Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File:                     Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier:          ZnXflTd22P601YjTnrx+xNvQ37xo9vKx96b3X+srvGc=
Subject key identifier:   96:C6:44:DC:E0:6A:85:A8:11:73:8D:04:97:94:30:C8:B3:04:C7:45
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer:       /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial:       01974A7A86ABFD3FE6114FD00F575E33CFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number:          0E30
Signing time:             Sat 07 Jun 2025 13:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:33 +0000
Files and hashes:         1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: FccFZ5ixxITeqvPGJEuvMhf1L27DT9gOzYVJN4q6tNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:86:ab:fd:3f:e6:11:4f:d0:0f:57:5e:33:cf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
        Validity
            Not Before: Jun  7 13:00:33 2025 GMT
            Not After : Jun  8 13:00:33 2025 GMT
        Subject: CN=96c644dce06a85a811738d04979430c8b304c745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:62:b4:da:0f:51:50:19:bb:d0:92:12:44:
                    66:eb:9c:93:4f:4c:23:72:48:50:8f:a6:de:6c:f2:
                    f0:c8:df:b1:e7:de:90:11:41:97:10:83:77:52:8c:
                    62:8c:ea:34:6b:ea:59:1d:dc:e6:27:60:02:ac:3f:
                    f4:a0:42:2b:c4:e4:8b:ad:8a:04:47:f5:ff:ca:2c:
                    9a:90:18:9f:41:8e:d3:cc:62:e0:57:4e:63:f8:d6:
                    27:1f:5d:04:32:83:94:32:5d:ea:5c:22:fa:d9:80:
                    b3:91:e5:4b:f2:e2:3a:5f:24:17:8e:d1:e3:c4:d2:
                    bd:0b:03:fd:f0:81:56:fb:14:3c:90:33:31:85:a4:
                    2f:4c:79:cd:9d:4d:c1:62:ae:da:9c:7d:6d:6f:71:
                    e9:b7:15:34:17:a3:4e:bf:16:92:5d:c1:be:07:2e:
                    64:b4:db:a7:63:77:be:76:73:8b:a3:0c:8d:bc:57:
                    23:f4:c0:c3:a7:fc:68:8c:27:e7:73:a5:33:c0:7c:
                    73:72:14:08:f2:67:96:eb:cd:32:ba:f0:7d:84:1c:
                    c4:8d:ce:3f:7d:3d:00:f8:da:fd:28:48:c4:cb:b7:
                    d8:23:3a:55:35:9a:71:67:69:8f:bd:8f:b1:f9:f7:
                    b9:bb:e9:4c:a4:c5:70:04:74:07:e9:1f:45:1f:7f:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:44:DC:E0:6A:85:A8:11:73:8D:04:97:94:30:C8:B3:04:C7:45
            X509v3 Authority Key Identifier:
                keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1c:51:ac:06:45:dd:56:d1:80:b9:09:ed:7d:42:0c:b5:e4:
         e4:81:1e:76:88:98:0c:a8:9f:38:04:81:47:36:b0:a2:4d:18:
         24:ff:52:47:b2:b7:da:79:e5:23:6a:22:ca:45:1b:6b:37:dd:
         f9:b7:a4:8b:15:92:05:a2:ad:ff:7a:7b:4e:48:29:83:99:7d:
         a4:9b:8f:b8:31:9e:48:00:60:92:60:4e:4b:d6:5e:4b:7a:da:
         25:8c:76:b4:f2:4c:40:7f:8c:cc:a6:83:7f:6a:7a:11:ce:af:
         c3:59:41:47:d7:f8:0a:29:9e:ac:81:96:96:a9:53:e5:60:e4:
         65:70:4c:c8:cd:64:f9:f1:c6:a8:34:00:5a:db:7e:f0:c0:3d:
         ad:99:ea:f4:a2:46:54:7b:4d:ac:e6:b6:f0:34:c1:c4:c8:a2:
         ac:50:cc:b5:f7:30:59:ce:20:e3:5c:27:a4:1d:f6:48:33:b5:
         42:5f:d6:11:05:37:0a:ea:4e:0c:69:6d:75:32:de:89:58:05:
         26:1b:b2:61:53:f8:da:a1:66:f5:98:64:fe:3f:7f:9e:b0:eb:
         64:ac:d4:4d:23:f3:15:7f:6b:6e:99:49:b2:02:09:a1:34:da:
         76:1b:06:29:6d:57:c1:b7:a6:c9:59:b1:ed:d2:dc:08:e3:68:
         6f:0a:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:43 2025 by rpki-client