Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File:                     uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier:          FUdZXbHUIcjAWXziPawTGxPLyPCoN6x3eIp62o7vdC8=
Subject key identifier:   04:94:21:13:F9:E7:3C:BB:51:04:59:F0:32:2B:A4:41:2D:4F:FD:B0
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer:       /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial:       019887328DD0A50F7D99B59DC622C9617A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number:          04D2
Signing time:             Fri 08 Aug 2025 01:01:33 +0000
Manifest this update:     Fri 08 Aug 2025 01:01:33 +0000
Manifest next update:     Sat 09 Aug 2025 01:01:33 +0000
Files and hashes:         1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: 5V+1b43sdkJ3PI4YthyvHEggCZYZWRweQuY5UeGFnuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:32:8d:d0:a5:0f:7d:99:b5:9d:c6:22:c9:61:7a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
        Validity
            Not Before: Aug  8 01:01:33 2025 GMT
            Not After : Aug  9 01:01:33 2025 GMT
        Subject: CN=04942113f9e73cbb510459f0322ba4412d4ffdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:5c:fa:e0:99:72:c8:7f:25:3f:61:a7:04:
                    fc:0f:17:ff:fc:02:33:77:64:90:9a:a4:4b:35:8e:
                    96:91:b2:a0:db:46:5a:35:2e:43:fb:13:50:05:7d:
                    09:a8:04:30:d4:1d:3a:6b:ac:23:b5:ce:57:6d:15:
                    52:89:7d:be:1e:6f:af:57:3e:ed:a1:1a:f9:29:21:
                    e4:7f:cb:6e:fe:fe:2d:75:a4:d2:7e:a7:74:c1:f7:
                    f8:5c:7f:45:bb:29:7c:86:3e:31:09:88:c9:53:73:
                    4b:c5:77:09:64:28:c0:15:5d:d2:ce:1e:14:58:b7:
                    35:d8:02:55:69:9d:b2:48:c8:ef:ea:8e:4d:5a:66:
                    87:da:e1:e1:18:48:a0:83:b1:8d:ca:83:4b:94:30:
                    21:2f:9e:f3:69:b6:18:26:8b:a4:9b:cb:98:98:5f:
                    f3:e3:51:91:a6:1d:5d:bb:59:31:07:d3:ac:22:7e:
                    ab:2a:96:70:c5:e1:9d:5c:c6:67:ec:6e:88:a9:43:
                    73:c9:98:f6:46:2a:09:74:5a:a0:28:c6:43:ef:8e:
                    ae:b5:01:b8:50:09:96:e7:43:86:b6:8f:a0:32:49:
                    42:f4:76:92:41:e0:43:d9:9b:e9:f6:6f:75:c4:d9:
                    45:08:98:ee:b2:93:59:a9:62:96:b6:16:e0:77:68:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:94:21:13:F9:E7:3C:BB:51:04:59:F0:32:2B:A4:41:2D:4F:FD:B0
            X509v3 Authority Key Identifier:
                keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:e0:a5:db:12:60:30:c3:ff:58:81:c9:c6:28:16:7f:2c:
         42:f6:1b:77:9c:d3:4a:6e:31:1f:51:be:12:ff:ea:7f:e6:37:
         82:13:53:06:bc:ff:bc:cc:e0:54:c0:8e:9d:50:83:d5:15:47:
         0c:15:c6:ff:8b:4b:82:fe:22:ac:5f:76:0b:66:a2:f2:29:72:
         50:f9:a2:f0:bb:ea:c1:6e:0d:5f:e3:9b:c4:45:1d:f4:4e:c4:
         b1:ab:c1:9b:e0:30:a5:51:3c:fc:e1:ea:e0:87:6a:b7:d6:65:
         3e:20:ab:87:3c:58:0b:c4:91:e7:33:26:f0:68:a1:07:7e:fa:
         b9:2f:c2:a0:6c:39:82:8a:6e:cc:35:d9:3f:c9:19:f6:5d:73:
         c0:a3:69:53:eb:40:46:80:49:10:af:0e:49:62:69:5e:84:e4:
         5a:df:11:57:4e:52:88:16:4e:ef:1b:79:87:33:18:05:6a:aa:
         a6:57:3d:0d:20:5e:a8:fd:eb:87:f1:42:95:54:71:ce:b2:2b:
         24:c8:6b:d1:bf:e0:43:05:d7:2a:f0:ea:42:96:53:d8:7d:19:
         92:76:5e:7c:9e:b3:01:d6:b4:1e:62:7f:ca:d1:01:1c:a1:46:
         91:96:f3:0a:e6:5e:a4:4a:5a:68:7b:8c:3d:92:ad:0b:75:a0:
         86:28:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:22:02 2025 by rpki-client