Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File:                     UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier:          ckmdfIs9+ubA3l9RPNLrVtzMBNvWx8AjmzTqd3hGfIU=
Subject key identifier:   82:69:14:4D:6D:2A:1F:67:87:7A:79:95:95:2D:77:41:AD:43:8E:7B
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer:       /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial:       01976929CAC91FD2D3FE63DC8603C624F148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number:          1078
Signing time:             Fri 13 Jun 2025 12:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:35 +0000
Files and hashes:         1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: ZZZWzi3qGbKD9MVI9MO9/zzEzDB8vnslj4aLVnkf0z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:ca:c9:1f:d2:d3:fe:63:dc:86:03:c6:24:f1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
        Validity
            Not Before: Jun 13 12:00:35 2025 GMT
            Not After : Jun 14 12:00:35 2025 GMT
        Subject: CN=8269144d6d2a1f67877a7995952d7741ad438e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:f7:12:fd:95:e1:8e:4b:e4:26:eb:fd:b5:
                    ef:3d:ab:15:e1:65:c1:71:39:b9:b5:3b:10:13:2d:
                    70:46:57:6d:a5:42:b9:f1:ac:1d:68:81:40:ec:59:
                    f1:b0:ab:83:ca:eb:99:23:41:48:f4:e8:50:be:62:
                    b5:f4:3a:0a:50:71:79:64:71:d3:6f:e2:7e:97:63:
                    0c:1c:f7:f3:be:69:1a:c5:be:3d:dd:9a:98:d6:20:
                    e4:b9:a7:07:43:eb:ac:c7:3b:8f:ef:88:d1:5e:40:
                    36:c6:15:35:5d:37:8b:ea:42:c5:9a:27:43:3f:34:
                    55:97:14:1d:cf:e6:51:bb:6d:fb:e5:72:63:c4:d4:
                    7c:47:21:35:54:84:23:f8:0a:8b:1b:98:7c:c2:34:
                    33:b3:8a:c8:54:b2:0c:8a:49:3e:5e:23:fc:d1:c8:
                    c3:40:c1:fe:c1:91:64:9b:49:84:df:e5:cd:40:fa:
                    17:7c:b2:22:4e:b8:77:a6:f4:46:d3:57:12:cb:03:
                    2b:a1:48:80:05:31:ff:72:a1:47:51:34:4e:70:31:
                    09:b8:b4:be:85:ae:ff:3a:cc:63:dd:23:59:22:9e:
                    5a:27:7c:c7:1f:7b:f9:30:60:4f:3c:68:9a:bf:3b:
                    64:3e:2b:f6:b4:b6:c6:10:68:39:eb:8d:40:f0:af:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:69:14:4D:6D:2A:1F:67:87:7A:79:95:95:2D:77:41:AD:43:8E:7B
            X509v3 Authority Key Identifier:
                keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:43:39:80:cc:c7:60:eb:45:a3:ae:e3:f0:87:ad:d3:66:12:
         f8:80:8b:e7:38:1c:3a:c3:5a:ec:0e:a0:14:61:1a:ea:df:ee:
         b5:34:41:f4:ec:e3:2d:d2:3f:5b:07:23:ee:74:94:09:e8:56:
         c0:5f:45:80:1c:c4:cc:4b:eb:06:53:72:7e:81:2f:11:41:e0:
         36:ae:0a:7a:e3:be:3f:92:33:cf:95:8e:28:34:ed:48:9c:88:
         ca:8e:39:2c:e6:d6:3d:6c:b3:88:bc:51:a8:02:63:e4:0a:d0:
         59:2c:60:ad:a5:cc:1e:5a:1f:31:6d:39:b1:ca:75:4a:ee:4b:
         7f:2c:ab:4c:04:c3:e1:cc:26:b6:0f:08:54:2a:d5:96:d5:7e:
         f1:cd:4e:c6:51:0d:85:72:0c:47:cf:59:38:64:36:f2:74:17:
         ae:fe:96:07:1e:70:21:1d:b9:40:04:7a:88:b5:79:31:8b:8c:
         85:0e:4c:d0:9a:39:6a:c5:d3:a7:23:d8:cb:8b:b9:b9:95:d9:
         af:5f:36:cf:50:87:95:bf:f9:17:12:f7:4f:67:a1:94:1d:7c:
         20:5c:1d:d6:cd:82:89:ac:3b:85:c8:96:9b:5f:5a:5f:22:86:
         d3:8f:54:34:eb:a5:05:2a:57:be:f4:23:29:59:d3:c6:b9:b7:
         c7:11:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:05 2025 by rpki-client