Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          vy7GlOxaDSl0VjFIEenXVWexOqOrck053PxvVrt+/t8=
Subject key identifier:   E5:F5:1C:F6:60:C0:E8:4D:65:E3:F4:DD:62:43:EC:A3:1B:5E:A1:1E
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       0197730863D3C405FAF2DE5845A6BFAF15BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          1271
Signing time:             Sun 15 Jun 2025 10:00:18 +0000
Manifest this update:     Sun 15 Jun 2025 10:00:18 +0000
Manifest next update:     Mon 16 Jun 2025 10:00:18 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: jSlHGrR95jIgkiQVNH5xJ166zN+1/4E/qL+tvODd0Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:08:63:d3:c4:05:fa:f2:de:58:45:a6:bf:af:15:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: Jun 15 10:00:18 2025 GMT
            Not After : Jun 16 10:00:18 2025 GMT
        Subject: CN=e5f51cf660c0e84d65e3f4dd6243eca31b5ea11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:23:b5:27:7d:1b:8d:fa:9b:9b:76:91:cf:
                    63:2e:e7:e6:dd:80:10:c0:6e:4c:96:8f:29:f2:e3:
                    f0:ca:61:c8:28:bb:c1:cc:e8:8f:b6:a7:bb:cb:09:
                    06:6d:fa:36:5b:53:02:38:a8:0c:90:63:74:0c:78:
                    e1:a9:a1:e8:88:58:5c:03:96:da:68:6c:09:0d:0d:
                    bc:1e:b3:2f:2c:46:b1:9f:db:ca:e3:28:02:d4:7f:
                    75:93:34:ec:18:0f:ec:b9:dd:f2:ee:1e:d7:09:fd:
                    2d:fd:a9:87:7a:c3:fc:6f:80:fc:a6:d3:b1:50:c2:
                    db:42:47:cf:c4:b4:b1:d7:99:57:8a:6c:38:73:62:
                    6d:28:c3:7b:7a:99:e3:6c:d7:c1:7a:7d:5e:66:9a:
                    4d:b9:71:d6:d2:f8:6e:70:58:25:dc:f3:db:cd:ed:
                    37:17:07:45:46:ea:9d:49:87:f2:25:a2:71:ee:19:
                    55:86:a6:98:25:b8:a5:f9:3c:d3:7b:a3:83:ff:a6:
                    dc:ae:26:c5:f6:12:87:9c:12:eb:d0:c4:3e:f7:d6:
                    54:cb:9a:78:e9:d1:6a:3f:b4:35:4c:99:75:5b:d0:
                    87:b0:15:42:4e:7c:e5:7f:5b:19:32:17:cf:e7:68:
                    7b:a1:56:cb:54:00:45:58:b5:ad:41:f4:b2:97:60:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:1C:F6:60:C0:E8:4D:65:E3:F4:DD:62:43:EC:A3:1B:5E:A1:1E
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:75:ed:de:64:9b:f5:db:c5:25:0e:15:bf:68:b1:2f:45:
         69:b1:07:47:7e:48:88:ae:8e:88:14:03:29:6f:45:b9:b5:d8:
         b2:70:9c:ae:41:76:71:5a:7b:f2:03:13:a2:4d:52:89:41:5c:
         aa:a0:40:f3:84:fb:13:64:0e:fa:2d:64:5f:c2:02:38:93:b4:
         da:74:cd:cb:85:05:25:84:18:24:8d:97:e5:fb:b3:1d:e8:d8:
         9c:c6:a4:81:e6:22:68:1b:b4:22:e2:39:0b:6c:55:54:f8:de:
         d8:53:40:2b:c0:86:c8:f4:ce:e2:37:5c:0e:b0:05:ed:7c:be:
         36:55:24:9d:19:88:7a:8c:23:c0:b7:1a:0c:3a:b1:bf:e2:c6:
         8f:c5:b3:c5:f0:d7:1d:dd:7f:af:b6:b6:13:1b:89:92:5e:8e:
         f0:f9:a6:90:a5:05:31:5b:2a:34:13:3f:8a:82:98:bc:c8:11:
         8e:34:a8:cb:4a:ec:ef:ba:e3:30:2c:6c:95:01:51:26:f0:53:
         a8:1c:52:43:f5:eb:aa:dc:12:18:39:9f:ad:ab:20:33:b3:99:
         31:ce:c2:36:a2:17:8a:52:60:54:95:1f:b0:52:6e:32:d3:15:
         d0:12:53:71:77:d7:82:74:96:66:cb:6f:0d:ee:3c:97:9e:a2:
         5a:68:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:04:13 2025 by rpki-client