Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File:                     Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier:          Jykd3Uk438HgfIhjBVf9VU4eCHAwP8Tcrpo1KdSM1DQ=
Subject key identifier:   D4:8B:D5:D7:DC:AD:78:73:AA:3E:0C:17:00:5A:03:66:08:53:2E:A0
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer:       /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial:       019896A65FBF3224D450004CE389CC877702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number:          0D0E
Signing time:             Mon 11 Aug 2025 01:02:22 +0000
Manifest this update:     Mon 11 Aug 2025 01:02:22 +0000
Manifest next update:     Tue 12 Aug 2025 01:02:22 +0000
Files and hashes:         1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: pSVW++SBV2FIjZ4fUSEMd3Z+RsK5UIM575T2HQzQGMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:5f:bf:32:24:d4:50:00:4c:e3:89:cc:87:77:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
        Validity
            Not Before: Aug 11 01:02:22 2025 GMT
            Not After : Aug 12 01:02:22 2025 GMT
        Subject: CN=d48bd5d7dcad7873aa3e0c17005a036608532ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:5b:0a:df:6b:43:b7:db:7c:d4:42:bc:9e:
                    1a:31:d1:0b:8a:9a:f7:3a:20:c8:a6:5c:38:4a:13:
                    29:27:63:3a:1c:21:5e:ff:dd:9e:4d:3f:61:90:d3:
                    0e:cb:ab:e3:47:5d:75:45:c1:d8:20:99:9b:9c:43:
                    87:3f:fb:00:10:59:f2:08:90:50:98:97:3e:22:be:
                    9d:ea:02:e1:59:7a:e5:4e:9a:47:32:6a:b8:c1:a9:
                    f2:f0:9a:c4:00:37:ac:b0:f3:e7:36:af:d4:d6:bb:
                    06:51:1a:9a:e4:f6:f2:f2:49:5b:60:78:4b:e9:f6:
                    61:8a:72:93:c9:59:4e:85:24:14:c5:1c:91:d6:1d:
                    c8:b2:11:ed:d0:91:49:86:4a:0e:e4:1a:5d:a3:32:
                    e7:8e:a3:3d:67:5f:90:03:b7:ff:8f:7a:b7:55:f7:
                    ea:10:d2:6c:9f:11:1d:ac:74:8e:f6:ac:7d:b7:d8:
                    c6:73:8b:a7:e7:d5:ea:e3:df:36:3b:03:1e:61:34:
                    f7:b4:aa:32:26:b7:59:a5:df:ec:fc:5a:03:1e:2d:
                    4b:96:5f:10:41:d5:69:ff:67:04:80:36:03:58:f2:
                    47:99:56:93:30:3e:41:fa:73:8b:83:87:85:ba:6f:
                    1a:a2:39:d8:56:ab:18:96:ca:4e:6b:d9:0f:a9:ee:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:D5:D7:DC:AD:78:73:AA:3E:0C:17:00:5A:03:66:08:53:2E:A0
            X509v3 Authority Key Identifier:
                keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a0:2a:8e:68:d4:75:7e:fb:df:ea:eb:89:de:5a:4c:0d:c7:
         b1:80:b9:87:fc:cd:73:a1:c8:13:15:9c:97:76:a8:ab:23:ea:
         08:4c:f6:b5:54:9a:5d:ab:ea:73:0e:ae:bb:cd:de:27:b9:01:
         cb:47:1c:8e:02:42:5c:95:77:fa:64:92:04:75:16:a0:d0:22:
         78:89:36:4a:42:69:80:04:04:3e:c8:93:07:af:b5:3a:7d:e1:
         0b:4a:b6:36:a8:d3:86:fa:3f:4f:45:94:e4:13:d2:6c:2b:66:
         f5:d8:6a:91:bb:cc:48:29:1d:9a:8a:7c:04:f7:a3:f8:25:3a:
         7e:8d:7a:cf:41:e6:74:08:d7:93:16:34:87:b0:a4:23:09:2a:
         2c:32:1a:63:50:31:1c:fa:2f:5c:c0:f6:34:80:9b:b1:48:48:
         98:e8:ae:47:a0:bc:3c:61:e9:26:a1:38:8e:ce:34:ea:c2:1b:
         db:77:1b:01:47:e7:1b:8a:a6:1b:5b:29:b5:3a:5c:be:09:6e:
         ab:2c:8c:40:12:b1:7c:38:b8:12:65:84:d4:c4:7c:87:74:1a:
         62:27:8f:c2:3f:7a:a4:c8:25:dd:15:a8:fd:11:3b:61:9b:24:
         6f:35:21:82:9c:3d:aa:4f:70:9a:ed:92:16:5b:f7:f9:ea:11:
         fa:06:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:05 2025 by rpki-client