Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          oiPIexQ3mIKN0pb3WDlWjHC/dK1fsW2L59QbZyXM9NE=
Subject key identifier:   E3:0D:85:70:ED:BB:A3:F4:B1:DE:AA:18:B2:7F:BD:AC:90:06:26:52
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       019847770FE754ECAA512790AC82C3FD7397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0B0B
Signing time:             Sat 26 Jul 2025 16:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:41 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: 9iTXNDgetV5Po+E8e3qremfezeJnJXx287Exq2GU1Ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:0f:e7:54:ec:aa:51:27:90:ac:82:c3:fd:73:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Jul 26 16:00:41 2025 GMT
            Not After : Jul 27 16:00:41 2025 GMT
        Subject: CN=e30d8570edbba3f4b1deaa18b27fbdac90062652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:f7:51:e6:a2:78:e5:83:5b:70:ac:44:38:
                    c5:af:69:56:e3:90:44:9f:52:89:54:d1:b6:cc:78:
                    db:59:24:4f:20:c5:bd:fa:5e:81:9e:a0:00:b2:4e:
                    c2:37:a1:71:57:c3:cd:15:10:86:73:1e:5e:ea:11:
                    7c:31:1a:c1:5f:06:e5:42:e2:28:2d:b0:29:52:a8:
                    04:23:8d:65:1c:a8:16:17:5c:5a:6c:3a:85:bf:85:
                    72:11:6d:d1:19:26:c9:b1:2d:e1:b9:a5:2d:7d:37:
                    fa:25:c8:44:3b:d7:7d:f0:c5:23:ef:2e:ec:be:83:
                    52:a0:ce:7c:4b:f2:bd:70:17:44:59:42:71:94:70:
                    94:1b:ed:8b:a9:9c:85:a2:4c:cc:11:73:2e:07:99:
                    00:9d:b5:96:43:c7:a3:56:63:36:83:3d:22:a0:af:
                    e6:cf:ed:78:c0:90:6e:aa:6c:38:40:d5:00:fb:69:
                    df:f3:31:76:32:a3:e1:00:74:e6:7d:e5:86:07:14:
                    0b:d0:86:36:b8:bf:10:70:63:3f:41:c8:04:67:ad:
                    5f:78:1d:8a:38:6c:3d:d7:dd:d7:c6:67:f2:42:c2:
                    53:28:d2:fc:d7:a1:8f:38:ee:78:63:cb:34:83:46:
                    75:8e:1c:ae:eb:91:86:79:db:79:84:08:a1:7a:77:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:85:70:ED:BB:A3:F4:B1:DE:AA:18:B2:7F:BD:AC:90:06:26:52
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2a:29:d5:a1:74:2c:63:c5:ef:15:40:6a:82:c9:fa:f3:66:
         b9:e5:30:b5:65:b7:b7:b2:f4:3d:bc:1e:9e:9b:ee:b0:8e:15:
         5f:cc:f2:d7:a7:9c:7f:14:0c:d0:b2:04:75:86:c4:23:90:c7:
         04:c6:52:7d:44:aa:02:c8:96:95:67:32:34:87:5d:96:f2:46:
         f6:d0:7c:c0:3f:4e:26:24:81:b2:0e:51:f5:c3:a1:4d:1a:02:
         bc:89:45:e0:a7:19:9f:a9:f1:75:8a:24:72:21:b7:3d:89:58:
         49:d2:c8:89:da:49:1b:00:5d:b2:71:a1:43:e0:f5:34:98:17:
         3c:fc:db:a0:4d:a0:b4:f6:0c:27:6b:cc:d1:a7:ec:5c:70:83:
         05:e4:66:d6:72:d7:cf:18:01:bf:c2:a9:2b:01:c6:1d:81:f2:
         f4:99:c0:ee:9e:d3:0e:f5:3a:63:3f:2e:06:82:f9:5e:91:36:
         a7:a9:34:63:7e:f3:3b:07:ba:fd:4a:74:92:24:b1:f0:9e:83:
         9a:85:df:ac:aa:0d:53:ef:b9:32:c4:8d:b4:8a:5b:11:84:1a:
         18:35:1d:11:a4:2c:d8:6f:7f:06:33:dc:58:ea:2f:30:44:a5:
         79:1a:0d:91:da:21:54:2f:db:9c:29:e8:d2:fe:d1:87:63:6c:
         42:32:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:11 2025 by rpki-client