Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File:                     Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier:          Ozxc3YCNxHhoA3FpTMxF7jLW6KUhUpSUCDdD04FjYQ4=
Subject key identifier:   93:C6:D7:FF:E9:42:0D:F6:39:86:C8:40:0A:7C:1A:91:15:D3:7E:F6
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer:       /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial:       019849654AEBDA19D174794C05E1DF5EC369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number:          0792
Signing time:             Sun 27 Jul 2025 01:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:31 +0000
Files and hashes:         1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: mTLJI7ZlC+M6EcyY4LxE9wjWlRjWU67Okmum+XDO7Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:4a:eb:da:19:d1:74:79:4c:05:e1:df:5e:c3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
        Validity
            Not Before: Jul 27 01:00:31 2025 GMT
            Not After : Jul 28 01:00:31 2025 GMT
        Subject: CN=93c6d7ffe9420df63986c8400a7c1a9115d37ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:3c:68:a1:9b:1e:6e:c8:ed:e8:35:2e:ef:
                    08:7a:57:3b:c8:1f:24:69:7f:d7:ec:13:06:69:12:
                    30:90:db:96:a9:05:45:0a:63:18:c2:95:63:fd:11:
                    4f:bd:c7:9f:8f:f2:4b:7c:88:b9:4a:ad:da:3b:83:
                    b3:f8:0a:f8:d7:44:b7:29:31:d9:04:bc:65:13:0e:
                    5b:ed:73:f7:ef:db:56:97:c9:1a:16:bc:be:ea:c3:
                    e9:5f:e8:e3:65:80:0e:49:7a:81:39:c2:8e:e6:14:
                    72:95:e9:ab:86:9d:5c:db:0b:c8:33:bb:f4:63:98:
                    6d:74:d1:08:d4:f6:83:07:f0:6f:b2:12:47:18:26:
                    b3:3b:91:94:e8:e5:53:59:79:ea:56:4f:b2:30:ff:
                    79:d8:56:65:75:ba:b5:df:2a:2b:10:bc:5a:a3:c5:
                    fe:3e:b3:a8:bb:63:9d:e5:fc:43:a3:27:cd:6a:7a:
                    ca:7e:0f:21:bb:4e:83:df:5a:fe:aa:de:56:56:d5:
                    12:43:25:c0:ce:15:f0:52:13:93:9b:f7:1a:b7:df:
                    d1:f9:55:9a:96:52:8b:7b:32:ba:19:db:17:ec:f3:
                    a9:3d:7f:95:c3:9e:67:ca:d0:e6:4f:0f:89:ba:6a:
                    c8:2a:36:c9:97:a7:a1:a3:40:74:ac:a6:92:b9:f1:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:D7:FF:E9:42:0D:F6:39:86:C8:40:0A:7C:1A:91:15:D3:7E:F6
            X509v3 Authority Key Identifier:
                keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:6b:72:c0:0b:35:2b:44:83:e3:e3:8d:35:be:a8:18:f8:
         ec:e3:c7:f4:87:c8:4b:7a:22:03:3c:77:21:41:0a:b9:fa:9b:
         d0:3a:1a:d1:4b:15:c6:44:59:3c:9f:c3:2e:cf:a0:ba:69:0b:
         cf:3c:3b:a0:d6:0f:75:08:5c:c1:42:ca:d7:20:e2:25:08:5e:
         40:95:26:0f:62:29:a4:7e:a8:9e:77:f6:91:25:ba:3a:76:d7:
         89:c7:13:1b:40:6a:15:9f:01:80:7b:90:cf:27:75:6f:e3:3d:
         cf:7c:80:dd:c1:6b:70:f0:00:49:48:62:11:27:92:40:9e:ed:
         bd:e9:3a:42:81:9c:41:8d:d8:e5:d5:50:06:b2:23:d3:96:3f:
         a8:42:96:5a:14:f2:e8:54:09:15:85:e5:02:ce:57:9a:da:44:
         6b:03:7c:f2:f2:f6:ae:42:62:3f:b8:41:fa:79:9c:c2:ae:17:
         10:39:e3:8f:d7:27:87:67:52:c6:c9:63:fc:b0:02:0a:82:aa:
         85:04:ea:2d:66:de:0d:31:66:0a:15:91:5c:13:a9:99:4f:7d:
         b9:48:a9:89:67:24:ed:0f:a6:de:8c:1b:74:8e:9f:b9:1e:6f:
         e0:49:dc:12:3f:e7:33:9c:49:61:88:3f:8a:05:16:3a:6c:de:
         6c:74:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:19 2025 by rpki-client