Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          4mbq4Uxc3hLp8kd+J5/6PPuJDySJHX5uKNwsojG+/dc=
Subject key identifier:   9D:DD:1C:3C:F6:B3:6C:10:FE:3B:47:68:19:1D:4A:10:FE:F4:D4:24
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       01976BBD51DCE12E0B58F9FC2F14B48E1A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0D1F
Signing time:             Sat 14 Jun 2025 00:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:58 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: ydBfbv3jbJ8A4fmqHrhsGD/lp8OehJhf/5IIPmO7vys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:51:dc:e1:2e:0b:58:f9:fc:2f:14:b4:8e:1a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Jun 14 00:00:58 2025 GMT
            Not After : Jun 15 00:00:58 2025 GMT
        Subject: CN=9ddd1c3cf6b36c10fe3b4768191d4a10fef4d424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:b1:75:3d:bc:74:89:8d:ba:61:59:c0:f3:
                    06:9f:a4:37:eb:ed:c5:fd:cc:b3:0c:0c:92:fd:12:
                    75:0d:ea:a7:a7:99:ae:8c:63:04:e7:ec:9f:9d:80:
                    95:2d:2e:dc:da:00:7d:79:9b:cd:db:5f:25:93:99:
                    9e:78:b5:96:f9:f8:20:02:2d:bd:f8:be:a3:2a:cc:
                    7b:e1:6d:66:49:31:98:a6:59:19:3e:20:2b:14:9a:
                    c3:01:17:0e:2b:71:46:78:79:86:e3:b0:2e:7c:18:
                    e7:6a:46:a3:5d:b3:64:e4:79:a1:38:67:00:d0:d8:
                    ea:13:83:44:b8:8f:02:d8:27:a2:65:87:8c:70:cf:
                    bc:72:36:a9:08:c7:65:3f:10:2c:42:ce:8c:64:7d:
                    88:3b:d8:58:8d:d8:ed:8f:24:57:6a:f6:9d:06:05:
                    29:0a:78:ec:cf:a9:f2:5e:07:de:ed:99:a9:23:5a:
                    2b:28:69:b4:ca:fe:94:70:6a:fb:49:4f:35:46:2a:
                    80:c9:05:4f:23:ae:86:60:4c:fe:bb:f5:73:9e:73:
                    21:ab:50:63:c8:e0:f4:e0:e6:f4:74:44:40:52:53:
                    f1:c6:ff:2e:4f:b5:a4:51:b1:76:2f:35:68:89:69:
                    a9:f9:ac:99:be:7e:8d:dd:2a:e5:c0:1e:b7:b7:8c:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DD:1C:3C:F6:B3:6C:10:FE:3B:47:68:19:1D:4A:10:FE:F4:D4:24
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ac:dd:60:9e:ca:31:d5:af:50:84:f1:28:89:bb:10:7c:7d:
         72:98:81:17:77:80:89:e6:2b:47:78:4f:35:04:11:71:b6:21:
         27:10:e7:15:d8:51:80:a1:1f:a0:bb:31:fb:4c:a7:16:25:a7:
         40:2b:d2:dd:76:de:2a:86:6f:c9:5d:a9:0d:ef:dd:00:e3:b7:
         70:01:76:e7:2f:b6:c7:f7:28:1e:4b:a7:7a:9d:30:96:fd:01:
         f5:6f:24:df:58:84:10:ec:63:12:ad:a2:ca:7e:65:ac:d6:4f:
         75:86:af:dc:9f:7f:5a:c0:3e:dc:e8:4e:73:df:db:30:80:2c:
         68:df:6f:33:d5:1c:75:5a:86:c4:3d:be:b5:fe:a3:7d:9f:1b:
         7f:f9:7d:d6:af:07:95:09:f6:e9:f7:d2:22:52:32:41:e0:cd:
         c0:5b:9d:fa:73:1b:e4:cf:98:db:29:a0:ff:4b:27:bf:b6:dc:
         4d:8a:20:86:81:4a:b9:8d:06:e9:de:1f:3f:b3:71:b0:80:0c:
         3d:b9:e2:7d:51:eb:4a:0d:0d:fd:a8:91:a2:8f:98:b8:60:46:
         f2:21:d3:94:38:ae:15:70:53:d7:90:04:48:aa:8b:d1:3c:37:
         b4:6c:b3:ce:45:0c:d7:bc:23:11:55:76:e1:7a:32:49:0e:fb:
         17:6a:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:33 2025 by rpki-client