Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File:                     uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier:          Hp+DWdn2sjCkMK11vKvvAdrBYhyUEVF0gyIcV3RWTbM=
Subject key identifier:   C2:8D:65:87:3C:71:4C:1E:82:48:73:24:6A:3E:3B:4E:DF:14:83:AE
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer:       /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial:       01974FA0DBF8CF15FDEB63C78D0582CD632B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number:          0AA0
Signing time:             Sun 08 Jun 2025 13:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:31 +0000
Files and hashes:         1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: a7cW3EPbzfaOqkWcAULjGvVSVzui4USeoqJx57tnTkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a0:db:f8:cf:15:fd:eb:63:c7:8d:05:82:cd:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
        Validity
            Not Before: Jun  8 13:00:31 2025 GMT
            Not After : Jun  9 13:00:31 2025 GMT
        Subject: CN=c28d65873c714c1e824873246a3e3b4edf1483ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:da:33:05:dc:15:6f:32:5d:4a:b3:81:e7:
                    0a:16:b5:59:77:df:26:66:e4:51:07:9c:3f:a1:1f:
                    64:8a:25:9f:fe:a0:22:8b:a5:11:88:47:19:a3:ce:
                    f9:07:15:3d:f3:1f:b9:a8:a7:a1:4c:11:94:fa:f5:
                    e3:7a:b1:3e:6c:25:7d:b6:5d:ab:fa:32:2d:ec:2f:
                    ba:5b:0e:ce:00:7f:70:6c:e7:23:dc:7a:cd:ca:fe:
                    de:18:c6:fb:74:c9:47:d1:ef:35:76:f8:de:20:33:
                    80:63:f6:27:be:6b:89:93:4d:92:20:ae:0d:5f:19:
                    60:bf:4e:6b:27:3b:4f:86:d6:2a:84:f9:3b:80:7f:
                    80:22:d4:fb:05:5f:66:48:6d:ff:68:d0:33:7f:6c:
                    1a:0a:65:f7:bc:ef:cf:92:88:7d:e2:d2:da:d9:fa:
                    5f:ff:87:91:a3:80:78:39:82:4a:de:a4:9f:f4:0d:
                    37:cc:67:aa:4b:93:f0:16:0e:d3:4b:29:8e:a7:21:
                    56:63:22:3b:35:37:79:e0:93:c6:04:ef:f9:73:48:
                    b2:47:23:eb:5d:f9:98:c1:f4:31:51:e3:d6:3d:b7:
                    e6:27:96:ab:1f:dc:76:91:0c:a0:34:53:56:63:7c:
                    1d:49:9f:79:3b:4f:9f:96:0d:c8:36:4f:5a:da:4f:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:65:87:3C:71:4C:1E:82:48:73:24:6A:3E:3B:4E:DF:14:83:AE
            X509v3 Authority Key Identifier:
                keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:bc:66:c4:02:3e:11:8d:51:8c:d6:00:a8:a0:a6:09:5e:
         06:8e:5b:b4:a9:5a:eb:f4:ba:2c:68:17:38:a3:68:6d:37:e6:
         12:f3:cf:fb:c9:5a:b5:f2:3b:f4:73:e5:8c:83:e1:73:32:e5:
         45:a3:5b:ac:93:29:89:ef:61:4d:ed:0e:3d:a6:41:1f:83:df:
         40:bc:ca:7c:c8:62:4e:b6:17:a2:b3:d7:02:79:ba:e8:11:68:
         ed:6e:f1:16:06:30:c7:d1:62:5a:ce:d0:6a:1e:8a:73:66:c5:
         6d:e5:09:9c:05:fc:73:26:4a:18:72:e3:c2:72:f9:c2:de:11:
         53:5b:51:7d:d1:f6:04:f7:80:1d:b0:6b:52:8b:b9:2f:ec:5a:
         67:4c:39:19:b7:16:d6:b8:0d:1f:be:6d:cc:66:df:2a:6e:e0:
         d6:a2:5e:9f:35:4e:aa:55:d3:07:84:3f:3d:b0:88:e3:4a:58:
         0c:0b:fa:16:86:a2:5e:dc:e3:80:51:d3:ce:b4:c5:94:7a:34:
         8b:a8:21:ae:fd:5b:3d:c7:e3:31:d3:11:77:83:19:1e:05:f6:
         d0:3b:f5:fa:43:eb:3c:09:e9:15:a3:00:65:24:d5:16:8e:02:
         21:66:f8:4b:3c:91:22:49:a3:f1:1f:a1:2f:a9:83:60:d9:0b:
         cf:8c:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:35:31 2025 by rpki-client