Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File:                     UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier:          0qIEAeMK/4xylwfThDB9xRvdERaAxPrUJE5bpyFpbmg=
Subject key identifier:   B1:D9:BB:E3:E8:07:05:D2:03:CA:D5:E3:CF:33:B8:A2:70:09:21:1C
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer:       /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial:       0198A196AD14DF4B46A0580ED4BBF7A2AD93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number:          1367
Signing time:             Wed 13 Aug 2025 04:01:03 +0000
Manifest this update:     Wed 13 Aug 2025 04:01:03 +0000
Manifest next update:     Thu 14 Aug 2025 04:01:03 +0000
Files and hashes:         1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: E7KDr6luOCY883Phv5RT6zS0tfTTOXR27NPUCLHTrh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:96:ad:14:df:4b:46:a0:58:0e:d4:bb:f7:a2:ad:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
        Validity
            Not Before: Aug 13 04:01:03 2025 GMT
            Not After : Aug 14 04:01:03 2025 GMT
        Subject: CN=b1d9bbe3e80705d203cad5e3cf33b8a27009211c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:db:5a:97:cf:ab:a8:c7:74:4c:01:45:39:
                    fa:c6:f8:13:a4:7c:8d:83:fc:03:46:2b:71:f0:30:
                    cf:fe:5e:db:b0:7a:dc:7c:40:bf:b1:72:eb:db:12:
                    a2:25:cc:84:89:65:c3:7e:80:ff:25:c6:78:6e:01:
                    81:14:0c:9b:39:bb:f5:84:41:cd:8e:84:62:f5:4b:
                    a1:39:4b:17:89:2d:1b:83:a5:51:2b:0b:9f:71:85:
                    98:5c:c6:9e:cf:4e:f4:82:65:7a:9c:54:7a:7c:c8:
                    93:32:93:b4:74:1a:b0:52:fb:04:c9:13:09:bc:2d:
                    fd:4e:0b:43:0b:74:a7:b4:ad:0c:01:a8:40:09:3c:
                    c1:ac:71:68:59:89:73:53:f3:75:c3:72:3a:99:fb:
                    2d:da:18:9c:f6:46:b5:2e:6f:12:d2:67:69:55:3c:
                    ff:b4:72:8b:39:85:a9:58:3b:38:f0:bd:1e:fb:fc:
                    1c:b0:56:ee:01:d7:f5:1d:3c:e9:0e:dc:a8:a9:6f:
                    1a:aa:81:c4:51:d1:8f:11:56:ef:9f:48:2c:ba:43:
                    76:97:c3:96:81:f3:7e:57:06:d2:97:31:01:32:4d:
                    c1:12:5f:8f:09:37:4a:54:8c:a2:10:94:35:c2:0c:
                    dc:bf:ca:fe:a2:0a:7d:d4:c8:dc:5a:80:89:c5:78:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:BB:E3:E8:07:05:D2:03:CA:D5:E3:CF:33:B8:A2:70:09:21:1C
            X509v3 Authority Key Identifier:
                keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:14:5f:18:84:b8:3e:b7:2a:37:c7:79:4b:4f:8b:fd:16:
         cd:57:ed:43:1b:d4:57:a3:c3:6a:8f:3e:e9:5b:e2:2d:6c:03:
         23:21:97:ec:a8:1b:d5:39:3b:99:da:83:4b:59:c5:a4:cc:3b:
         e8:03:1b:7d:13:71:8d:dd:87:d0:50:dc:44:02:11:3f:74:f9:
         05:9e:b5:8e:44:91:45:00:78:1d:a4:e0:ef:c1:e6:1b:7c:2d:
         d2:4a:35:38:08:73:fe:2f:70:ef:b7:e9:e4:07:cc:1c:1f:5b:
         50:09:59:77:3d:10:ce:c6:85:f0:5f:5f:21:32:4b:35:77:f5:
         e3:32:64:a7:7f:69:55:85:9e:6f:02:9d:97:df:ea:70:c0:21:
         dc:14:9f:50:78:86:70:9b:c3:99:74:4c:55:5b:ca:33:e2:0e:
         c1:8a:45:81:47:52:6f:27:b8:d6:28:57:77:d0:4c:dc:45:50:
         09:50:79:ff:ae:c3:ba:29:64:a6:38:b0:7f:94:49:b3:4c:b7:
         b7:7e:12:7a:ee:da:52:96:22:fd:0a:b3:d3:cd:ce:e9:51:64:
         c9:36:cc:45:c4:35:93:67:4f:3c:ee:86:4f:81:1f:d2:f7:3f:
         2c:de:c5:02:46:c4:18:33:c7:c7:c0:74:ae:a5:95:88:7d:02:
         07:d2:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:25 2025 by rpki-client