Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File:                     UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier:          TATipqX3mmQVEgS3BixtRe5k11tJ7ziceElFLxHCWiI=
Subject key identifier:   9E:5A:D5:21:F6:C0:1E:4B:79:E1:C7:9A:D0:66:82:64:DE:E3:DD:CD
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       01964DEC85E595F2307ABF04672EB4EF0ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number:          085E
Signing time:             Sat 19 Apr 2025 12:01:08 +0000
Manifest this update:     Sat 19 Apr 2025 12:01:08 +0000
Manifest next update:     Sun 20 Apr 2025 12:01:08 +0000
Files and hashes:         1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: kThN5FJQos9spWzNwNmQRhzRjQ28dDS2dyNeHXv27/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:85:e5:95:f2:30:7a:bf:04:67:2e:b4:ef:0e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: Apr 19 12:01:08 2025 GMT
            Not After : Apr 20 12:01:08 2025 GMT
        Subject: CN=9e5ad521f6c01e4b79e1c79ad0668264dee3ddcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:9e:bd:47:ed:7c:b6:51:5b:ab:67:87:c1:
                    76:dd:78:0d:67:58:fa:8f:44:a9:d8:e6:ef:98:23:
                    c0:32:5e:eb:65:4b:c8:06:1f:55:44:0a:8d:ac:07:
                    1e:5a:de:e6:56:fd:3c:9b:11:9c:e2:8e:5b:22:34:
                    dd:ad:96:01:24:43:c6:49:22:78:32:58:06:ae:3e:
                    af:9c:bf:c9:8e:c8:13:51:09:bd:70:d9:66:10:a7:
                    81:b0:e6:8d:45:c7:1d:c9:e7:ea:8f:fa:59:d2:98:
                    bc:ce:be:c4:b3:f8:e1:7d:4e:ac:5b:ea:5e:90:af:
                    24:91:b0:7e:d1:4f:da:08:83:60:1d:72:76:2a:26:
                    07:f6:44:92:a4:1f:ae:c4:dc:58:75:a5:a2:06:26:
                    02:ae:b7:a7:22:91:4f:d1:42:17:c7:4e:63:d4:2b:
                    3e:bd:2f:17:02:3f:4d:3d:c8:05:4b:ae:c5:cf:ed:
                    90:3f:90:78:b6:f0:28:88:0b:e2:c3:47:a2:f5:14:
                    82:95:98:7b:f5:8f:a0:be:4e:45:03:75:13:34:54:
                    52:0d:77:fc:89:15:a9:79:02:85:a5:d3:41:1c:d2:
                    92:a7:e5:5b:5a:3c:c5:bb:d6:cd:8f:71:95:75:dc:
                    eb:51:84:52:51:e7:7a:1b:03:17:3f:25:00:ca:c2:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:D5:21:F6:C0:1E:4B:79:E1:C7:9A:D0:66:82:64:DE:E3:DD:CD
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:b7:2b:9e:d2:73:84:68:d0:ef:83:85:ea:9d:a2:92:4a:
         1e:dc:53:15:9d:5d:05:e0:77:a5:2a:64:b5:c1:50:45:a1:f7:
         8b:96:9a:0e:2d:7c:21:24:16:d5:0b:94:ea:42:7b:31:b8:24:
         f5:40:8f:da:15:83:74:4e:89:19:87:66:ba:8e:e4:1d:0d:f5:
         c6:da:54:8c:dd:36:34:5a:94:10:3d:d9:d9:32:a5:8b:a2:98:
         71:4b:de:e7:0a:ce:8b:1b:59:d8:df:db:76:41:f7:f7:eb:41:
         5d:12:59:ee:bb:46:30:59:ce:f2:af:84:3f:cc:d3:ed:10:d8:
         1e:3f:29:65:bf:44:64:83:4c:0d:4e:f2:56:3e:9c:a8:44:62:
         fe:1d:6d:59:b5:d4:ab:a4:aa:a1:dd:5b:d6:a6:0c:29:cb:d4:
         7b:25:77:ff:68:73:dc:9e:87:97:a0:7c:43:11:e3:d9:01:42:
         12:5c:61:de:6e:70:de:76:8c:1e:a1:a6:5b:28:7b:5a:0d:ae:
         59:82:18:3a:fc:d9:5c:c0:d9:7b:1d:1f:3d:ed:95:e4:b0:6a:
         08:84:88:f5:8b:0a:f6:31:41:28:d9:1b:07:ea:32:8e:6e:9d:
         da:e4:0f:8f:04:4c:2e:6d:b8:0b:5f:15:15:70:74:26:17:c4:
         1b:7a:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:08 2025 by rpki-client