Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File:                     UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier:          HBM1Zk17kkvdZiIy/c+Lb6oZ/nXmbnAsZ0S/xvFCBzI=
Subject key identifier:   E9:C4:28:DE:84:3B:07:FF:77:10:EB:00:0C:A3:C1:02:3E:BA:89:C3
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer:       /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial:       01988C588DEB19D1BD2E46C26C0122BFA4D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number:          10FF
Signing time:             Sat 09 Aug 2025 01:01:10 +0000
Manifest this update:     Sat 09 Aug 2025 01:01:10 +0000
Manifest next update:     Sun 10 Aug 2025 01:01:10 +0000
Files and hashes:         1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: bJgplE8zr6n9GuamBuLgb1RGIsyYxuls6O8rtDWkppM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:8d:eb:19:d1:bd:2e:46:c2:6c:01:22:bf:a4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
        Validity
            Not Before: Aug  9 01:01:10 2025 GMT
            Not After : Aug 10 01:01:10 2025 GMT
        Subject: CN=e9c428de843b07ff7710eb000ca3c1023eba89c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:9e:81:bc:1e:5b:e6:a5:e2:8e:63:a5:a6:
                    62:a7:64:1e:d3:7d:10:7b:86:75:7d:a2:00:97:31:
                    51:a7:61:cf:57:47:bf:8b:de:06:93:df:b3:f6:80:
                    00:1a:ae:ac:9a:1c:b8:1f:d5:f9:11:13:b3:73:f9:
                    c9:03:18:cc:ee:08:8c:85:0d:e9:6e:dc:5a:14:ee:
                    bd:38:c7:1d:b1:55:81:75:a1:70:88:74:d5:6b:0e:
                    44:26:c1:ea:da:ea:c4:03:cf:c6:23:ec:5a:23:47:
                    96:23:b9:2e:8b:d4:af:6c:56:a5:b4:e3:54:da:dd:
                    cb:0d:c9:79:78:82:24:4f:70:7e:09:aa:7c:fa:fa:
                    9c:7f:bf:a8:0a:50:fe:b3:9c:4e:5c:0a:5d:6d:61:
                    8c:13:ec:8e:e2:5c:ff:4e:47:99:47:ce:df:56:a4:
                    3a:fe:d3:68:60:58:93:d8:f3:76:73:22:da:6a:f7:
                    cf:6f:ec:ee:9e:a8:02:39:e1:ae:eb:44:92:8c:08:
                    cc:5a:41:2d:75:e9:8c:11:d0:4e:2b:e1:73:98:fc:
                    0d:89:2b:27:1d:7e:0b:1f:e6:e4:5d:2d:93:7d:ce:
                    c3:b5:8a:9e:29:be:2f:90:83:73:ad:76:b7:e6:a7:
                    06:df:5c:40:cb:a3:03:6d:91:ea:ff:73:77:62:c6:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:28:DE:84:3B:07:FF:77:10:EB:00:0C:A3:C1:02:3E:BA:89:C3
            X509v3 Authority Key Identifier:
                keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:50:38:86:d7:c5:09:d9:9b:07:d7:9e:b2:26:15:8f:7d:
         d8:64:5c:3e:5a:43:4f:72:d0:db:1a:c6:a8:44:46:ea:cc:c1:
         00:d3:eb:07:69:92:7a:96:67:86:97:75:6f:ff:2c:8c:2d:f1:
         66:89:79:42:98:f5:1e:e1:9d:4d:3c:9e:a3:e0:d9:a2:72:89:
         27:e5:a0:b9:1b:46:a5:90:20:3e:a7:4e:5c:9b:81:35:8c:30:
         04:f5:55:3d:91:ad:f5:f1:7b:19:58:46:9e:08:1e:30:86:68:
         c8:39:09:44:b5:3a:d8:1b:2c:2a:44:53:0c:5e:fa:19:ce:5d:
         25:92:4e:96:ef:fa:41:6d:58:4b:23:04:a5:55:b8:51:e9:45:
         16:48:61:59:67:ec:fb:ed:b2:6a:b5:80:6e:e3:e8:52:a1:5b:
         cd:2f:44:73:a0:07:f8:51:2a:2a:dc:53:c9:fd:db:3d:88:78:
         93:68:8d:be:61:b9:01:30:61:f1:a0:28:da:a1:f3:5f:5f:b8:
         f1:16:c2:a9:bf:e0:9c:93:7f:5b:20:80:15:16:2b:f9:8e:90:
         f1:ef:aa:c9:39:84:50:90:11:fc:df:34:ac:3b:51:be:d4:de:
         fb:c2:5c:44:15:4b:07:d8:aa:4e:8c:37:a5:e0:39:4b:e8:25:
         47:f5:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:30 2025 by rpki-client