Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File:                     Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier:          2kqx+fY/zFNGRZzb38UtC/C/uj7b+YvxEDxYHuy1Z28=
Subject key identifier:   E8:2F:D9:DD:C0:5A:49:8E:30:50:F0:EE:54:12:A3:ED:91:81:23:FB
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer:       /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial:       019673E72252B61CB4AB03FA2C416A0920D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number:          08B7
Signing time:             Sat 26 Apr 2025 21:00:49 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:49 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:49 +0000
Files and hashes:         1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: 9E6RiC50rM+P9g3+x67gvOk1E3tgyqCF1NVTnFKG6mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e7:22:52:b6:1c:b4:ab:03:fa:2c:41:6a:09:20:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
        Validity
            Not Before: Apr 26 21:00:49 2025 GMT
            Not After : Apr 27 21:00:49 2025 GMT
        Subject: CN=e82fd9ddc05a498e3050f0ee5412a3ed918123fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:92:6d:20:5a:21:f9:73:a8:d0:d6:f5:e4:
                    c6:33:ac:a0:26:cc:56:75:df:43:95:f0:cd:a2:49:
                    80:f6:40:07:bd:b9:67:c6:29:d4:85:e3:00:4a:a8:
                    85:e9:e5:37:b9:9b:dc:e4:9f:08:04:d1:66:4c:c3:
                    6c:75:cd:c0:71:10:00:2a:44:51:ca:f0:65:a4:ce:
                    18:88:4f:b7:47:2a:8f:f3:8c:35:f4:ef:f6:14:97:
                    b3:e7:dc:b7:52:41:f4:10:cd:39:b3:73:10:6f:4d:
                    76:e5:59:fa:ed:cb:b0:19:75:de:0c:04:a9:83:2f:
                    24:fa:dd:6c:cf:2b:e5:45:5b:bd:6b:f6:44:5c:10:
                    de:04:43:6e:ac:1b:da:48:99:bb:08:7f:3c:0d:5a:
                    e2:e0:cd:61:da:05:1e:64:11:20:55:85:de:ee:41:
                    47:05:da:d8:93:8a:0b:b8:6b:1d:bb:55:1c:b1:fd:
                    3a:fe:76:84:98:7b:78:52:19:30:2d:02:f2:78:30:
                    d3:01:cb:8b:2a:34:18:47:60:55:4b:c0:62:64:a7:
                    d4:81:57:38:02:d2:83:a5:72:e8:35:7b:4c:47:58:
                    69:f8:59:03:f7:a7:b4:44:84:65:dd:b7:57:30:1e:
                    b1:40:ba:a1:e0:29:b7:b6:2c:7f:6f:4e:a4:7f:0b:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2F:D9:DD:C0:5A:49:8E:30:50:F0:EE:54:12:A3:ED:91:81:23:FB
            X509v3 Authority Key Identifier:
                keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:de:76:9a:22:89:43:fd:59:f2:30:28:ed:c8:33:b3:3b:
         c3:19:ac:2c:95:30:80:78:c5:0c:80:ef:28:88:b7:6e:c3:cd:
         bf:49:a2:67:bc:d2:50:0b:cc:2c:13:49:00:ed:a0:7e:c6:b4:
         40:b8:08:11:f7:96:2b:46:eb:9a:09:6e:ec:4b:0b:3a:7b:a3:
         57:5e:27:2f:62:2d:8c:ac:a6:84:3b:d7:7f:92:b7:87:75:a2:
         6a:08:1b:ad:eb:53:c7:d0:e6:45:32:ce:4e:df:88:55:19:ee:
         71:3a:ad:8d:13:b4:7b:c6:5e:2d:af:42:46:c5:3d:c8:be:f8:
         b2:ce:89:fc:06:e6:d1:90:1c:ad:60:87:38:84:73:51:b3:4b:
         93:7e:60:41:16:3f:ce:ad:fc:b4:29:da:f6:0a:64:be:d0:59:
         e7:7a:a4:87:c5:ff:78:52:19:5b:2b:00:96:08:fc:d9:8f:bc:
         9d:a1:43:de:0c:de:e2:a9:54:36:79:68:14:6e:a1:ff:97:90:
         3e:fb:6e:fd:04:d2:cc:5b:ea:35:72:42:9d:2d:44:23:c2:94:
         c7:26:1e:f2:f4:97:cc:57:ad:2a:66:f8:09:f6:d0:fd:7f:91:
         60:35:d7:99:ca:eb:0e:7c:7b:b1:0a:6a:be:39:48:06:80:88:
         4e:f6:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:57 2025 by rpki-client