Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File:                     ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier:          jYtcowBGRbRs1GqUhUzKqesNLks7u/iCjdbpYbsDL3Q=
Subject key identifier:   C2:7F:1E:33:03:10:09:34:0A:1D:F6:EB:55:66:B3:4A:C0:E9:45:EE
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer:       /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial:       0197CBDFD4C0A6347D4C2A6DB5D41D08BDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number:          0F7D
Signing time:             Wed 02 Jul 2025 16:02:13 +0000
Manifest this update:     Wed 02 Jul 2025 16:02:13 +0000
Manifest next update:     Thu 03 Jul 2025 16:02:13 +0000
Files and hashes:         1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: Wdryg5rZUn9CCjMB+JdFMVKurhL1789W/jXfpXBn53g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:df:d4:c0:a6:34:7d:4c:2a:6d:b5:d4:1d:08:bd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
        Validity
            Not Before: Jul  2 16:02:13 2025 GMT
            Not After : Jul  3 16:02:13 2025 GMT
        Subject: CN=c27f1e33031009340a1df6eb5566b34ac0e945ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:9c:81:19:37:65:f3:ca:78:7d:f2:9d:32:
                    fc:f7:85:d8:bb:e3:5f:17:40:20:8a:0f:00:04:bb:
                    a9:44:c6:7d:8b:8e:51:ed:58:e4:6c:91:b4:1b:93:
                    31:2c:ba:82:f5:c4:75:a6:4d:7c:46:93:ad:f9:17:
                    20:f1:e2:43:90:c7:5f:26:f4:6e:2e:e5:9f:0e:27:
                    7e:cb:f0:6f:11:b1:6d:9b:3a:8b:22:7d:65:0d:08:
                    97:29:aa:5e:6b:93:3c:57:ba:c4:99:e6:f3:1f:2a:
                    df:51:70:d5:57:b9:58:6d:00:38:8d:5e:9e:ee:ff:
                    75:4e:20:d3:55:1a:52:23:dc:bc:d5:36:9d:34:43:
                    55:44:05:39:74:55:5b:ab:ce:6a:50:07:0a:fa:05:
                    28:f0:9f:6d:b0:0c:bd:72:eb:a0:cd:46:98:2e:56:
                    b1:15:05:de:7e:7a:d5:42:02:b4:dc:2f:bb:08:6f:
                    c2:e1:54:b0:48:a7:9a:58:6a:94:b1:bd:1d:1d:4a:
                    7f:c7:f2:4d:9e:5e:50:6d:ce:61:8d:5d:d4:7d:df:
                    8c:7f:53:2c:45:c6:75:f1:1c:16:79:2e:94:92:86:
                    02:31:4b:90:5d:50:37:0c:39:94:9b:df:2f:b8:fe:
                    f1:de:ab:e4:0a:2b:7e:80:39:c1:1a:f4:14:d5:2b:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7F:1E:33:03:10:09:34:0A:1D:F6:EB:55:66:B3:4A:C0:E9:45:EE
            X509v3 Authority Key Identifier:
                keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:01:44:46:c3:fe:ad:5e:b3:30:93:52:22:76:61:4e:9d:
         a4:1e:64:06:88:51:2e:5e:9b:b8:33:72:58:10:4e:a9:a3:1e:
         1d:c6:e0:86:32:ec:49:64:4b:a4:00:53:0b:60:da:8c:8c:52:
         1d:f5:9d:72:f9:ab:03:c5:45:03:f9:e7:37:25:1c:be:39:27:
         a1:6f:c9:d3:30:e7:9d:7d:b9:ca:af:3f:72:4e:b5:6d:04:a2:
         30:17:32:9f:05:3d:18:fb:a6:31:2c:05:82:67:b9:6b:cd:80:
         c0:b4:2f:33:f2:b0:19:aa:38:97:cc:14:df:a6:eb:74:f2:05:
         77:c9:c3:58:27:f7:21:a1:cb:08:33:a1:75:eb:a5:83:0d:a1:
         53:4a:a7:c9:4d:a3:50:95:11:f6:c7:23:12:37:a7:15:00:7b:
         87:3f:b1:e1:06:ae:f8:85:e9:a8:9e:1f:8a:04:72:bb:f6:64:
         c4:0e:1c:d2:19:b0:61:f9:63:8c:6c:61:3a:4a:f4:3f:c6:80:
         f3:d2:9c:07:8b:67:eb:3a:d6:b5:1f:c6:f5:4a:15:52:f0:c8:
         d5:5b:fd:ed:25:54:1f:ea:0f:07:4a:d3:b4:10:3b:b0:34:08:
         b0:fa:75:7b:32:ff:0d:0e:11:f2:77:8c:a8:b0:c9:9f:f4:fc:
         68:53:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:38:02 2025 by rpki-client