Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          qGomllBfw0Nn+8sJh/xGydOon+caJzhhl+GXSrkF5Lk=
Subject key identifier:   B3:90:6E:6D:D7:43:F3:91:C4:63:67:93:96:27:7A:9A:FF:01:19:A9
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       01987CE50527E2FC3B364ADE80166B264D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          05C0
Signing time:             Wed 06 Aug 2025 01:00:40 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:40 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:40 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: ByTY/vgXUEPxQZUAJU5SHiU4EdV7o37y/K04syA8vS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:05:27:e2:fc:3b:36:4a:de:80:16:6b:26:4d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: Aug  6 01:00:40 2025 GMT
            Not After : Aug  7 01:00:40 2025 GMT
        Subject: CN=b3906e6dd743f391c463679396277a9aff0119a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:c3:e3:2f:86:cf:ea:55:e5:4c:26:2b:5a:
                    b1:be:27:51:89:59:59:9a:cf:b6:18:95:2e:72:9b:
                    4d:2e:67:eb:a3:b5:46:34:1c:31:37:16:bb:0f:26:
                    d6:00:d4:08:78:bb:16:1f:ca:0b:9f:b4:10:2a:90:
                    3e:3c:3f:c0:1b:66:93:86:a5:ed:16:80:72:52:46:
                    8a:01:69:2b:58:47:4c:4a:52:8d:91:d6:24:11:3c:
                    e3:54:e2:06:68:2e:76:f4:36:0f:28:cc:ca:49:93:
                    3f:ad:f1:0f:a1:8b:a1:be:fb:1a:cd:0a:da:86:1d:
                    2a:32:92:0e:5d:62:c4:d3:87:79:a5:ec:69:6b:cc:
                    4f:d9:81:55:0e:73:53:a8:02:e8:73:0a:6b:a5:fc:
                    0f:a1:ed:b9:35:09:a8:25:9b:d6:31:01:93:77:cc:
                    47:b4:5b:8e:84:5d:67:8e:0d:b5:ea:61:40:63:08:
                    b7:26:96:85:8f:69:5c:67:1b:53:6a:26:f2:d3:24:
                    6a:04:71:85:a5:c6:93:f0:a6:c9:67:4d:4d:dd:58:
                    63:72:17:52:ab:97:2d:a9:b9:b0:d0:bf:45:e3:aa:
                    35:f7:bd:a3:dc:fd:fb:f0:f0:66:81:f9:7a:40:af:
                    32:40:64:ae:07:4b:c1:2b:43:ad:81:61:90:c5:56:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:6E:6D:D7:43:F3:91:C4:63:67:93:96:27:7A:9A:FF:01:19:A9
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:9b:3e:7e:a6:cd:69:1e:7a:ae:f9:2b:ab:2a:cf:70:84:
         aa:df:c9:be:5e:6a:c2:54:c2:65:8b:86:9d:81:f5:d4:4a:7d:
         a8:ac:e2:1c:71:78:67:59:a4:22:33:24:d4:01:a6:76:c4:9a:
         69:65:60:dd:97:28:31:e5:2e:75:8e:e3:30:19:46:e2:9b:19:
         d1:7a:5b:ff:db:3f:d7:1b:dd:0d:06:6c:23:7a:1b:bb:83:d7:
         1d:18:4d:91:86:00:25:e4:98:9e:a2:89:83:41:f9:d4:15:8a:
         3c:c2:e2:85:a0:0d:dc:c5:74:b2:64:19:29:9d:d5:87:48:0e:
         ab:7d:e6:32:6b:85:8b:2d:e8:f6:25:a2:49:9b:ea:85:88:09:
         04:94:e9:31:99:94:7b:85:50:34:bd:0c:29:c9:ad:be:bf:ae:
         4a:c8:47:bb:24:75:c5:62:ea:01:92:8c:13:46:e6:fd:dd:e6:
         eb:80:3d:84:21:1a:08:db:e8:e6:0e:15:ef:85:42:42:c5:93:
         e8:81:d8:d7:5b:f2:47:1e:d0:19:2e:2e:b7:84:7e:e1:28:7a:
         2c:3e:76:17:eb:22:48:d7:71:5b:bc:8b:8b:6f:2f:e0:f3:95:
         c6:63:92:3c:23:01:a0:18:41:32:67:1b:b4:8b:01:d8:b0:ac:
         24:bb:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:37 2025 by rpki-client