Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File:                     uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier:          wRRtOXTCrkttmfp7hX98YMCstNP+G3NdqWrE7I/K4OQ=
Subject key identifier:   62:2D:0C:DB:3A:69:41:32:1F:E7:8B:95:59:FB:2F:3E:26:46:AC:89
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer:       /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial:       0197CEDFA10077010727B5064525080BE3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number:          F5
Signing time:             Thu 03 Jul 2025 06:00:51 +0000
Manifest this update:     Thu 03 Jul 2025 06:00:51 +0000
Manifest next update:     Fri 04 Jul 2025 06:00:51 +0000
Files and hashes:         1: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: nhTyOao68g+6IPCZ54RPJNO0ZsOxGXXLYoGPV5PrEP4=)
                          2: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (hash: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:df:a1:00:77:01:07:27:b5:06:45:25:08:0b:e3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
        Validity
            Not Before: Jul  3 06:00:51 2025 GMT
            Not After : Jul  4 06:00:51 2025 GMT
        Subject: CN=622d0cdb3a6941321fe78b9559fb2f3e2646ac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:ef:69:1a:6f:dc:e4:61:3a:30:8d:05:49:
                    c8:a0:16:1a:35:51:89:a7:f3:1e:19:40:cc:5d:a4:
                    2f:87:eb:0d:de:65:e8:bd:46:91:a6:a4:48:a1:d5:
                    c1:0d:b5:1a:73:2d:a6:df:91:b0:2c:89:00:fc:4c:
                    e2:4e:f0:96:f5:f4:7c:04:b7:7a:78:20:4d:68:1e:
                    a8:15:b4:1a:b4:d7:75:20:02:1d:c8:f5:65:6e:5c:
                    b9:00:78:8e:0f:57:4e:17:ff:97:eb:b4:d0:68:4a:
                    b9:7c:35:3b:fd:ed:30:03:34:4e:96:29:55:fe:a9:
                    b2:0b:bb:aa:d0:47:52:8e:fd:5c:78:56:e7:3a:30:
                    88:2c:5a:18:ba:b7:2a:f9:f9:2c:f3:56:b7:9d:f9:
                    a0:f9:37:41:35:41:03:51:3d:c6:10:d9:a3:1e:8c:
                    69:e6:b6:80:4a:7e:8c:ce:8d:fc:a2:d0:76:5f:9c:
                    28:85:d6:c4:5d:55:2f:82:da:76:2a:e8:c9:d1:31:
                    8a:6f:5b:f4:40:24:e9:77:bb:41:23:90:28:a9:5f:
                    ee:94:06:f7:f1:92:94:1f:ec:03:d5:31:62:15:7d:
                    29:36:ac:69:f3:31:85:3e:98:67:a1:46:81:08:08:
                    0b:10:9d:1f:c7:77:91:32:57:69:71:5d:48:b3:a5:
                    e7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:0C:DB:3A:69:41:32:1F:E7:8B:95:59:FB:2F:3E:26:46:AC:89
            X509v3 Authority Key Identifier:
                keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:8f:7e:0c:8a:0e:8c:92:63:7b:0d:a3:ea:07:d4:70:46:
         ca:f6:6b:ad:67:5c:6a:33:66:cb:7c:ea:80:65:95:3b:98:4f:
         99:36:39:8c:1d:17:9f:1b:99:7a:95:e7:7d:40:5a:6e:00:af:
         57:fe:91:8d:2b:8a:bc:e9:5c:f2:06:c3:f7:31:14:d0:88:93:
         54:05:5c:da:c9:19:d9:10:0b:9d:99:b9:d0:34:ac:be:a5:07:
         d8:94:8d:fd:3a:72:66:bf:e0:27:39:eb:2e:b5:2a:08:e3:f9:
         73:55:64:d2:91:96:b9:bd:e6:f6:55:ff:0c:06:dc:17:77:f4:
         2f:23:07:e8:1a:df:b2:c1:e3:36:b1:cb:c5:93:12:1f:5d:a3:
         d4:a1:85:d3:7a:74:18:18:a3:50:e9:15:08:58:78:a4:40:43:
         b3:0a:bf:4d:d5:6f:eb:2c:f6:2b:6e:b1:ce:0c:e4:e8:4e:29:
         9a:10:32:a8:26:6e:6d:50:7e:9d:68:10:d6:6d:f1:f4:28:e7:
         22:32:7c:46:1f:09:3d:38:17:13:5b:3d:88:0d:13:5e:12:61:
         cc:d6:59:72:3f:e1:b3:af:63:15:5a:0e:66:5e:67:a9:d4:6d:
         db:40:97:3b:84:79:53:65:65:d7:a3:26:8c:3b:a1:21:2c:27:
         f5:d5:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:44:45 2025 by rpki-client