Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File:                     U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier:          MhrtBYcdje5joPY3H+qkdO1vvVqkjHx4QwsuPX8EXNU=
Subject key identifier:   0E:60:95:9C:18:49:4E:77:3B:2B:BD:F3:62:67:E4:D4:73:F7:B6:E5
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer:       /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial:       019880F92B89B5B4804B80BD98642828DFB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number:          04DF
Signing time:             Wed 06 Aug 2025 20:01:09 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:09 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:09 +0000
Files and hashes:         1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: pvfJmX9iR4ogFFFNDmvfGgcCo8MjB40+BjyUAsZrJ30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:2b:89:b5:b4:80:4b:80:bd:98:64:28:28:df:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
        Validity
            Not Before: Aug  6 20:01:09 2025 GMT
            Not After : Aug  7 20:01:09 2025 GMT
        Subject: CN=0e60959c18494e773b2bbdf36267e4d473f7b6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:72:d6:05:f6:0c:03:20:ec:bd:ee:70:56:
                    a1:45:8e:e5:f2:50:ab:8d:d9:9b:ed:61:89:e7:ba:
                    7b:ef:5d:af:46:c5:aa:b4:3b:c3:9b:19:e8:80:1f:
                    a8:2e:93:3c:c6:81:91:90:ff:4e:7b:19:7e:b4:e9:
                    c9:07:c4:52:11:ae:48:e2:fd:2b:a1:87:01:29:27:
                    ed:33:48:eb:6f:c7:83:3a:dc:25:4e:b1:0d:9a:94:
                    c7:cf:fb:c5:21:01:2e:f4:b5:e7:6c:0a:e6:1c:cc:
                    16:eb:7a:98:6d:75:fb:b2:47:8e:40:29:88:1e:32:
                    61:5f:6e:d8:38:ca:f6:19:e3:82:7a:22:c2:82:af:
                    04:26:d6:c3:6b:17:ee:ce:ef:e2:a0:f4:6e:a2:6b:
                    85:7c:f8:26:ff:1d:1d:0a:ce:4e:ac:a8:a2:56:0d:
                    95:59:49:2e:b5:32:66:87:98:81:e6:07:56:eb:a6:
                    94:22:b2:4f:7a:4b:45:8f:25:46:8e:99:e5:a7:ce:
                    12:81:15:ca:2e:7c:3e:b5:53:a8:ed:06:6e:e6:20:
                    39:47:b5:d1:f7:df:f9:30:54:1e:90:39:3a:14:b5:
                    f2:35:2c:64:d1:13:55:b3:15:28:98:55:aa:7a:f9:
                    96:24:cb:47:7d:87:2b:6c:36:4a:01:b4:8d:54:a0:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:60:95:9C:18:49:4E:77:3B:2B:BD:F3:62:67:E4:D4:73:F7:B6:E5
            X509v3 Authority Key Identifier:
                keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:b8:b9:bc:6c:55:d6:48:77:c5:0e:43:fc:e7:3f:60:d7:
         b3:3d:0c:70:d8:55:fe:3e:79:e5:17:82:ec:ec:31:64:04:a5:
         fb:96:82:a7:11:be:86:c0:35:be:83:e0:ef:5e:f7:dc:6a:ad:
         95:1b:3d:e2:ef:f8:ae:9b:d5:c9:2f:58:43:33:e7:05:a3:fe:
         58:00:22:5f:cf:24:c0:2d:50:34:24:97:49:c5:db:86:fd:5a:
         49:76:d1:fc:7a:a8:59:29:50:df:13:fb:28:c2:c9:1b:c9:be:
         4b:2c:08:d1:f2:c2:0b:76:5f:5a:9c:d8:bc:fc:26:5f:b8:64:
         56:5f:75:a5:51:0e:e6:8e:30:4f:6c:0b:62:fa:8f:cd:b0:55:
         43:f7:0c:f5:83:e0:40:28:51:5d:12:be:57:fc:cf:64:e5:ab:
         2b:2b:a9:18:df:fe:94:47:2a:08:46:10:51:09:c8:e5:a7:de:
         2d:b5:2b:df:e2:eb:14:2d:a3:24:88:35:aa:be:35:5d:f4:0d:
         c8:6b:ea:60:53:f7:83:26:79:1d:4b:3c:22:84:47:24:04:fb:
         37:41:4b:3a:36:3e:c7:9f:de:04:75:b6:f0:34:65:f9:9a:b6:
         a5:54:70:8f:69:b5:59:18:99:4f:e5:4f:71:53:ac:80:76:0d:
         66:41:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:08 2025 by rpki-client