Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File:                     Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier:          bGHm98wAlFzTVYPRJ6jQ6sslzjypxj84ceiPxbzDpSA=
Subject key identifier:   5A:B1:F1:F0:B8:68:56:A8:0F:DA:64:76:2C:49:7B:91:D7:36:8C:3E
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer:       /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial:       01988B0FE9D9254D79542B6628CB7DAE170E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number:          0B2F
Signing time:             Fri 08 Aug 2025 19:02:12 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:12 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:12 +0000
Files and hashes:         1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: +p8fNnBatlJAuGrLOjDfbNWhOBxeUzI0UjwbrMamVsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:e9:d9:25:4d:79:54:2b:66:28:cb:7d:ae:17:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
        Validity
            Not Before: Aug  8 19:02:12 2025 GMT
            Not After : Aug  9 19:02:12 2025 GMT
        Subject: CN=5ab1f1f0b86856a80fda64762c497b91d7368c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:25:63:6e:d1:86:e4:f7:37:8f:28:1d:4a:
                    bc:a9:7b:72:80:6f:ed:46:b9:fd:18:30:8d:61:15:
                    a6:86:3a:a8:0e:68:e4:57:b8:69:9a:a1:b6:dd:57:
                    19:a9:e1:47:e7:b8:46:d6:13:bf:fd:48:1b:80:f7:
                    95:a5:6c:33:8e:5f:e4:8e:63:8a:35:2a:91:49:0e:
                    b0:42:e7:2d:5e:b2:26:d0:ea:0d:40:56:43:56:f8:
                    99:8a:12:1d:ee:11:e3:fe:0e:d9:7b:0a:57:5b:1d:
                    ae:fb:19:ad:01:a7:78:fe:c0:03:c5:f7:5b:d8:4a:
                    49:d6:3e:1d:53:be:eb:3e:03:21:bf:20:dc:84:51:
                    aa:be:aa:35:63:b7:65:7f:ae:d4:98:a7:3b:27:5e:
                    28:a9:29:83:4f:32:1d:20:da:27:90:4d:98:f7:cb:
                    53:35:e2:a8:62:b7:b9:73:bc:a0:c0:9d:82:7b:ed:
                    5b:5b:11:d7:82:2a:75:a5:69:e1:4e:bb:6d:a5:92:
                    5a:1c:8f:0e:7b:57:7f:55:7c:dd:78:f5:22:98:57:
                    75:c8:ba:fb:65:9a:e5:40:3b:d0:aa:b0:18:a7:52:
                    64:56:2b:46:09:b7:f3:3f:c0:2d:c0:0b:88:12:33:
                    b8:ae:c6:05:2c:88:07:38:05:29:54:0e:0c:cb:13:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:F1:F0:B8:68:56:A8:0F:DA:64:76:2C:49:7B:91:D7:36:8C:3E
            X509v3 Authority Key Identifier:
                keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:67:53:f7:3b:8c:81:7e:6f:18:a4:b1:ba:a0:bc:89:be:01:
         8d:df:49:10:60:95:76:da:e6:c3:c4:ad:7d:90:8e:ad:8a:da:
         26:99:a8:8f:88:c5:a0:e4:09:e2:ea:76:13:63:5c:b3:12:58:
         21:43:cf:4d:2e:68:f4:54:d9:60:cb:09:14:69:23:4d:94:7b:
         c2:d8:38:2f:f1:f7:be:26:2f:fc:82:75:bd:d2:fe:9c:d4:50:
         42:dc:ba:1b:90:a0:a1:5e:5c:0d:60:46:b2:55:6f:5f:c2:00:
         05:a0:9a:8d:8e:92:56:f1:44:26:c3:75:c8:e6:3a:fe:e0:02:
         2f:c1:72:b0:d7:91:dd:32:36:3b:f4:a0:a2:06:cf:24:0a:67:
         97:8a:64:df:08:bd:01:67:50:53:0e:1f:9a:85:0c:92:69:ca:
         ae:c4:1e:80:c7:0b:fa:69:4f:0c:9c:b6:cc:34:52:cc:ac:8d:
         6b:ad:d4:b6:7a:f8:03:f5:2d:1a:e4:5f:c9:99:e7:e7:eb:c7:
         87:e8:8a:57:48:2d:b6:ec:67:0a:9e:67:17:87:cd:80:6d:f0:
         a2:ff:38:ab:b2:c1:9b:b8:99:3c:28:e6:38:0c:41:26:e8:d6:
         ea:5f:8a:5b:3b:94:73:65:dd:1f:1d:b3:c6:a9:ae:a9:c1:cc:
         6e:b9:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:16 2025 by rpki-client