Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
File:                     uvzQImt58j3kemr95RRLGynii1w.mft (raw, json)
Hash identifier:          KIyzJ9uUgcbin/kiMueRuhzTYyqDNdj36hlwheYX77Q=
Subject key identifier:   AB:39:D4:B9:84:27:28:C0:1E:37:D8:E0:43:67:5F:4C:2E:BD:0F:2B
Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
Certificate issuer:       /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Certificate serial:       0198917EFDA84A110CD8C6BE6C68F1AECA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
Manifest number:          07FD
Signing time:             Sun 10 Aug 2025 01:01:15 +0000
Manifest this update:     Sun 10 Aug 2025 01:01:15 +0000
Manifest next update:     Mon 11 Aug 2025 01:01:15 +0000
Files and hashes:         1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: /sldsiY0LxNzQwChXuZx53OHBpriGKIFU+WVupYgGxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:7e:fd:a8:4a:11:0c:d8:c6:be:6c:68:f1:ae:ca:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
        Validity
            Not Before: Aug 10 01:01:15 2025 GMT
            Not After : Aug 11 01:01:15 2025 GMT
        Subject: CN=ab39d4b9842728c01e37d8e043675f4c2ebd0f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:64:76:87:44:4c:a6:b8:f7:5f:87:03:0b:
                    fe:1f:54:54:18:b1:dc:95:b0:00:9b:18:c2:dc:06:
                    5e:ed:ef:ad:40:e2:47:ea:5b:08:69:91:f0:2d:5c:
                    71:e8:85:95:4d:2a:35:d1:c5:bb:e2:a7:34:7a:ef:
                    88:54:4e:45:ce:13:1d:50:d9:d4:a2:5e:5b:5a:7c:
                    d0:ef:5c:be:7d:7e:4d:b9:63:ac:6a:58:6d:b6:73:
                    3e:cc:95:44:2b:c9:c4:48:83:04:e5:95:44:50:c5:
                    4d:4e:9c:3e:14:a7:d0:c9:42:18:8e:3e:5f:3c:71:
                    4e:c1:d2:c0:b3:11:27:bc:f3:fd:11:68:47:3e:5f:
                    91:fb:4b:4a:d7:01:a9:bb:e2:8d:60:24:90:9e:54:
                    e9:b8:55:99:f7:a9:a0:07:18:12:cc:6c:b0:24:84:
                    a0:23:5e:2c:85:b4:b4:07:2a:f3:0f:ef:3c:9a:e3:
                    c1:cc:39:27:bf:a2:2e:97:be:0f:69:45:00:9e:3d:
                    48:e5:4f:90:72:d2:f2:0c:b4:69:28:9c:5c:ee:44:
                    04:28:dc:58:1b:bb:a3:95:b2:47:c6:cd:6f:64:1a:
                    ae:c7:6e:af:f7:ef:30:d1:9b:b4:7e:14:43:11:ab:
                    03:d8:fb:c1:4b:f0:b3:3f:6d:ef:c3:ae:0d:80:66:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:39:D4:B9:84:27:28:C0:1E:37:D8:E0:43:67:5F:4C:2E:BD:0F:2B
            X509v3 Authority Key Identifier:
                keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:af:c1:30:97:68:80:97:66:cf:e1:66:68:4e:9d:6b:e8:
         c5:02:36:fc:f3:f0:de:c3:7d:8f:b6:d2:a1:52:9a:87:93:12:
         00:0c:b8:e6:69:e6:ce:ec:05:dc:77:7f:d8:95:81:10:80:d1:
         e2:78:9e:cd:37:b1:c1:55:91:aa:e9:04:21:dc:7a:87:a9:9e:
         0d:92:a5:dd:fc:ce:ce:1c:a3:13:c2:05:26:e9:a8:b5:4f:9d:
         0e:5b:f4:62:46:62:d7:75:f8:59:87:bb:e1:b0:1f:27:7c:bb:
         f8:b1:9e:ce:f2:96:8e:35:3e:22:5f:77:54:ff:a1:1b:0e:c5:
         00:54:e0:88:2c:b6:df:77:1b:d6:87:e6:07:c6:72:e2:af:b7:
         19:7f:25:16:a9:f6:04:62:53:ba:e0:8f:72:b2:10:8f:11:84:
         86:e2:01:55:96:80:5a:6b:07:a8:d1:9c:8e:ba:a9:f5:0c:88:
         a4:46:51:6f:3c:c2:84:e9:79:dc:ab:42:bb:76:a0:8a:f8:04:
         9a:c6:b4:b8:2b:7b:bc:88:e3:f7:3f:12:fc:52:ce:88:37:ed:
         46:b3:d3:14:4c:0f:10:ba:50:11:0a:73:30:49:4f:92:bb:08:
         75:21:76:62:f9:71:53:76:49:ea:2a:a0:62:ff:ff:93:fa:76:
         54:2c:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:02 2025 by rpki-client