Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File:                     uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier:          C4jJFd9DkDD8NPRIek8IqYm4P4g1inLaHsxNw0iB4+s=
Subject key identifier:   30:9B:82:08:CB:1D:9A:50:F1:2D:3A:65:B4:DA:4C:7E:3E:BB:A0:3D
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer:       /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial:       01988BEA65E6671C95056F2D2F5A6BB8F01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number:          02B7
Signing time:             Fri 08 Aug 2025 23:00:51 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:51 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:51 +0000
Files and hashes:         1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: mpukdhE51EOQT79rHkuIDBZ88rAGX9fbUQB4KKgb1iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:65:e6:67:1c:95:05:6f:2d:2f:5a:6b:b8:f0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
        Validity
            Not Before: Aug  8 23:00:51 2025 GMT
            Not After : Aug  9 23:00:51 2025 GMT
        Subject: CN=309b8208cb1d9a50f12d3a65b4da4c7e3ebba03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:e3:7c:da:52:49:93:92:62:69:9d:98:7f:
                    43:1b:1f:9a:42:e6:e9:34:b9:f6:38:10:15:8f:b3:
                    94:8b:58:67:56:48:44:0d:36:df:25:c1:0c:21:b3:
                    0e:f6:b2:78:99:32:0b:37:28:2a:fb:c1:f4:35:61:
                    84:d0:21:7c:d9:dd:53:33:1d:4c:e6:37:ee:95:a9:
                    62:1c:c1:1f:54:b2:da:4e:3d:7b:ad:af:67:cb:ee:
                    d4:16:6c:89:da:0b:be:ba:3e:9f:f3:08:e3:e1:28:
                    84:86:c2:f2:80:38:50:18:68:a2:42:60:79:03:81:
                    d5:eb:92:a1:d0:21:ac:7d:d6:4e:46:84:1e:48:83:
                    38:91:49:39:8e:cf:22:2c:c5:9d:10:c8:c6:f0:90:
                    1e:9f:06:3e:65:f7:2c:3e:4b:d3:b6:52:70:40:dd:
                    f3:e1:a5:c4:f3:8c:bc:e6:d2:bd:63:4b:16:a6:2a:
                    d1:ae:1a:fa:67:b9:25:0d:d3:87:a2:3a:17:2b:48:
                    78:a6:95:c4:c8:f3:51:13:f8:9a:d0:ea:64:62:7b:
                    aa:fe:34:ea:26:52:69:df:52:ba:5e:43:ad:02:73:
                    6c:d1:34:41:38:63:d9:41:de:5f:c4:b7:b6:d4:72:
                    23:d5:f0:ba:28:45:b3:9f:05:77:25:64:47:42:82:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9B:82:08:CB:1D:9A:50:F1:2D:3A:65:B4:DA:4C:7E:3E:BB:A0:3D
            X509v3 Authority Key Identifier:
                keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:a3:49:a7:ed:ea:c7:c4:02:c8:e2:aa:13:52:da:8c:53:
         f2:5a:d4:d7:67:62:b7:8f:f0:9a:2f:8a:48:de:0d:36:26:43:
         a7:6f:da:7f:c0:24:7a:d1:f8:17:4f:4a:9d:69:a5:3a:52:61:
         e4:05:3b:ee:8c:95:45:1a:e1:a9:11:e9:d6:92:65:cc:db:35:
         ff:06:b6:e8:d1:db:a3:45:d2:54:ed:85:ba:cb:69:68:52:26:
         ec:a0:40:ad:f5:4b:ba:a6:7e:79:c4:63:4a:d1:b4:73:c0:1d:
         5d:fe:0d:7c:48:45:ea:50:0d:93:49:b5:3e:ad:b7:e9:e6:cf:
         03:03:11:d7:88:2a:10:24:cb:63:e1:4a:ca:77:e3:d1:f8:ba:
         f6:5a:d1:b4:17:b9:3d:1d:db:fc:f4:bc:d5:bb:51:78:98:f3:
         65:8e:ff:34:1c:3f:4f:48:33:92:45:a8:42:4f:ed:93:46:39:
         76:b4:90:9c:58:b7:f3:72:d1:ef:a7:17:d3:bd:4f:1a:13:27:
         d4:9d:a1:a8:4f:d9:01:f3:7f:8e:6b:4d:ce:d0:50:37:38:8c:
         6f:9c:8a:14:ea:95:a8:4b:95:39:7d:9f:40:f3:f2:76:5e:e0:
         72:39:50:e1:c0:38:a1:0b:07:d2:5d:37:70:ce:b5:a3:34:ed:
         eb:bc:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:22 2025 by rpki-client