Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File:                     uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier:          /noQtWXhBA83z8PLLK22K4mso0qVUhUsz9GQV8FOTZY=
Subject key identifier:   B2:89:13:05:7C:B9:8A:41:F0:7E:91:76:E8:33:9A:05:96:2F:32:7B
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer:       /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial:       01984965CA29194BF29B1B5C3508663E29E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number:          0986
Signing time:             Sun 27 Jul 2025 01:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:04 +0000
Files and hashes:         1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: ZufxLJOuFHuoXZUYu5As2adF3meunNUsUaFUHliO3JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:ca:29:19:4b:f2:9b:1b:5c:35:08:66:3e:29:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
        Validity
            Not Before: Jul 27 01:01:04 2025 GMT
            Not After : Jul 28 01:01:04 2025 GMT
        Subject: CN=b28913057cb98a41f07e9176e8339a05962f327b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:97:80:f0:13:9f:e8:2b:1e:2e:91:2e:7e:
                    47:16:74:9f:fa:ed:d2:75:52:73:c2:dc:34:06:fd:
                    6b:45:56:ff:33:4e:88:11:01:33:df:5c:fa:09:4e:
                    bc:9a:35:8b:4a:56:92:66:01:b1:84:19:dd:3d:a9:
                    ef:5c:57:dd:62:be:8c:07:a2:81:40:25:3b:c0:cc:
                    fd:c3:73:f6:b7:df:a5:38:e7:f2:a0:1e:62:58:df:
                    ce:3c:f9:4a:e2:8c:50:9b:37:6b:8f:f2:20:b8:52:
                    1b:c7:56:28:a6:00:6c:22:5a:4a:fd:cd:82:4c:9f:
                    f2:ba:93:2b:68:a8:23:b8:90:bc:cc:9a:07:f1:c7:
                    ca:58:32:be:f4:9a:55:a3:bd:69:18:f6:d1:71:1c:
                    85:74:dc:cc:0e:f3:d7:96:72:38:14:75:d9:c4:09:
                    a9:3a:84:42:cf:b8:86:ec:8a:59:20:3b:27:1a:a9:
                    39:ad:57:9b:ff:5d:3d:35:c2:12:1e:16:72:34:67:
                    74:e4:7a:04:8c:75:a9:78:59:6d:41:77:f5:4f:d3:
                    e9:dd:42:1e:08:9b:23:af:a8:6b:62:c1:01:b1:02:
                    a6:d5:ef:9b:18:67:ad:e7:c7:11:b2:94:c9:45:a2:
                    60:92:36:3f:47:5e:32:ad:b8:61:b3:76:f2:ef:b7:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:89:13:05:7C:B9:8A:41:F0:7E:91:76:E8:33:9A:05:96:2F:32:7B
            X509v3 Authority Key Identifier:
                keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:70:5f:ff:9b:c1:11:11:ea:00:d0:2e:3d:fc:07:b4:9a:
         3a:11:15:5d:9e:c6:d6:6f:51:79:22:32:d4:a4:39:97:f9:dd:
         44:87:d1:9f:15:32:86:ea:fd:f6:2f:97:6f:e1:23:a0:9c:39:
         c5:69:99:cb:15:86:c5:f2:53:f3:ee:18:7b:40:6f:7e:04:22:
         79:88:e6:94:74:e0:f9:df:72:64:57:f4:3d:e3:43:53:39:f8:
         61:8c:20:62:33:2d:aa:75:b6:f1:18:90:d4:7d:a0:6a:5f:08:
         c9:a0:4e:1f:80:3e:ce:71:ba:90:16:f2:3f:f4:5b:32:11:46:
         50:20:90:8a:5e:79:6e:87:17:88:54:22:b3:80:df:df:5a:9b:
         58:32:fc:05:9c:3d:14:38:9f:83:db:83:8f:d8:b4:f1:1a:4a:
         f8:a9:4a:0e:21:47:df:ea:da:fc:58:2a:e4:77:09:33:d9:42:
         20:bd:ea:34:f5:37:8b:3f:a9:96:3e:48:40:1a:62:25:32:5c:
         b0:5b:e4:9b:6f:9f:cb:da:67:cf:27:22:fe:60:da:77:70:7a:
         98:16:33:11:0c:51:fb:36:8f:a0:ab:dd:f9:67:a8:07:e6:3c:
         d8:20:f2:c8:13:53:17:be:fc:a8:f1:cd:ca:2f:a5:59:33:fc:
         49:0a:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:01:18 2025 by rpki-client