Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File:                     Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier:          6QiwKTiwVEU6REIY37gfk5X7cVVle1O09GADaDrCh+8=
Subject key identifier:   C5:0F:91:AB:6D:C0:D9:D7:BF:A1:17:15:C6:52:52:C0:35:A5:F1:37
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer:       /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial:       019879ADDA062EE3846C98E2E98EAC97AA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number:          0ECD
Signing time:             Tue 05 Aug 2025 10:01:33 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:33 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:33 +0000
Files and hashes:         1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: 8zz5Zm6s6RlUGdUZcyr8guNWPhhkOgR1HKVtpI3SVzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:da:06:2e:e3:84:6c:98:e2:e9:8e:ac:97:aa:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
        Validity
            Not Before: Aug  5 10:01:33 2025 GMT
            Not After : Aug  6 10:01:33 2025 GMT
        Subject: CN=c50f91ab6dc0d9d7bfa11715c65252c035a5f137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:8b:96:fb:56:da:a9:92:f2:a4:fb:3d:f0:
                    16:16:a3:03:f2:be:5b:41:b3:98:82:12:4f:23:20:
                    0c:c8:14:14:28:6c:43:e3:8e:ce:4c:56:ac:59:46:
                    01:d4:d9:c0:a0:f2:ab:94:b1:60:65:8d:e2:c5:93:
                    6e:2a:51:7b:4e:33:3f:ae:cd:70:70:4d:78:a4:1b:
                    f7:5a:f4:b8:ae:6b:93:c9:fd:8b:0a:ca:c8:04:db:
                    c9:60:96:80:8e:e3:3f:41:9f:42:1c:19:48:71:7f:
                    ba:81:a8:15:d4:a6:48:46:ba:2c:84:8f:93:a1:89:
                    ec:dd:bf:f1:33:91:7a:ac:cd:ca:0f:38:cf:90:e6:
                    b7:e6:24:cd:d3:33:16:ac:b9:53:37:57:2d:99:fc:
                    ff:b9:d0:1e:50:84:03:74:77:2f:65:e6:fb:e0:1f:
                    79:25:f3:ee:b9:f4:2d:ea:e6:29:f8:38:6e:d6:15:
                    37:57:cb:6c:f7:ff:e5:bf:bb:52:d5:11:ea:70:54:
                    21:04:1a:8a:8d:81:81:77:99:cc:82:29:74:7c:ef:
                    33:3d:85:1c:ee:4b:ab:10:1d:53:49:24:17:69:df:
                    b3:72:42:d3:68:32:6e:08:ba:12:fe:98:5a:c4:a7:
                    51:96:18:71:85:8a:a9:3b:00:4a:cf:d1:43:be:58:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0F:91:AB:6D:C0:D9:D7:BF:A1:17:15:C6:52:52:C0:35:A5:F1:37
            X509v3 Authority Key Identifier:
                keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:62:b5:d2:9b:a1:30:4d:3e:e1:40:2f:d7:3a:cd:a0:6e:fe:
         d4:dc:95:0c:86:cd:15:71:6c:1b:bb:ef:0c:0f:fb:7b:ca:23:
         22:05:b4:94:ce:a9:d0:16:b1:64:9a:62:ea:43:2f:59:68:68:
         7a:d7:f0:08:0d:7d:e8:55:8f:5e:7e:11:bf:a8:85:8d:b1:d0:
         37:df:d7:7e:9b:8e:ec:6b:61:25:6e:b1:e8:39:1b:4f:c6:06:
         c6:b5:45:e8:1e:b6:ad:52:af:2d:25:28:5d:f2:81:fe:df:61:
         af:4c:b1:f1:80:07:96:ac:63:b6:32:94:c6:8f:98:9d:23:5e:
         a8:b9:24:ad:6a:8a:4e:e2:4c:8a:04:0e:ef:24:23:c5:2f:ac:
         18:45:2a:fe:bc:68:92:44:9e:75:0e:de:2e:be:e3:27:ef:23:
         d5:09:79:aa:90:2b:8b:e6:f9:40:84:9e:13:df:71:5e:9e:62:
         5e:5d:67:15:3a:f4:46:86:95:06:74:87:c8:14:f5:02:a2:a2:
         bd:df:b8:30:54:fc:8a:3b:0c:cd:66:ef:5a:91:e2:c4:0b:e1:
         ec:7e:07:db:33:9e:15:83:a4:80:3b:e7:3e:68:ba:9c:96:8f:
         3b:a5:6e:34:1d:07:81:26:80:57:06:2f:14:a8:00:b4:84:53:
         0b:0e:f6:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rdoGLuOEbJji6Y6sl6otMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm
ZGQ1YTUwHhcNMjUwODA1MTAwMTMzWhcNMjUwODA2MTAwMTMzWjAzMTEwLwYDVQQD
EyhjNTBmOTFhYjZkYzBkOWQ3YmZhMTE3MTVjNjUyNTJjMDM1YTVmMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1mLlvtW2qmS8qT7PfAWFqMD8r5b
QbOYghJPIyAMyBQUKGxD447OTFasWUYB1NnAoPKrlLFgZY3ixZNuKlF7TjM/rs1w
cE14pBv3WvS4rmuTyf2LCsrIBNvJYJaAjuM/QZ9CHBlIcX+6gagV1KZIRroshI+T
oYns3b/xM5F6rM3KDzjPkOa35iTN0zMWrLlTN1ctmfz/udAeUIQDdHcvZeb74B95
JfPuufQt6uYp+Dhu1hU3V8ts9//lv7tS1RHqcFQhBBqKjYGBd5nMgil0fO8zPYUc
7kurEB1TSSQXad+zckLTaDJuCLoS/phaxKdRlhhxhYqpOwBKz9FDvlgx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUPkattwNnXv6EXFcZSUsA1pfE3MB8GA1UdIwQY
MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt
MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3
LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWK10puh
ME0+4UAv1zrNoG7+1NyVDIbNFXFsG7vvDA/7e8ojIgW0lM6p0BaxZJpi6kMvWWho
etfwCA196FWPXn4Rv6iFjbHQN9/XfpuO7GthJW6x6DkbT8YGxrVF6B62rVKvLSUo
XfKB/t9hr0yx8YAHlqxjtjKUxo+YnSNeqLkkrWqKTuJMigQO7yQjxS+sGEUq/rxo
kkSedQ7eLr7jJ+8j1Ql5qpAri+b5QISeE99xXp5iXl1nFTr0RoaVBnSHyBT1AqKi
vd+4MFT8ijsMzWbvWpHixAvh7H4H2zOeFYOkgDvnPmi6nJaPO6VuNB0HgSaAVwYv
FKgAtIRTCw72NA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:07 2025 by rpki-client