Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File:                     UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier:          V+Dc6retlprqN6kXP6NL2MosmpviBh0P8pCafkpMkDE=
Subject key identifier:   80:CC:6E:44:13:59:DA:DA:4D:81:94:E0:6B:81:0F:83:E0:82:12:6A
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer:       /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial:       01984776E26DAE1D837B460D75345358EE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number:          0CE5
Signing time:             Sat 26 Jul 2025 16:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:30 +0000
Files and hashes:         1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: oz7QtXue6p3/uMrgeWjaJOIiC4IML35Ock3daEb4DSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e2:6d:ae:1d:83:7b:46:0d:75:34:53:58:ee:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
        Validity
            Not Before: Jul 26 16:00:30 2025 GMT
            Not After : Jul 27 16:00:30 2025 GMT
        Subject: CN=80cc6e441359dada4d8194e06b810f83e082126a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:61:ac:62:e8:da:d4:6d:21:f9:f9:97:fb:
                    62:d8:ad:37:8f:8c:18:2c:33:26:62:91:3d:55:f9:
                    80:64:73:d9:fc:73:92:2d:ab:e6:26:da:25:a2:2d:
                    d7:e9:c4:16:61:e0:81:9b:8b:04:00:b5:a0:9e:ff:
                    69:03:b0:d7:d9:e2:f4:86:1c:78:e4:de:99:c6:0d:
                    af:ef:df:b1:17:5a:6e:13:42:ad:aa:bc:84:92:52:
                    eb:95:3a:ed:95:64:0c:bd:96:8f:3d:31:77:db:7f:
                    ca:9f:db:41:17:33:ff:77:ab:7f:eb:7d:31:23:6a:
                    2b:13:76:c6:46:0c:9a:42:97:a5:21:ad:ab:79:58:
                    12:a6:03:fd:2d:1a:c0:5d:5f:11:51:1e:52:d9:22:
                    92:57:26:df:c3:59:f8:85:3b:67:dc:4b:56:6b:67:
                    5d:d4:bb:db:85:4d:9f:11:e4:04:04:ff:d0:36:8a:
                    44:bc:9f:df:b4:5a:fd:0d:53:ff:69:ff:b1:b5:8d:
                    98:a6:61:12:e1:80:eb:f8:a2:04:b7:16:53:76:0b:
                    87:47:81:8a:97:20:56:73:2d:47:7f:a8:c1:14:ea:
                    72:ad:aa:e6:c1:42:d4:9e:29:09:ec:ce:3e:d3:51:
                    63:20:64:57:3e:ec:3e:19:d4:d1:7b:3c:f4:72:13:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:6E:44:13:59:DA:DA:4D:81:94:E0:6B:81:0F:83:E0:82:12:6A
            X509v3 Authority Key Identifier:
                keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:98:c1:47:0e:28:fd:6f:f7:e7:e2:1b:e2:05:7c:4e:26:a2:
         82:d4:fa:4a:1a:39:e6:65:6b:95:a3:5a:30:71:75:11:80:8f:
         6e:e3:bd:9a:3a:32:f0:a5:97:7d:e2:c6:f6:bf:c3:ae:af:cd:
         4e:f1:dc:2d:3e:24:24:86:2b:34:1e:73:54:f4:cb:c1:d1:7e:
         7e:68:b9:12:15:1a:cb:86:9f:93:d5:0d:08:b5:a6:d3:7f:7d:
         28:47:90:46:70:3c:bd:ff:65:f6:60:6d:50:fc:3a:8a:79:ef:
         df:c2:a7:aa:05:20:a9:4c:f9:cd:5c:46:5b:24:d8:cc:9e:07:
         a0:80:8e:4d:09:86:32:23:a9:42:e3:ec:ed:21:f9:49:09:58:
         4a:31:37:dc:1d:da:e7:59:b2:82:43:f4:54:e3:00:9a:1f:c0:
         e6:9b:d8:e6:35:ce:1a:2f:1f:ca:41:19:92:40:dd:10:c7:59:
         4d:91:37:50:97:bd:48:14:4e:d1:37:e3:74:cf:37:7c:db:16:
         34:d2:ed:03:8c:9e:a6:43:67:28:6d:0b:71:89:01:7d:d0:2a:
         8a:5d:47:f0:8a:88:51:a2:fa:41:61:ef:4b:c4:3c:d9:60:0a:
         cb:6a:2d:4d:89:ee:91:97:2d:ec:f1:b5:15:cf:e6:f1:df:3a:
         50:24:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:18:10 2025 by rpki-client