Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          ru7g5srBdVMIfdopG3CqUxfv1HhcQlW16ENJUeobZxY=
Subject key identifier:   18:68:C3:9C:79:51:93:F9:B8:9E:89:C6:91:0D:35:C4:F7:B0:F2:F4
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       01987418E460A55810220CC6C382DDFFA145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          058B
Signing time:             Mon 04 Aug 2025 08:00:45 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:45 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:45 +0000
Files and hashes:         1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: LGBw8shfgbKTLojyzfvD6hwbRH3DX73fq+vPZYogztY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:e4:60:a5:58:10:22:0c:c6:c3:82:dd:ff:a1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Aug  4 08:00:45 2025 GMT
            Not After : Aug  5 08:00:45 2025 GMT
        Subject: CN=1868c39c795193f9b89e89c6910d35c4f7b0f2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:a2:02:c3:e7:60:b9:26:b1:3f:1b:8d:47:
                    bb:f0:74:90:cf:fb:23:81:de:54:3d:ea:c1:1b:bf:
                    2f:36:bf:82:fe:2d:07:3f:0f:59:1c:c5:87:9b:1e:
                    b5:89:9d:ea:9e:57:a0:40:9e:03:7b:d2:0f:f6:1f:
                    82:c9:56:55:2c:a7:da:4e:22:f6:34:48:6a:c2:a6:
                    de:a4:a5:52:82:d7:9e:11:81:6e:04:2d:ed:a8:7b:
                    2b:25:5a:a0:c5:cc:6f:86:d9:35:a1:4e:f7:21:f4:
                    05:e7:44:73:dc:1e:3f:27:be:61:7b:f9:2d:d9:25:
                    47:66:a5:a2:1d:6a:d0:7b:de:ff:f3:6f:26:4c:c0:
                    d4:28:95:bd:db:3a:69:22:9d:04:4a:83:a1:14:4d:
                    4b:71:3a:0b:e3:6c:cc:b4:2b:be:28:25:80:7c:f8:
                    70:c4:d2:42:41:01:ab:97:2a:2b:2d:0c:27:87:24:
                    82:85:61:59:5b:0a:98:98:75:65:3d:84:f7:e8:6f:
                    8e:d0:5d:cd:c3:dd:3b:b1:ff:c6:8f:5f:ac:91:ff:
                    3f:a6:c7:dd:f0:63:27:53:50:b4:7e:da:60:23:45:
                    48:fc:5f:d1:5e:48:9b:d3:21:13:c6:df:b0:a6:94:
                    33:7b:35:5a:96:80:16:4f:f0:db:47:2a:e5:07:e5:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:68:C3:9C:79:51:93:F9:B8:9E:89:C6:91:0D:35:C4:F7:B0:F2:F4
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:00:7e:9f:3f:b4:55:c8:e9:05:ca:81:e9:c3:a0:77:26:2b:
         21:b6:a5:76:a6:15:26:35:c4:d5:c6:64:73:12:04:3b:09:7b:
         ca:25:50:67:69:51:88:bb:23:d8:b1:8a:c2:e5:9b:a4:d2:7f:
         61:ed:9e:37:45:b3:ed:fb:3e:49:3d:4f:8e:45:fb:cf:90:b1:
         df:9a:72:fc:18:84:18:b9:08:c1:7e:3b:6f:28:3e:3d:df:7d:
         3e:65:3f:47:c9:2d:49:80:4a:29:bd:ac:c4:87:a1:12:1c:72:
         3d:bb:7e:8b:dd:b4:6c:11:7a:40:cb:1f:ac:c7:fc:08:35:4e:
         c3:83:b1:19:17:4e:a9:ed:09:a0:f2:6a:fc:a8:c6:20:93:a9:
         d7:07:eb:25:2e:31:1f:6b:47:33:a4:a7:29:44:98:49:bc:9c:
         12:66:80:e2:5f:19:39:bc:6c:b3:6f:26:c7:eb:bb:39:df:d6:
         56:1a:38:1a:13:f3:e8:07:76:66:7e:f0:96:9d:07:e6:eb:9a:
         de:92:8e:60:ea:65:17:a8:c6:09:0f:ba:d5:60:a8:7e:60:a2:
         29:69:8c:c9:39:c1:2b:2a:73:7a:84:a2:14:37:3f:c6:f5:82:
         71:f0:48:16:05:ff:41:4c:24:72:49:a6:7a:72:98:6c:3d:eb:
         fb:62:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:45 2025 by rpki-client