Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File:                     UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier:          R+NfE7NXvNXesH65pUU6kjzPVVCp/1auJN6xFVAbbHk=
Subject key identifier:   06:6E:33:6C:8B:29:31:3C:64:62:47:76:39:90:FE:76:36:B1:2C:89
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer:       /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial:       01983BE1990AFB207552296A15FD3002F637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number:          30
Signing time:             Thu 24 Jul 2025 10:01:37 +0000
Manifest this update:     Thu 24 Jul 2025 10:01:37 +0000
Manifest next update:     Fri 25 Jul 2025 10:01:37 +0000
Files and hashes:         1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: ulONg02xSvs5rpodZ3SwDR9lS0kvRwljoVg8VQEej5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:e1:99:0a:fb:20:75:52:29:6a:15:fd:30:02:f6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
        Validity
            Not Before: Jul 24 10:01:37 2025 GMT
            Not After : Jul 25 10:01:37 2025 GMT
        Subject: CN=066e336c8b29313c646247763990fe7636b12c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:f8:51:d3:1b:2e:15:05:50:05:89:92:c2:
                    c7:82:08:56:9a:eb:7e:b2:7e:d5:39:a9:cc:69:c5:
                    75:7f:cb:75:aa:db:e2:b1:46:ef:e2:1a:59:11:4a:
                    c3:47:e0:76:0c:4a:ed:4f:41:ce:dc:57:ee:61:32:
                    e8:9b:ca:37:bd:9d:d8:cb:a6:1e:c6:c1:07:d7:e8:
                    c3:a1:77:34:89:a2:f0:2d:c8:b7:39:82:88:31:2c:
                    69:87:74:dc:8f:01:db:15:99:89:53:97:73:8c:83:
                    a6:16:14:c8:4c:6d:d3:66:9e:3e:25:2d:d4:e3:eb:
                    08:dc:08:20:8d:6e:55:b8:6f:05:f1:9e:3f:5d:2f:
                    d2:30:a1:48:0d:ab:94:31:b5:51:2a:6a:46:5e:60:
                    51:0f:92:d9:67:11:10:76:22:98:28:6a:a5:09:cf:
                    de:bd:56:84:f6:27:23:27:49:c7:6d:c9:05:e4:0e:
                    77:4d:f1:6e:82:4e:ed:b6:44:9f:cb:98:79:ff:c2:
                    4c:f2:8f:48:93:8a:40:bf:c3:a4:ad:c8:66:58:bd:
                    aa:6b:83:1b:c4:f0:bb:cb:77:6e:9c:c6:e8:59:ac:
                    d1:e1:87:e1:42:70:aa:1a:87:5f:24:c6:29:c7:77:
                    1a:27:ee:3b:4a:67:df:78:51:4d:cf:72:d0:4b:77:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:33:6C:8B:29:31:3C:64:62:47:76:39:90:FE:76:36:B1:2C:89
            X509v3 Authority Key Identifier:
                keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:ee:44:47:39:1c:19:b7:60:b1:e3:9a:ad:4b:43:a1:d5:
         0d:38:09:e6:e1:ad:56:c8:95:51:75:c5:23:96:ae:0f:e7:7c:
         9b:92:42:86:2c:75:82:5d:67:6f:70:3d:6d:29:49:90:c4:92:
         0b:7d:3b:64:dc:e6:11:13:15:ba:ca:25:87:e5:0d:75:30:6f:
         a5:e4:c7:0d:42:cb:2d:0d:89:2a:24:bd:e5:72:74:c1:31:f2:
         50:5e:21:b9:5d:57:fa:b2:9c:de:37:70:18:06:d8:0b:9b:0b:
         11:55:fb:3e:f1:1d:c9:2a:c7:a7:5b:38:91:79:15:60:fd:e9:
         a4:fd:21:fa:06:6e:92:b5:6c:2b:96:3c:cf:76:07:1b:b8:90:
         59:41:45:9c:4f:35:69:98:7c:f4:27:41:f1:24:b9:9a:11:71:
         85:fe:1e:86:40:78:d8:b6:76:f5:64:4c:60:43:e1:de:35:ca:
         e3:fa:66:7c:17:09:93:46:81:28:15:68:e0:6c:4a:ac:67:38:
         09:9a:46:10:df:a3:ac:7e:de:b3:20:99:46:6d:fb:63:18:d8:
         a7:e7:09:ff:3d:27:a3:b8:5e:2b:c1:70:a3:1d:ee:af:6e:ee:
         b8:f8:3a:43:a8:12:ff:84:dd:f5:4c:bf:29:9c:e1:aa:36:15:
         e1:16:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:14:27 2025 by rpki-client