Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File:                     UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier:          YzU4pS2McmaexT8msZ1eYVZmVX5WyeF05AKcjrkMloA=
Subject key identifier:   C1:D0:A4:BF:0B:B1:82:08:4E:9B:99:BC:98:FE:28:58:B8:AD:DC:4C
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer:       /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial:       0197D060476D169D4F79B6B69424B57A5C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number:          15BF
Signing time:             Thu 03 Jul 2025 13:00:59 +0000
Manifest this update:     Thu 03 Jul 2025 13:00:59 +0000
Manifest next update:     Fri 04 Jul 2025 13:00:59 +0000
Files and hashes:         1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: bPM4euPrSlC6IRVJfr22u1IEZDpwC9gP9zomHyFqYQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d0:60:47:6d:16:9d:4f:79:b6:b6:94:24:b5:7a:5c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
        Validity
            Not Before: Jul  3 13:00:59 2025 GMT
            Not After : Jul  4 13:00:59 2025 GMT
        Subject: CN=c1d0a4bf0bb182084e9b99bc98fe2858b8addc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:21:6b:68:c0:12:f4:88:d4:b5:82:69:ae:
                    78:3b:1b:29:db:bc:4e:d6:ae:3e:6d:8b:4d:96:f9:
                    0c:d4:6e:67:69:99:11:19:52:12:ea:a9:58:71:75:
                    d9:7e:40:dc:8e:a0:6d:5e:ea:e1:b9:c7:53:0d:d3:
                    d3:36:12:e1:c5:14:52:52:13:bc:29:f8:2d:a7:2c:
                    33:b1:fe:c5:5b:c9:83:66:c7:a3:11:1a:93:20:b9:
                    a0:7c:25:3f:09:fd:cf:a4:0c:23:9f:6f:f6:3d:87:
                    c1:d4:bf:5b:58:58:5d:76:3e:bf:b1:3a:68:97:a3:
                    ea:0b:9c:5a:aa:09:b1:ae:ec:de:9d:45:3e:d7:f3:
                    ea:99:ab:b2:9e:36:56:dd:63:66:23:51:de:75:2e:
                    9a:69:46:d1:17:8c:d8:5a:40:62:c4:cb:f2:6d:40:
                    ce:18:9b:5c:d3:38:2e:e6:08:ae:6b:5c:f1:a3:74:
                    d1:cc:21:4b:4e:1b:ce:f8:33:0d:41:09:63:af:95:
                    94:f1:ee:ec:72:11:c7:11:31:3c:2d:14:8e:39:79:
                    01:36:ea:39:3f:f0:a3:31:b9:5e:21:d0:4f:a0:72:
                    42:e8:c2:fb:c9:6a:7f:85:db:9f:b6:3e:8a:b5:4e:
                    36:b7:54:e6:e5:b2:ac:f2:6b:4d:6a:b9:02:0d:76:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:A4:BF:0B:B1:82:08:4E:9B:99:BC:98:FE:28:58:B8:AD:DC:4C
            X509v3 Authority Key Identifier:
                keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:23:92:5b:ea:b6:11:e6:a5:f4:92:64:76:b3:fb:d8:4c:
         3e:8f:ca:22:f2:4a:88:eb:15:6f:16:8a:b8:06:38:66:67:7c:
         51:31:e3:87:f8:7d:a3:37:c8:25:9a:19:65:f2:91:fb:8d:0b:
         87:74:48:2b:cc:26:56:72:43:37:40:2c:17:99:f6:21:9f:14:
         d1:f1:b5:06:fe:c7:01:5a:53:a9:4f:50:f4:89:00:89:85:75:
         99:4e:76:a9:82:d6:2d:3a:ca:12:d7:2a:d4:a4:dc:34:5b:e7:
         03:09:71:e5:f5:ee:4c:d6:8d:3b:7f:de:61:bc:3e:d4:7c:80:
         67:da:52:f9:59:f8:e6:99:7d:9d:f0:da:b8:0f:cd:c5:c2:96:
         63:be:e9:89:d6:26:b8:4d:b1:48:c6:65:60:02:14:18:2b:fa:
         c0:75:52:6a:05:8f:5f:76:23:1d:ca:a7:d9:d8:8c:32:6b:4f:
         29:4f:00:e9:9e:02:87:bf:fe:4b:d2:1c:95:e2:ba:8b:bc:ab:
         6a:7d:79:75:12:ae:64:a3:31:48:1c:2e:83:a2:a0:2d:e2:3d:
         b8:79:de:cd:55:b5:1a:57:6a:54:5c:24:a6:cd:55:d1:e9:53:
         15:53:07:d1:b0:fe:3f:5b:d8:1d:a4:9e:93:c2:40:32:fd:71:
         3b:01:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:07:50 2025 by rpki-client