJsNjNpRxV535BDoIKA=
Subject key identifier:   36:62:E6:E8:6B:4A:A9:53:D8:BA:F5:EC:04:15:0E:6B:05:1B:71:9E
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       0198D5836405AD0863FFD3F0768F1B66EA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 06:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:14 +0000
Files and hashes:         1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: pR/mSUBlk1Y60h0ipJUthp4bUlvkazjBt4S6/MkKsG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:64:05:ad:08:63:ff:d3:f0:76:8f:1b:66:ea:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Aug 23 06:00:14 2025 GMT
            Not After : Aug 24 06:00:14 2025 GMT
        Subject: CN=3662e6e86b4aa953d8baf5ec04150e6b051b719e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:e4:57:f7:5e:95:ba:a8:ef:bd:e7:d2:a4:
                    9b:f2:31:4b:3b:17:ca:db:e5:3e:54:fa:d3:1b:d3:
                    71:d1:72:cc:9b:64:bf:0c:24:3c:4b:88:32:72:8a:
                    21:02:4e:75:a1:6c:8e:56:55:e1:5a:dc:a6:84:3f:
                    bc:fc:a0:2d:d8:9c:fc:a3:9c:89:2f:f2:d0:83:4a:
                    ee:27:44:97:2c:68:12:1b:1c:81:f3:e8:d1:7c:ed:
                    ad:3d:3d:69:d1:b9:65:cb:8a:83:a9:68:8c:45:32:
                    2e:bb:39:af:5a:ec:d9:38:2e:2b:89:f5:21:df:13:
                    9f:4b:8a:7d:a3:33:a1:3d:aa:8e:43:33:ba:55:fb:
                    d6:35:b7:9e:42:f0:ab:cb:11:16:9e:15:8d:c9:d0:
                    54:b6:0a:54:a6:5d:62:0c:ab:26:9f:c7:7c:ef:27:
                    05:f5:d5:85:cd:54:f6:f3:58:68:44:43:90:fc:c2:
                    7b:9a:13:1c:d2:4f:bd:70:12:7f:ca:92:ef:1c:8b:
                    14:80:a1:d9:0d:0f:45:ec:77:be:f0:f3:22:63:b5:
                    ee:92:f7:d7:2e:21:40:44:04:b1:b5:15:a1:f1:b9:
                    3d:99:be:e6:f5:c1:41:79:fa:58:ff:e3:09:71:c7:
                    75:4d:71:72:a4:67:4b:e6:52:43:11:8d:9a:e7:b5:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:62:E6:E8:6B:4A:A9:53:D8:BA:F5:EC:04:15:0E:6B:05:1B:71:9E
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:91:eb:9c:0c:4a:f4:3b:a3:4d:48:f2:ab:69:47:59:1c:
         b4:00:c2:42:71:a4:0f:b2:63:31:fe:dd:74:c1:cd:28:67:2b:
         c5:b0:31:94:92:d0:06:4b:20:8b:57:66:97:a5:34:24:89:07:
         15:0f:dd:fa:90:c9:bc:d6:12:be:4d:01:01:3b:6d:dd:d2:21:
         6f:72:15:32:e4:58:55:42:04:50:e4:90:b0:04:e0:89:09:7c:
         8e:48:8e:eb:11:3e:72:6b:8e:37:6b:4e:ec:91:37:ab:0f:9d:
         af:e8:6f:fa:71:ed:a1:1a:e6:89:64:59:66:08:8a:b7:87:0e:
         e4:27:1d:b7:89:ad:9d:28:9d:59:89:e4:9a:f9:f4:8b:28:62:
         c9:ef:07:05:66:08:cf:49:a5:39:ef:16:ad:22:89:ab:46:a8:
         d0:24:2b:95:ba:d8:03:76:f3:c9:c3:37:37:f8:a7:09:c9:f3:
         eb:22:26:ed:10:4c:b6:95:a8:4f:8e:f1:89:be:cf:a0:10:18:
         f0:d2:7f:22:a4:43:35:6d:21:47:86:89:63:4a:74:3a:64:1b:
         48:43:19:8e:51:6e:a3:89:62:c0:da:d2:a0:bd:21:b6:a4:e5:
         bb:50:84:2f:df:cc:dc:35:96:10:2a:46:39:9b:6b:d3:f7:1d:
         df:06:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:03 2025 by rpki-client