Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
File:                     Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft (raw, json)
Hash identifier:          xkzM4eUPAiBSg/k1VebBjA1Sxeo8QzX48QQzqzLqTuA=
Subject key identifier:   3D:13:7B:AD:BA:F1:62:10:B5:A6:95:4B:22:45:4A:CB:78:82:D3:94
Authority key identifier: 53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C
Certificate issuer:       /CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
Certificate serial:       01987A528269BF85F8EEDB55CDAA51BFDD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
Manifest number:          07BD
Signing time:             Tue 05 Aug 2025 13:01:24 +0000
Manifest this update:     Tue 05 Aug 2025 13:01:24 +0000
Manifest next update:     Wed 06 Aug 2025 13:01:24 +0000
Files and hashes:         1: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl (hash: XKXug3Tuq3zXqjBWNIK2E7hVZ0dwwsVNSTrNnZ6JpcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:52:82:69:bf:85:f8:ee:db:55:cd:aa:51:bf:dd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
        Validity
            Not Before: Aug  5 13:01:24 2025 GMT
            Not After : Aug  6 13:01:24 2025 GMT
        Subject: CN=3d137badbaf16210b5a6954b22454acb7882d394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:3d:c8:a6:62:8b:89:dc:77:1f:eb:8b:ad:
                    66:60:5b:27:25:6e:0d:3e:01:7b:ca:34:9d:13:db:
                    2d:e9:05:36:6f:d3:00:e0:3f:3d:1d:5a:ce:84:68:
                    b8:4c:cd:a9:10:e9:95:0e:50:d0:75:24:e1:3f:45:
                    3c:64:37:e5:08:47:1c:6f:cd:16:78:05:42:4d:0a:
                    c8:92:b7:4c:e9:75:82:08:6a:84:f6:15:46:13:e2:
                    23:43:13:f8:85:7d:79:4d:7d:59:20:80:21:b1:0c:
                    68:98:25:1e:14:b7:54:5a:c3:18:cb:01:79:66:37:
                    bb:bf:17:c8:53:36:2e:3f:a4:24:b0:02:21:b2:04:
                    ac:17:e3:4b:34:24:28:91:f9:98:4d:79:b0:d4:58:
                    f4:34:62:0b:84:e6:99:f4:5c:e9:74:75:71:cf:69:
                    51:ac:18:85:9c:9e:a4:cf:f4:14:f6:6a:7d:a6:af:
                    cb:e0:6e:48:49:48:a3:e7:8d:8d:76:b2:cf:18:fb:
                    1e:33:b0:c2:a7:f6:a8:74:75:d4:60:90:f0:46:cf:
                    26:3f:e1:32:5c:fc:1a:60:8f:62:1a:59:e8:7e:00:
                    85:c3:84:8a:52:c3:39:88:e5:0a:ac:11:ea:99:4d:
                    24:ef:d2:7d:5a:f1:97:ac:1a:3f:c5:a7:f0:ce:ca:
                    cc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:7B:AD:BA:F1:62:10:B5:A6:95:4B:22:45:4A:CB:78:82:D3:94
            X509v3 Authority Key Identifier:
                keyid:53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ab:a3:93:6f:92:83:40:c0:86:96:e2:5f:3a:1d:69:6e:b2:
         3b:98:83:36:8a:66:09:71:51:71:45:3a:f6:09:a3:17:a6:8d:
         75:fd:c9:39:51:59:5e:cb:f7:66:0e:2e:57:9f:f1:43:de:f8:
         14:a5:df:8c:56:d8:13:aa:35:e0:f5:19:85:9c:8d:20:59:fb:
         10:f0:1f:3c:54:47:42:b6:29:d2:3a:cf:4e:87:fe:d1:e7:24:
         99:6a:51:02:d4:65:1a:8c:43:d0:e4:65:70:24:89:16:5e:d5:
         a6:a0:20:83:0e:4a:37:06:01:0c:86:7c:7a:f5:c8:af:4a:c6:
         6f:aa:b4:c0:e4:10:0d:71:59:a9:97:fc:f2:42:6b:6c:7f:ab:
         2d:a5:c8:b8:dd:a2:aa:e2:ac:35:92:9c:e7:0a:cd:26:ee:44:
         6d:77:aa:7a:f6:d4:fd:bd:1f:62:b6:04:de:26:d1:2b:52:6e:
         f6:23:8b:3e:da:71:14:ee:ec:3f:d5:4a:a9:93:a3:f8:35:6a:
         19:3a:5a:ef:61:2d:64:af:e5:5d:ba:99:48:da:6a:db:99:af:
         5a:55:55:23:0d:8c:91:7a:95:3d:e6:64:5e:f4:af:1f:29:fd:
         68:a1:c1:db:54:b8:7d:fa:0c:2d:b2:24:34:59:ca:fc:8d:91:
         10:c6:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:49 2025 by rpki-client