Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File:                     ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier:          I4gZoOJK9bU/S4ASwol38gKAqsX4CkudMscY4GaNbZo=
Subject key identifier:   01:4A:9F:F0:57:C8:03:1F:C0:E1:88:2D:EF:E2:8A:3D:4D:2C:35:C3
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer:       /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial:       0198499BE4EB7F7853DCC0D60E867F0E3F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number:          137A
Signing time:             Sun 27 Jul 2025 02:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:09 +0000
Files and hashes:         1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: C1SH8nEGLHCIsS41/RZB3EwNm9aeQn490JSJ2GEOOAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:e4:eb:7f:78:53:dc:c0:d6:0e:86:7f:0e:3f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
        Validity
            Not Before: Jul 27 02:00:09 2025 GMT
            Not After : Jul 28 02:00:09 2025 GMT
        Subject: CN=014a9ff057c8031fc0e1882defe28a3d4d2c35c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:6b:14:3f:42:5d:44:6a:7c:a4:91:f4:e7:
                    45:c3:b9:8b:da:2f:d7:0a:9d:66:ae:62:b8:17:26:
                    3d:32:58:08:61:f1:05:fa:9d:63:75:7d:05:95:b8:
                    51:a5:b5:11:59:cd:77:51:a2:d8:34:e6:93:e7:e5:
                    09:92:a0:5f:d5:c2:28:49:d8:39:8a:30:29:8e:48:
                    37:e7:48:14:73:76:15:27:d6:67:a9:77:86:ec:e1:
                    64:a3:66:8e:c0:e3:8b:39:f5:af:44:dd:89:75:57:
                    0d:76:a1:fe:c1:5a:8f:41:53:a4:48:fa:7c:cf:72:
                    f1:07:33:13:76:51:a4:b2:1d:cd:95:a1:87:df:f8:
                    fb:24:c4:8b:3e:58:eb:6f:bf:f6:0e:6f:96:5f:f0:
                    76:aa:d0:41:1e:a8:14:ef:25:55:79:ce:73:d0:4e:
                    ce:28:f9:ac:50:2a:ef:f8:fd:2e:c8:1c:c3:73:9c:
                    c1:57:e1:b7:b5:b3:e6:62:77:0a:63:f6:38:af:bc:
                    97:03:14:02:e8:69:c9:4e:d9:04:2a:df:00:ac:bc:
                    30:57:3c:e2:69:22:71:ff:8a:68:a8:29:3e:f1:b7:
                    07:95:9d:e6:fc:66:af:29:3b:aa:af:ba:a4:de:74:
                    b1:ff:5a:9a:17:70:82:09:82:78:4f:a6:e0:76:59:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4A:9F:F0:57:C8:03:1F:C0:E1:88:2D:EF:E2:8A:3D:4D:2C:35:C3
            X509v3 Authority Key Identifier:
                keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7f:61:96:74:01:5c:08:c7:7a:d2:3f:a4:bb:4c:28:85:ef:
         f0:06:3f:4a:bb:ec:a8:99:c0:70:b5:06:cd:4d:f0:6f:69:6d:
         6f:a4:81:57:41:8c:4a:a1:cd:61:11:15:b8:42:a3:fd:ff:a8:
         3b:c4:7f:b8:c9:57:32:90:da:c8:08:b8:c9:8a:33:e2:f8:ac:
         66:19:e5:6b:6c:15:ba:15:ea:fc:a7:f1:c9:a4:7a:18:c2:08:
         fb:94:00:2d:0c:70:54:f6:be:4e:50:93:8f:5d:ff:f1:57:98:
         1c:da:3e:14:75:e9:1c:ad:58:61:4f:9f:98:bc:2d:8c:74:96:
         70:52:e2:64:dc:7c:ce:ef:b8:eb:eb:6f:ea:49:bc:df:89:f3:
         88:5d:ed:87:e6:a8:77:90:71:9e:79:98:66:ba:a9:3f:cb:9d:
         9d:6e:26:ab:08:2c:b4:b0:e8:94:04:c8:54:0a:0d:78:f4:df:
         15:ff:d3:e5:4c:d2:76:e9:bb:b5:a6:25:59:0a:80:fe:6a:e9:
         c1:ce:31:1d:d6:d9:5c:b3:f4:c1:50:c2:e8:94:4b:a2:7c:9c:
         42:4d:bb:c9:dc:30:02:4e:53:2b:b4:8e:d4:81:73:82:14:b2:
         96:4d:fa:60:62:5e:bc:71:cb:96:fb:1c:04:0c:2e:c8:04:ba:
         b0:a1:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:00 2025 by rpki-client