Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File:                     Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier:          1RR5s6LEjyfKFMsXfeBcoAoOpaa41g4xZ2Pepc/osuc=
Subject key identifier:   F9:8A:61:A4:6D:8B:A2:46:35:86:64:6C:A3:31:8C:3B:B7:D5:25:D1
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer:       /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial:       01976D3D989728C13124939542A3DB0093D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number:          0C74
Signing time:             Sat 14 Jun 2025 07:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:42 +0000
Files and hashes:         1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: AD/3d06VdzsRAAsfX/jPam51V78V+Dx2DCdW2UXvPhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:98:97:28:c1:31:24:93:95:42:a3:db:00:93:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
        Validity
            Not Before: Jun 14 07:00:42 2025 GMT
            Not After : Jun 15 07:00:42 2025 GMT
        Subject: CN=f98a61a46d8ba2463586646ca3318c3bb7d525d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:02:a7:1f:b7:3d:b2:cc:7f:df:7a:e4:9f:
                    a6:bd:cb:74:4a:d9:ff:3b:2d:7c:7a:ec:b9:7b:87:
                    36:b7:25:c2:44:a4:ce:3c:35:6e:81:fa:1a:90:ab:
                    97:b7:ee:2f:da:db:13:79:86:7c:3e:c3:35:ac:b8:
                    f1:97:a6:57:8e:84:90:99:fb:d8:a9:49:29:fa:0d:
                    61:a6:f1:27:17:36:c1:39:cb:94:29:02:8e:3b:c0:
                    96:8a:d0:62:13:a0:13:6d:88:57:57:09:3d:20:9d:
                    a3:65:8b:02:35:ba:bd:2c:5e:19:e3:76:c4:40:72:
                    9d:c1:19:4d:26:32:f2:c1:f3:9c:ac:79:6e:8b:93:
                    e2:30:72:45:31:2e:22:2c:fc:1d:77:af:a0:34:49:
                    69:89:68:e5:3c:36:c0:13:36:e1:86:5b:56:92:52:
                    23:df:58:e7:b5:9a:fb:a4:bd:a0:81:e6:c5:04:b4:
                    de:e0:55:c2:33:a5:94:cf:2c:df:95:59:6a:43:68:
                    b8:64:17:91:30:12:74:fd:ae:6d:d4:d6:1f:00:8a:
                    7a:20:9c:11:08:a4:6d:e0:54:ec:cf:a1:eb:ee:c2:
                    33:41:6c:f7:49:ac:d5:a3:2b:a7:42:d8:11:7c:28:
                    73:f7:68:a5:40:ce:8a:04:25:89:df:61:41:ba:ca:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:61:A4:6D:8B:A2:46:35:86:64:6C:A3:31:8C:3B:B7:D5:25:D1
            X509v3 Authority Key Identifier:
                keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:54:e0:85:c9:c5:05:24:2a:2f:ac:94:aa:6c:63:30:fa:db:
         df:f1:ff:fb:4c:d3:52:3e:be:ee:69:72:89:3f:67:b1:3d:3a:
         a8:1f:2c:27:17:34:9f:1d:8e:3c:1e:db:f5:d1:b5:a6:85:fd:
         1c:bb:1b:9b:23:74:b5:cb:fe:0a:0a:cc:c3:c8:82:5e:5b:3f:
         13:4e:5f:5f:9f:54:55:66:c3:80:09:8f:82:37:75:5f:8b:7e:
         c5:4e:6b:96:71:f6:1b:de:c8:30:95:3f:ef:c0:bb:ea:4a:44:
         ec:dd:19:c5:58:4c:57:a7:46:d4:c5:88:ec:79:b2:e4:28:98:
         ff:ca:93:65:be:29:f3:68:d8:14:46:00:04:f9:41:5a:ed:0f:
         29:3b:ac:81:c4:7c:60:f6:cd:cf:e6:d4:1a:a7:1e:b1:3f:8a:
         61:b4:1b:53:e7:96:b8:42:26:02:19:9b:36:85:83:a2:c9:7c:
         36:a0:00:29:e5:ba:ed:0b:f8:eb:8f:aa:a0:06:53:df:26:ba:
         18:10:22:96:86:f6:d0:19:a3:b6:04:3b:9d:d4:1a:2e:6c:77:
         0d:5f:aa:db:75:15:01:4e:46:1f:19:81:de:1c:ad:e9:62:4b:
         25:e8:70:65:07:1b:11:d5:11:55:0e:e1:28:ed:be:1d:b5:28:
         75:59:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:18 2025 by rpki-client