Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
File:                     uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json)
Hash identifier:          JIKv4xMyGtReQHaI67QRlDjTHfjBA48y08yTkTUD8Us=
Subject key identifier:   97:DA:E2:68:EA:E8:1B:5B:58:60:B6:17:A7:2B:23:E9:93:37:B0:62
Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
Certificate issuer:       /CN=bb362881ffe362531400608b6328bb12dfa16081
Certificate serial:       019A4EF51432A1F8F3DD6FAB71829954A7BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
Manifest number:          0E12
Signing time:             Tue 04 Nov 2025 13:01:15 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:15 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:15 +0000
Files and hashes:         1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: 17d1/K75zTutJnwlcUVySCNfbM7wmXD5Yeckf2xFtJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:14:32:a1:f8:f3:dd:6f:ab:71:82:99:54:a7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081
        Validity
            Not Before: Nov  4 13:01:15 2025 GMT
            Not After : Nov  5 13:01:15 2025 GMT
        Subject: CN=97dae268eae81b5b5860b617a72b23e99337b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:8c:a3:f7:e0:3f:e1:3f:9b:34:3c:b7:54:
                    71:ed:ce:46:c4:d4:fa:c6:6d:23:19:9f:e5:36:21:
                    8a:f3:62:4d:2d:39:94:b1:41:25:1e:60:28:5e:93:
                    74:b3:e8:1d:e4:ed:80:c2:a7:75:f9:cb:87:f5:ac:
                    19:de:18:17:61:e9:d3:bd:ff:08:31:9e:f1:1d:41:
                    ec:fd:4a:ee:fe:db:e9:2e:30:7d:dc:95:8e:50:41:
                    8c:2a:58:63:54:b1:e8:9c:4e:ac:3c:31:17:5b:fc:
                    2b:73:45:53:08:ec:4c:fe:80:68:42:07:cf:8c:4f:
                    34:78:57:fa:6a:3e:9c:bf:77:a7:d8:92:88:3d:20:
                    1f:72:1f:d3:9b:8e:9a:06:3c:28:a8:2f:79:79:f2:
                    d9:46:c9:0b:19:ef:2b:1e:d5:62:dc:b8:97:15:ea:
                    8f:18:7b:6a:02:c8:3b:f5:51:c8:12:a9:62:30:4c:
                    bd:75:d2:3a:7c:e2:af:2f:15:92:bf:dc:67:51:de:
                    ba:18:9d:bf:5f:19:3d:88:24:bf:d2:94:23:ae:f1:
                    16:af:80:81:d5:28:3d:db:05:26:09:68:8f:92:17:
                    ad:49:f0:fa:eb:23:34:c9:b6:f6:c6:e9:70:85:b0:
                    a1:c8:47:e4:e4:26:cd:f4:c2:9f:a1:30:f5:ee:e6:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:E2:68:EA:E8:1B:5B:58:60:B6:17:A7:2B:23:E9:93:37:B0:62
            X509v3 Authority Key Identifier:
                keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:03:7d:fd:9a:6b:82:d5:33:b7:25:f6:d0:81:c3:ec:1a:
         10:ec:26:93:c0:6c:74:32:bd:88:6e:0a:f5:30:9f:69:c4:b5:
         3f:f4:b8:e5:1f:cb:d6:8a:71:5e:2c:b8:5d:de:7c:ff:94:3a:
         98:90:db:7e:92:54:1f:72:c4:fe:bc:f9:7d:a8:f4:79:09:9a:
         60:34:06:d0:ca:79:fb:dc:b0:27:fd:3b:ca:76:d9:af:b8:84:
         6f:a2:75:51:60:5f:26:59:b9:89:d1:d9:96:f1:bb:be:d8:81:
         6e:30:c0:72:23:2c:69:b1:70:d3:d9:7b:05:df:5f:6f:e1:6c:
         1d:70:e9:72:f0:2f:38:7e:33:77:d4:06:9f:01:59:15:e5:04:
         c5:38:30:c2:d9:92:77:cb:4d:88:84:e0:b0:01:8f:ef:09:89:
         37:4f:07:1e:1a:97:0c:6f:1c:1b:c4:ce:90:e0:01:00:28:44:
         3f:87:80:82:bf:ea:00:44:67:71:c7:c8:c4:71:30:7b:fb:b7:
         72:e2:9c:ff:7a:ba:41:ac:37:f6:18:ee:43:0d:ee:ac:6f:d9:
         8b:40:4f:81:6c:bb:93:2d:be:d5:cd:3e:e8:06:5a:c7:4f:2a:
         d8:38:aa:8a:8f:68:86:6d:8a:9d:19:55:83:8d:19:5d:fe:e5:
         6d:d6:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:06 2025 by rpki-client