Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File:                     uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier:          a3chVpiMBqZK4DFKGMG1FY2mMImDHsKCXjDNh9aIOvU=
Subject key identifier:   9A:07:E4:99:8E:F4:38:7F:5B:11:62:DE:19:7D:54:1D:89:B5:DD:93
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer:       /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial:       019747E7B4991426EDDC570BDF90F25E1F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 01:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:56 +0000
Files and hashes:         1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: ku5/yWZDsbiiX1OI5QrdnyqMHoyxEo+NwrZIyE3UuMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:b4:99:14:26:ed:dc:57:0b:df:90:f2:5e:1f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
        Validity
            Not Before: Jun  7 01:00:56 2025 GMT
            Not After : Jun  8 01:00:56 2025 GMT
        Subject: CN=9a07e4998ef4387f5b1162de197d541d89b5dd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:85:2a:58:be:7c:b8:04:34:0e:89:22:24:
                    7b:6e:df:b0:6c:cd:17:29:f4:f1:bb:6d:79:76:5e:
                    c9:7a:72:73:30:ed:94:36:84:77:f9:b6:2d:17:88:
                    cc:a4:22:5d:4f:2c:55:cb:d1:06:c6:d5:bc:85:47:
                    31:76:84:a7:9a:85:31:be:e8:f3:3f:c3:ca:d6:05:
                    56:16:71:23:52:85:96:70:58:50:95:26:4e:31:26:
                    f5:47:c4:99:1a:f5:ec:de:0a:b3:af:d6:6f:6e:98:
                    be:75:dd:59:10:69:58:cf:eb:c9:0f:ea:1b:7a:d8:
                    f0:4c:9c:07:c9:7b:33:96:f0:82:0a:4c:06:8f:63:
                    78:81:4a:3a:d2:f4:a7:5f:bf:e1:9b:44:b4:2c:34:
                    ef:5c:fc:27:9c:72:35:e1:a4:42:92:63:13:58:36:
                    17:f9:a2:7a:1b:b8:2a:55:59:4f:59:20:76:a9:61:
                    ce:c0:f6:39:66:7b:30:f4:22:f0:94:4f:29:3e:3c:
                    0c:bc:24:ff:4c:e2:61:67:59:c1:84:e8:bc:17:1b:
                    df:e4:b3:99:a3:ec:a1:71:ce:2b:bd:cb:da:8b:1f:
                    68:bd:4a:58:ba:79:e5:42:4e:d7:ac:a8:4a:d5:64:
                    29:1c:e1:a4:3b:79:4a:df:f6:55:e9:77:98:1a:fa:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:E4:99:8E:F4:38:7F:5B:11:62:DE:19:7D:54:1D:89:B5:DD:93
            X509v3 Authority Key Identifier:
                keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:48:b0:f9:25:a6:a5:76:c8:aa:02:ad:9b:0c:a2:3a:30:75:
         04:8e:e2:e1:09:db:16:68:fc:ad:0b:53:7d:45:79:42:fd:85:
         25:3c:da:f3:f9:7f:ca:23:d7:0c:45:ad:ad:b6:66:55:0e:45:
         cd:c3:2d:ce:82:e8:12:98:b2:46:3c:f7:5e:d2:71:04:bd:4e:
         e2:3d:88:a0:6d:69:50:f3:aa:21:36:a6:76:e5:ad:49:23:64:
         86:18:00:43:32:f5:99:dc:09:ac:b5:85:37:51:76:1e:e3:45:
         67:60:da:a9:80:19:ab:6b:d1:62:17:83:98:f5:16:8f:cc:60:
         9b:24:ec:81:86:3a:3f:85:4f:26:1b:6f:56:74:66:ee:b1:d2:
         9f:2e:34:25:04:4b:bc:c7:f6:11:b6:91:31:d9:43:e6:58:a6:
         4c:25:69:d2:79:cb:5d:47:42:25:e8:ab:49:7b:55:6b:b5:a8:
         35:c5:ae:0b:d9:29:0a:08:00:ae:30:0d:5d:4e:ec:11:7d:44:
         11:b1:f9:95:7a:c8:90:2b:0a:1a:35:49:e4:30:cf:11:d8:ac:
         01:54:1e:79:6a:d7:68:f7:cf:29:63:7e:2e:e1:4f:23:53:a5:
         37:e8:2f:cf:43:5e:d8:e9:87:da:14:dd:5f:f1:50:b0:a8:7d:
         9a:13:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:50 2025 by rpki-client