Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File:                     UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier:          OSFeyIzP+UxklcBUnw4F/73ssE5j8jvvDyXd9KYho6I=
Subject key identifier:   46:EC:DD:3F:B3:4A:5F:DD:C6:D8:2E:66:6C:24:05:74:42:04:DC:BF
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer:       /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial:       01989D832B480C1F885B492F2FF93C064AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number:          0A4E
Signing time:             Tue 12 Aug 2025 09:01:15 +0000
Manifest this update:     Tue 12 Aug 2025 09:01:15 +0000
Manifest next update:     Wed 13 Aug 2025 09:01:15 +0000
Files and hashes:         1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: uM31LjM04U2TnuEpgYcg8GsV0Nen2aISlYDH/uexXxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:83:2b:48:0c:1f:88:5b:49:2f:2f:f9:3c:06:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
        Validity
            Not Before: Aug 12 09:01:15 2025 GMT
            Not After : Aug 13 09:01:15 2025 GMT
        Subject: CN=46ecdd3fb34a5fddc6d82e666c2405744204dcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:19:74:8f:19:f0:3b:0b:58:fb:82:d0:27:
                    34:fc:90:d0:ef:58:2d:42:57:70:ec:9f:ee:25:3c:
                    b4:8b:3b:72:a5:d1:05:d8:07:5e:46:13:a4:f6:21:
                    a6:d9:3a:58:7c:e7:15:29:66:e9:1d:d5:19:74:3b:
                    ff:36:0e:3b:74:da:63:56:37:1f:b6:b9:3b:83:6a:
                    04:8b:b0:dd:e8:d9:c7:9f:f0:33:0a:e9:fb:84:59:
                    d0:40:8c:af:dc:ce:20:1c:84:1e:26:57:30:ca:54:
                    f6:0e:6f:0c:3b:9e:65:d9:92:38:3a:bb:78:f2:f1:
                    0b:25:dd:7e:e4:1e:1f:87:df:af:b9:e8:c4:a3:90:
                    53:35:82:ae:bc:39:60:93:90:96:05:dd:f1:bd:33:
                    5c:db:7d:8f:f6:90:8d:7f:c1:2e:03:7a:b4:8d:f2:
                    dd:c5:0f:1c:f8:f9:55:dc:d6:e0:6c:69:91:4b:04:
                    99:d6:51:67:c9:73:67:a0:68:9b:8e:e7:eb:e0:eb:
                    98:33:f2:67:e3:fe:ce:86:21:cf:c4:25:ba:4f:14:
                    59:ef:f6:78:c6:20:06:02:63:12:04:92:94:f5:90:
                    7d:80:07:dc:25:ee:ed:54:f0:29:44:fd:48:37:69:
                    04:aa:68:fc:ce:3e:f5:e3:7b:29:69:36:65:6f:b9:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:DD:3F:B3:4A:5F:DD:C6:D8:2E:66:6C:24:05:74:42:04:DC:BF
            X509v3 Authority Key Identifier:
                keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:f1:f3:b1:47:ab:62:58:65:5f:e7:da:e2:fe:2a:b9:ec:
         49:7c:86:4a:56:8e:0a:bb:4e:10:ee:3c:f3:f2:c2:84:49:11:
         f3:e8:81:8f:c1:49:df:65:40:ce:c1:4e:28:dc:8e:5c:08:0c:
         7f:11:6c:13:10:35:59:11:f9:53:e1:32:39:e2:2c:a6:8f:e0:
         08:b6:4e:53:2b:92:c3:57:0a:9b:15:90:8e:c1:1b:99:04:91:
         06:77:2b:05:ef:a5:f7:5b:55:31:e2:a9:c5:ed:e0:36:fa:5a:
         a4:26:39:df:1f:ac:73:a8:2c:37:18:00:e1:c2:9d:f3:d4:ec:
         5e:6e:2a:cf:4b:27:c0:c6:cb:c7:1d:27:5e:49:3c:e3:89:fc:
         99:23:f5:88:78:df:58:96:ac:f9:07:38:31:c0:24:f5:af:1a:
         22:cd:d8:7a:ac:00:b9:a0:d3:53:54:c6:33:10:04:89:90:bf:
         8f:6e:e8:df:84:dc:23:2e:09:b0:19:bf:9f:73:6d:76:64:b8:
         db:cc:fd:82:30:06:b8:28:07:75:22:ed:01:76:67:25:a4:a8:
         44:52:19:0a:3a:4d:5b:e3:aa:74:8b:ba:86:78:bb:22:b5:f7:
         c4:fb:e1:ff:8c:07:d3:10:5c:31:e4:88:03:f2:be:15:0b:69:
         b6:62:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:29 2025 by rpki-client