Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          WgbmJ5CUpeE8Bi0Vq2fUpiukINqr5upSSmuVO73NJKc=
Subject key identifier:   FE:1F:B9:01:A5:1B:10:C9:BC:8E:88:20:CC:AD:2E:13:7C:02:2F:E3
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       0198971377D923D67CB9A467F8BEFB6480F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0DBA
Signing time:             Mon 11 Aug 2025 03:01:32 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:32 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:32 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: x+sR3bc9GVHZiJHgus6j9N2LVetE3jVNS3CDRp2+ukI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:77:d9:23:d6:7c:b9:a4:67:f8:be:fb:64:80:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Aug 11 03:01:32 2025 GMT
            Not After : Aug 12 03:01:32 2025 GMT
        Subject: CN=fe1fb901a51b10c9bc8e8820ccad2e137c022fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:e9:92:9c:f0:c0:4d:56:c4:0e:4a:34:83:
                    fb:2a:9a:85:fb:94:f5:69:23:51:6c:7b:68:48:c9:
                    5c:83:0f:18:81:70:f8:75:84:28:6c:9b:be:61:74:
                    32:3c:c7:44:8c:30:4e:a8:97:6d:92:48:e7:54:ab:
                    ee:21:d4:a8:87:f2:cc:32:ca:f4:a9:29:04:fc:3c:
                    1e:81:43:38:eb:be:d8:8c:7c:e5:cc:58:a9:22:78:
                    46:d9:9d:40:f5:0e:c7:8d:6d:bb:7d:52:64:fa:fe:
                    ee:0e:08:1a:dd:09:f4:ec:f2:fe:be:39:ae:3c:f1:
                    02:ec:0c:94:ac:70:6d:a3:31:f2:42:d5:3f:d9:77:
                    66:19:e6:16:dd:0b:48:09:1d:76:04:02:1e:80:a3:
                    a8:fa:61:5f:2f:37:13:30:db:5b:1e:f2:93:ca:5c:
                    be:a1:99:fd:77:82:12:8a:1c:97:98:6d:67:4b:b6:
                    ba:79:5a:4c:f9:04:18:bf:59:a5:f6:6e:8a:8d:19:
                    fd:81:d9:45:90:10:28:22:3c:70:11:c6:95:85:01:
                    29:aa:b5:fe:cc:4f:d7:9d:a7:95:f9:da:c1:9b:79:
                    3b:81:8a:35:1b:79:aa:e8:20:3e:bf:e3:a0:1a:3c:
                    46:cd:0d:c2:3b:7e:79:31:2a:38:ff:79:c0:45:d1:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:B9:01:A5:1B:10:C9:BC:8E:88:20:CC:AD:2E:13:7C:02:2F:E3
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:51:31:2b:16:51:38:b2:b7:35:42:fc:7b:41:f0:bc:da:fc:
         e6:06:40:87:e4:49:37:50:6c:db:9e:82:f1:77:87:c3:74:d9:
         15:09:f2:7d:21:c7:5d:31:d5:75:ef:5a:54:cd:68:fe:e1:91:
         0b:a7:93:20:4d:21:4d:15:8e:41:29:b0:3e:7a:60:af:bb:5d:
         56:6e:a8:d3:66:ac:14:dd:52:e4:9f:0c:f2:76:20:7a:92:b4:
         44:3a:93:56:67:c3:dd:d0:99:90:7f:58:bc:e9:c6:eb:bd:cc:
         00:6f:b3:ba:59:06:4d:bf:a5:71:11:8c:0d:49:30:c1:27:d5:
         bd:a7:19:2f:12:ac:44:77:9d:87:a2:df:7c:9d:0a:d4:5f:e4:
         f3:3f:6c:ec:d7:0d:b5:30:e8:93:1e:d5:bb:d2:72:e4:91:30:
         75:47:cb:4d:5b:53:ad:d1:bb:4b:80:66:da:52:80:0f:82:f8:
         6c:10:73:52:b7:7d:65:25:61:a0:17:3b:88:03:32:93:79:89:
         18:b5:53:cd:db:54:bf:94:ea:e0:1f:da:9f:76:ef:77:33:9c:
         97:c0:29:f6:4c:41:76:22:a3:fb:97:d4:3a:e6:49:77:8a:77:
         d5:ad:aa:fd:b8:25:34:02:16:a0:a2:e0:76:7d:a0:0a:e5:93:
         40:c3:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:00 2025 by rpki-client