Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
File:                     UyClURbR4jWcx9PivGStEZ4RdbE.mft (raw, json)
Hash identifier:          GqyV3wZ+2yTwhunit3DWsGGdcPK1U3wr5/jm0axiE0E=
Subject key identifier:   83:CA:6E:52:98:60:48:78:A5:B8:AE:ED:2F:B9:F6:BA:B3:9D:87:FD
Authority key identifier: 53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
Certificate issuer:       /CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Certificate serial:       019768851BDF2438DD32EACE7E4A97553773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
Manifest number:          04D6
Signing time:             Fri 13 Jun 2025 09:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:43 +0000
Files and hashes:         1: UyClURbR4jWcx9PivGStEZ4RdbE.crl (hash: M5UnCjDMUDAqIdhKudi4N8/b498zNwaAL79tl3OGvTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:1b:df:24:38:dd:32:ea:ce:7e:4a:97:55:37:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
        Validity
            Not Before: Jun 13 09:00:43 2025 GMT
            Not After : Jun 14 09:00:43 2025 GMT
        Subject: CN=83ca6e5298604878a5b8aeed2fb9f6bab39d87fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:56:e8:25:ce:8e:62:21:0a:12:a0:6d:88:
                    5e:80:7b:5a:4a:69:0e:41:f9:a5:b7:a7:ed:14:6f:
                    bc:88:1b:01:a1:4e:ed:10:7a:10:c6:79:5c:08:23:
                    ac:71:32:83:b0:58:1f:80:e0:56:e9:0a:cc:07:66:
                    a2:e8:d7:be:e1:b1:ba:fc:44:d0:9f:11:bd:d0:11:
                    00:db:d9:68:ae:95:92:81:e2:4c:0e:c3:cb:0a:a6:
                    de:5b:7f:ab:79:1a:06:63:77:47:2b:bf:40:84:c4:
                    c5:2c:ef:05:e0:f4:a3:2c:bd:f0:e5:e2:bb:b0:40:
                    93:ca:6f:ca:ae:d6:93:a3:c3:2e:d3:e2:0c:63:36:
                    bc:7f:80:c1:b9:07:fb:6e:1f:d0:c5:54:ae:2d:2e:
                    9b:26:05:54:fb:bd:14:9f:03:36:90:90:4f:1b:6e:
                    d3:5d:dc:6b:90:3c:e7:1b:e2:20:17:c9:6d:65:83:
                    bb:65:52:85:a1:59:29:ef:6a:80:1d:44:0f:bf:23:
                    62:48:78:ad:f0:1f:27:d9:25:3c:4f:fd:21:56:f9:
                    1e:cd:e4:45:a0:43:a5:fb:62:66:46:86:f0:d0:60:
                    06:97:30:53:16:c0:1e:28:74:fb:c9:ae:01:70:79:
                    b3:c6:91:01:80:62:c5:43:33:ee:78:aa:b2:28:04:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CA:6E:52:98:60:48:78:A5:B8:AE:ED:2F:B9:F6:BA:B3:9D:87:FD
            X509v3 Authority Key Identifier:
                keyid:53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b4:9b:46:33:b2:35:50:c8:0b:e8:7f:54:a1:5b:16:b0:fe:
         0e:a8:b8:7a:e2:28:40:4f:48:c0:7d:81:d3:38:b1:1f:a2:23:
         51:0d:12:08:68:73:2c:8a:c7:91:d6:8b:8e:82:71:40:14:0f:
         ce:72:65:41:3a:7c:3a:bd:90:5f:1e:65:47:13:ce:71:59:3d:
         fb:ed:d2:51:d0:27:f1:d6:02:35:10:b8:b8:6e:d3:8b:23:7f:
         87:52:ab:e3:c3:68:6e:4a:64:e3:34:fb:90:15:3e:33:9f:66:
         84:be:34:1f:78:23:28:96:02:c4:b3:90:4c:c3:ee:a3:1b:5d:
         d5:68:5a:3c:15:1a:64:2e:29:c9:43:60:82:1a:5a:da:a2:4b:
         d7:5f:2e:d7:6c:68:bd:ef:2c:41:8c:74:76:e7:05:d5:05:26:
         fd:d3:c8:a9:15:44:45:88:0f:43:ca:91:48:70:19:d1:ec:ba:
         03:68:3f:6e:2a:0e:8e:88:6b:de:6e:54:33:73:85:d4:ce:a2:
         4d:8f:6d:5b:b6:42:1f:4e:55:36:cc:38:48:48:1b:b2:45:38:
         40:d9:23:5a:7f:df:ee:81:9f:35:63:2c:b9:a3:5a:9e:00:db:
         ba:2b:66:d6:d8:3b:56:82:eb:ab:7d:93:c2:f6:a8:85:81:c0:
         5b:a9:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:39 2025 by rpki-client