Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File:                     uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier:          ELoW7zAHRYpAsivYuTT2Ih3OqGTm2q2zJJx/jEEPb2A=
Subject key identifier:   BF:41:27:73:EF:FB:92:AD:D9:CE:CB:4D:6B:F6:22:70:44:B1:7B:E3
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer:       /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial:       0198D5BBAE2CD19842A2FE1D3B45FE55BD95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number:          142C
Signing time:             Sat 23 Aug 2025 07:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:43 +0000
Files and hashes:         1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: GDKl0iBnvXZLwgfB0xY4reBINXv0m8ccCkohi6xcwy0=)
                          2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ae:2c:d1:98:42:a2:fe:1d:3b:45:fe:55:bd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
        Validity
            Not Before: Aug 23 07:01:43 2025 GMT
            Not After : Aug 24 07:01:43 2025 GMT
        Subject: CN=bf412773effb92add9cecb4d6bf6227044b17be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:1f:d0:62:b5:e6:94:79:ce:15:c4:a4:c9:
                    c6:62:54:3c:b8:88:49:f4:e7:b3:4f:a6:24:b3:1c:
                    57:35:eb:7e:33:37:c7:7b:86:cb:87:a4:e2:15:7e:
                    2c:fb:10:20:8f:fc:72:7f:59:d3:34:cb:09:98:62:
                    49:8f:b0:bf:d4:20:92:8e:7a:f4:f2:f5:72:bd:18:
                    5a:04:90:1e:0b:e6:3c:5b:53:72:5f:27:ad:f0:43:
                    2f:fd:c7:fe:eb:eb:66:ef:2a:b9:28:51:bd:32:0a:
                    0a:c4:17:c7:12:9d:4c:e6:18:ff:b3:da:b0:e6:63:
                    d0:92:85:cf:d4:84:e6:25:be:80:47:c2:90:74:70:
                    27:d4:4c:a9:38:96:a4:e3:07:67:4d:50:50:86:1e:
                    a7:0a:da:6c:a4:5e:be:49:80:8b:82:b3:5a:f3:3a:
                    ff:eb:dc:72:11:dd:a9:4f:a1:9a:14:39:a1:e8:62:
                    10:21:f3:72:fb:59:31:97:14:d4:fb:bf:4b:34:8d:
                    10:78:49:c3:88:a4:ae:0d:25:28:a8:36:15:b6:9f:
                    42:12:09:17:b5:d3:f9:e7:61:78:5c:e2:21:ed:65:
                    83:16:60:c3:91:da:6b:76:1e:6b:c7:a7:e3:65:99:
                    11:05:ce:20:38:29:be:c5:a8:4c:93:88:10:d6:89:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:41:27:73:EF:FB:92:AD:D9:CE:CB:4D:6B:F6:22:70:44:B1:7B:E3
            X509v3 Authority Key Identifier:
                keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:dd:be:a8:4a:6e:f3:f7:9b:a0:8f:4f:f3:9c:77:ca:61:
         a4:b4:17:f3:cd:d6:4f:f7:c8:c9:7a:ff:3b:8f:14:76:dd:9c:
         ac:60:4c:e3:1f:4d:35:b2:a7:6f:75:14:ca:ef:27:49:0b:3e:
         ae:ec:0e:7e:bc:8d:29:1d:b4:f0:59:68:99:30:62:1c:ea:36:
         6f:79:d3:a0:ac:56:0f:09:da:66:ce:50:40:48:09:42:24:c4:
         93:15:4a:a5:e8:5f:cb:79:be:06:43:18:97:cc:a3:c7:cd:87:
         84:63:7a:02:b4:49:0f:ce:dc:c4:94:93:5e:33:fc:f0:e0:fa:
         95:c4:50:65:30:93:ae:c4:31:dc:58:dc:03:9b:34:73:16:e7:
         41:28:3e:2e:08:09:51:d1:6b:54:ee:37:ca:d6:92:72:c7:4e:
         01:1c:e0:a6:24:df:a6:7c:be:95:62:72:5d:53:77:46:79:39:
         3b:80:d5:22:b0:e1:e3:bd:5a:6e:db:8a:cd:a3:87:c6:58:2c:
         59:1f:08:39:de:a5:19:92:ec:67:d4:f0:7f:6b:4a:48:53:30:
         9c:2e:da:4c:1b:d5:8e:ca:b4:38:af:8b:f5:f1:4f:5f:4c:40:
         7e:4c:18:77:94:52:70:46:4d:77:92:ef:4d:1b:1b:35:9b:5f:
         f3:ea:dd:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu64s0ZhCov4dO0X+Vb2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWEwMWFiMzUyNmI4ZWJiOGFmYjE3Yjk4YTcxMjdmMGY1
NGNhNDUwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
EyhiZjQxMjc3M2VmZmI5MmFkZDljZWNiNGQ2YmY2MjI3MDQ0YjE3YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEAf0GK15pR5zhXEpMnGYlQ8uIhJ
9OezT6YksxxXNet+MzfHe4bLh6TiFX4s+xAgj/xyf1nTNMsJmGJJj7C/1CCSjnr0
8vVyvRhaBJAeC+Y8W1NyXyet8EMv/cf+6+tm7yq5KFG9MgoKxBfHEp1M5hj/s9qw
5mPQkoXP1ITmJb6AR8KQdHAn1EypOJak4wdnTVBQhh6nCtpspF6+SYCLgrNa8zr/
69xyEd2pT6GaFDmh6GIQIfNy+1kxlxTU+79LNI0QeEnDiKSuDSUoqDYVtp9CEgkX
tdP552F4XOIh7WWDFmDDkdprdh5rx6fjZZkRBc4gOCm+xahMk4gQ1olsGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9BJ3Pv+5Kt2c7LTWv2InBEsXvjMB8GA1UdIwQY
MBaAFLmqAas1JrjruK+xe5inEn8PVMpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEt
NWE3YmZiM2NkMDhiLzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEtNWE3YmZiM2NkMDhi
LzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0HdvqhK
bvP3m6CPT/Ocd8phpLQX883WT/fIyXr/O48Udt2crGBM4x9NNbKnb3UUyu8nSQs+
ruwOfryNKR208FlomTBiHOo2b3nToKxWDwnaZs5QQEgJQiTEkxVKpehfy3m+BkMY
l8yjx82HhGN6ArRJD87cxJSTXjP88OD6lcRQZTCTrsQx3FjcA5s0cxbnQSg+LggJ
UdFrVO43ytaScsdOARzgpiTfpny+lWJyXVN3Rnk5O4DVIrDh471abtuKzaOHxlgs
WR8IOd6lGZLsZ9Twf2tKSFMwnC7aTBvVjsq0OK+L9fFPX0xAfkwYd5RScEZNd5Lv
TRsbNZtf8+rdDA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:07 2025 by rpki-client