Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File:                     UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier:          0Uq8pa9FaTIHBsZUlINJwAeyjJG5vBDfdWawMSwiFrA=
Subject key identifier:   D6:24:EE:AA:1E:BA:8A:9D:88:B0:DB:F0:4D:74:50:F0:86:68:E1:CB
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer:       /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial:       01987306BF557E839E872B2CC2227DA6F2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number:          2E
Signing time:             Mon 04 Aug 2025 03:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:18 +0000
Files and hashes:         1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: Zz5lV2E4T4UVlbeQsh0qAjm6+2ap6uvVmlTjszfy074=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:bf:55:7e:83:9e:87:2b:2c:c2:22:7d:a6:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
        Validity
            Not Before: Aug  4 03:01:18 2025 GMT
            Not After : Aug  5 03:01:18 2025 GMT
        Subject: CN=d624eeaa1eba8a9d88b0dbf04d7450f08668e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:d9:5f:5c:37:09:d8:4c:df:64:3f:e6:24:
                    7c:1c:f4:cf:c3:31:d1:64:e9:99:87:25:04:29:49:
                    cf:24:3f:1c:2b:2b:cb:ad:ec:6d:d9:e5:00:56:ca:
                    3a:5d:94:5c:b4:5d:f4:cf:a8:52:fd:d8:8a:bf:57:
                    bd:9b:f0:25:1c:d7:68:63:ac:c2:a5:af:44:28:80:
                    40:fb:38:88:52:db:46:0d:0b:b8:6d:f2:9d:a7:cc:
                    2a:2d:fb:50:dc:c8:bb:b9:bc:fb:89:c1:70:b6:ac:
                    91:db:b2:da:77:4d:94:fa:36:87:c8:d4:ad:26:b5:
                    76:d3:45:ab:f6:41:da:d8:b9:18:7e:42:fc:18:88:
                    e0:c8:bf:0a:e7:47:a5:96:9d:ba:f4:e5:b2:7c:68:
                    80:ee:13:48:3e:aa:83:5b:39:49:f5:50:d4:7f:a7:
                    7d:4f:1e:1b:7f:9d:04:ca:f8:b7:02:6f:13:38:08:
                    41:22:a1:06:22:cc:82:af:0d:01:5c:2f:78:d0:37:
                    be:c0:f3:60:95:f7:6d:2c:b6:90:08:f6:a1:2a:75:
                    17:ff:a7:6c:3a:0b:98:22:0b:50:a2:e4:4f:b7:69:
                    c2:30:3b:54:54:8d:db:6e:f0:be:1e:27:c9:62:90:
                    44:52:1b:3a:6c:d6:f6:2a:cb:79:02:49:c2:6f:bf:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:EE:AA:1E:BA:8A:9D:88:B0:DB:F0:4D:74:50:F0:86:68:E1:CB
            X509v3 Authority Key Identifier:
                keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:ea:bb:5a:b8:1a:2a:a3:54:f1:66:d0:b4:2d:4d:fe:72:
         35:1a:9b:1b:96:c3:b9:f8:7c:bc:8e:3d:bd:37:63:40:93:9d:
         d6:b1:09:46:d6:4a:4c:c6:ce:e2:e7:8b:af:43:a0:45:63:21:
         5e:d7:12:2c:ea:83:2b:12:69:28:34:eb:eb:c8:18:31:35:f4:
         96:1b:dc:dc:06:8d:1e:62:5b:5b:05:94:bf:39:ba:92:7f:59:
         fb:23:53:16:3d:e1:11:b6:17:79:19:53:09:65:3e:11:df:db:
         f5:4f:e3:c6:f3:24:69:52:3e:d0:d2:73:3f:76:86:7b:c5:49:
         03:f6:e8:ab:1e:ee:2c:4d:c5:07:ed:0e:6b:06:3a:6f:2d:0a:
         7d:32:5b:7d:66:f3:9b:c2:b8:b5:81:b2:51:9b:eb:77:df:06:
         48:1a:37:2d:84:74:b8:f8:6a:f0:57:c1:ad:6c:f1:4a:a4:a0:
         b4:04:89:fa:0c:8d:12:c3:7d:7c:8e:a3:21:d8:da:a0:7d:75:
         46:5f:47:07:ca:95:74:5a:b1:da:49:e6:50:a3:29:dd:a3:80:
         7a:7b:12:72:db:97:02:48:5e:65:95:df:8d:e3:74:38:e7:63:
         ad:27:07:f0:52:43:6c:24:3d:f0:95:ed:bf:a2:28:48:d0:87:
         a1:3e:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:47 2025 by rpki-client