Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
File:                     u-BbYYon9sEO-Zm8ltmqDL0UraU.mft (raw, json)
Hash identifier:          anbIJwARy1Pmc9NSDXJ7HCP6q78RytFBdRWBt+JAmxQ=
Subject key identifier:   A4:D1:1E:50:F3:E8:9D:77:9B:BF:E8:31:B8:A6:56:06:4D:3E:30:12
Authority key identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5
Certificate issuer:       /CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5
Certificate serial:       019893A4484A9D50BF7BF1FF9D48C7A72765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
Manifest number:          01A9
Signing time:             Sun 10 Aug 2025 11:01:13 +0000
Manifest this update:     Sun 10 Aug 2025 11:01:13 +0000
Manifest next update:     Mon 11 Aug 2025 11:01:13 +0000
Files and hashes:         1: u-BbYYon9sEO-Zm8ltmqDL0UraU.crl (hash: UWwdYKtaUGbkGlK3p6u8wPaZM8P8KDPdRtENC+tC8vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a4:48:4a:9d:50:bf:7b:f1:ff:9d:48:c7:a7:27:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5
        Validity
            Not Before: Aug 10 11:01:13 2025 GMT
            Not After : Aug 11 11:01:13 2025 GMT
        Subject: CN=a4d11e50f3e89d779bbfe831b8a656064d3e3012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:9a:a2:eb:a8:d7:32:36:54:37:75:77:d4:
                    f8:df:13:40:e6:09:6e:5b:50:2b:eb:6d:4c:74:3a:
                    6a:96:b3:b5:2c:04:34:dd:5e:14:cf:f7:b5:4a:4b:
                    3a:5a:41:84:3a:7f:ea:d8:d5:79:24:4c:df:39:95:
                    03:75:ec:99:a5:ae:27:2c:77:0f:96:29:66:8e:d3:
                    7e:01:54:59:27:cf:0c:33:1e:00:cd:38:34:66:19:
                    65:c6:f3:9d:30:04:47:7f:af:35:be:03:83:f3:9d:
                    d2:9c:45:c4:92:78:21:85:89:b0:1d:bf:af:f3:f0:
                    ba:01:b7:52:a2:af:45:7f:07:75:14:fb:1f:45:27:
                    7b:e7:0a:23:55:27:6a:33:18:f5:ab:68:a0:30:57:
                    6a:62:1f:4a:38:ce:3f:d8:9c:b2:8f:05:ac:79:79:
                    44:ba:ee:8c:9a:8e:5a:b6:6c:59:1c:83:a7:73:a4:
                    61:b3:e8:de:8f:81:6e:ea:0b:27:dd:37:4c:2f:69:
                    91:e5:ec:6a:3e:9e:d5:e2:3b:a6:e1:ef:a2:31:54:
                    c6:ed:ae:e7:05:ce:57:e2:25:34:9a:57:86:cb:0c:
                    6f:a9:13:04:ad:20:c6:08:64:95:36:53:8c:4d:e8:
                    8c:52:1d:c5:9b:75:08:78:98:17:9f:a8:f8:3e:63:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D1:1E:50:F3:E8:9D:77:9B:BF:E8:31:B8:A6:56:06:4D:3E:30:12
            X509v3 Authority Key Identifier:
                keyid:BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:29:8c:d2:e3:cf:3b:05:54:5c:c0:66:06:09:3a:75:6f:
         6b:3b:9d:34:c2:f5:29:f2:8b:e7:53:78:85:11:cc:8e:89:20:
         26:fa:2f:24:6e:07:96:fe:bf:b1:8a:53:07:89:5a:84:5e:5c:
         c2:99:06:09:d5:08:37:d4:b0:27:4a:cf:20:e0:2b:d4:78:84:
         23:62:93:ed:36:73:88:b3:8d:f7:19:aa:28:8a:64:a6:1c:b5:
         f7:55:9a:78:ec:54:cf:6c:87:d9:fe:b7:25:69:92:e6:22:53:
         62:e7:dc:5c:e5:27:aa:47:9d:d4:e2:69:9b:5f:36:5a:f9:77:
         47:06:74:0a:ac:2b:ca:20:a5:c1:d7:f7:22:73:79:65:81:df:
         3d:7f:d0:c0:00:c0:f7:3e:4c:ae:90:b9:a2:e1:53:b1:6e:8e:
         c6:71:9a:63:89:d0:ff:b6:5f:77:68:68:57:b7:4c:f9:25:55:
         41:cf:0d:cd:15:2e:c6:c8:ac:c2:f4:64:62:a3:44:99:3a:8c:
         61:6e:69:43:8b:bd:20:98:e4:6c:2c:96:e2:ba:52:23:d6:7a:
         23:2d:9f:f0:8c:57:28:9a:71:a9:7c:97:02:51:c9:18:89:0d:
         1e:0b:5b:21:5e:f5:98:6f:ca:3a:b9:e6:fa:ce:b6:0e:61:d5:
         c8:32:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:28 2025 by rpki-client