Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File:                     g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier:          3YpdLuaRPATui5puIkfGJ6V19rVSBZtszn7B3eGSb6k=
Subject key identifier:   50:4B:52:80:FD:2F:3D:63:08:16:80:4F:F1:7E:E7:68:88:3D:D6:F9
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer:       /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial:       01989ECC95E580B3764DC55327C92174D66D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number:          1440
Signing time:             Tue 12 Aug 2025 15:01:04 +0000
Manifest this update:     Tue 12 Aug 2025 15:01:04 +0000
Manifest next update:     Wed 13 Aug 2025 15:01:04 +0000
Files and hashes:         1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: KI0d+rMFQe1V7qsxZFLXGXDZ7YqQZlmoWsJCjejjUsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:95:e5:80:b3:76:4d:c5:53:27:c9:21:74:d6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
        Validity
            Not Before: Aug 12 15:01:04 2025 GMT
            Not After : Aug 13 15:01:04 2025 GMT
        Subject: CN=504b5280fd2f3d630816804ff17ee768883dd6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:d1:ce:9f:b8:e6:4a:9e:0f:06:bd:ff:68:
                    12:1c:2d:cd:a7:59:c6:bb:fc:f0:6d:cc:17:c4:b1:
                    a0:93:bc:55:32:00:f4:88:f1:76:a5:82:28:fd:92:
                    a9:a6:ed:20:c1:3b:b9:5c:5b:ac:d0:9b:fb:cd:88:
                    72:e2:59:0f:61:30:16:20:fe:05:74:a3:0e:8d:a3:
                    9b:8d:fa:52:8a:05:52:ce:c4:51:f4:d6:93:11:12:
                    a5:92:53:0c:ff:e5:21:77:0c:ee:c2:fc:0b:7a:48:
                    dd:fc:79:cd:85:b8:4c:1b:bf:28:18:df:1d:2c:7f:
                    b6:d4:42:41:e7:a0:0b:dc:51:4a:4b:2d:ce:03:dc:
                    c1:ea:3d:de:96:be:30:73:8b:25:87:56:53:a2:07:
                    67:fd:47:d2:ae:d7:4d:18:c6:6a:22:28:37:49:b1:
                    79:98:76:ef:76:b5:76:89:5b:4f:76:69:d1:59:c1:
                    84:a7:e9:f8:d9:d0:c9:65:9b:67:83:60:73:29:48:
                    e8:fa:07:b7:bc:82:05:ef:d8:a4:53:09:99:9f:6a:
                    b4:a5:71:10:3e:bf:e0:53:cc:e7:79:5d:d5:35:34:
                    fa:9e:e2:88:3c:d6:82:f8:b0:5f:0a:e5:d5:6d:c7:
                    6c:8b:6d:88:79:c0:19:b1:2a:a8:5f:95:4f:5c:3f:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:52:80:FD:2F:3D:63:08:16:80:4F:F1:7E:E7:68:88:3D:D6:F9
            X509v3 Authority Key Identifier:
                keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:8e:3d:b3:4a:24:38:05:82:da:3d:dd:87:45:27:21:e2:
         24:8a:ce:93:de:3e:20:5c:a5:ae:97:ed:51:5e:78:4f:44:50:
         a5:31:0d:93:88:15:79:3e:11:29:1e:1d:8e:d5:87:9e:ac:68:
         d5:bf:45:d7:cc:42:7e:e7:68:a5:a5:dd:d7:35:cd:41:31:d5:
         fe:35:9c:b6:2d:bf:8c:76:7e:f5:88:51:3b:c4:15:d0:a1:14:
         fa:ae:09:83:c9:3a:62:b5:2f:58:c6:50:37:c5:38:92:78:00:
         c1:9e:3c:8c:ad:ca:de:b3:9a:4d:07:2f:4d:29:83:1c:90:d0:
         96:3c:4e:d7:45:4a:b1:c4:2d:14:7a:15:61:ae:3a:9d:78:87:
         28:a1:9a:02:47:19:88:a2:d0:9a:46:e6:e3:62:20:af:77:4e:
         53:f9:36:1d:9d:dd:75:ac:e8:ea:fe:47:a3:a3:dc:53:88:d6:
         c0:04:16:29:41:03:35:5d:87:12:3a:31:b6:3a:99:c3:37:06:
         af:f7:41:f6:eb:c2:b0:1f:4b:9b:bf:e9:12:84:be:0a:ec:35:
         47:c3:0d:f5:3f:a7:8a:1c:35:64:50:c6:ce:9b:99:86:e7:ad:
         9f:08:da:7d:d4:25:f7:8c:01:4e:d2:4c:e8:78:03:11:d9:4e:
         40:08:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:05 2025 by rpki-client