Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File:                     u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier:          Ow1RWrDd/Ejlw6BDPglHEzTpvGeB0qfH8PJkMhYS094=
Subject key identifier:   DC:EB:03:74:3A:8E:79:65:0B:97:0A:BE:05:44:59:F9:0E:D2:D1:C9
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer:       /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial:       019922FA3CCDD4CE18BD97F96AD76375728F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number:          1019
Signing time:             Sun 07 Sep 2025 07:00:48 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:48 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:48 +0000
Files and hashes:         1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: v3i9QdJ0cwqXwjVL7vVy97ci4/8a3Vn4MihkQh5gRg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:3c:cd:d4:ce:18:bd:97:f9:6a:d7:63:75:72:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
        Validity
            Not Before: Sep  7 07:00:48 2025 GMT
            Not After : Sep  8 07:00:48 2025 GMT
        Subject: CN=dceb03743a8e79650b970abe054459f90ed2d1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:2d:15:d5:ca:ff:d4:02:e7:1a:80:13:d8:
                    d7:57:e5:85:39:55:ee:0f:2d:c7:bc:d9:04:27:7d:
                    40:5e:a7:ef:e4:e7:37:c9:97:03:75:fc:77:70:2f:
                    9c:08:53:eb:22:d8:3f:0e:19:47:fe:ea:b1:48:23:
                    fe:2a:2f:b7:c8:ad:ad:46:5d:65:b3:c2:ad:e7:7c:
                    d9:28:e5:5f:7b:16:17:fe:ec:67:68:c1:89:7b:df:
                    17:b5:b8:24:e0:f3:16:f9:ce:68:47:a0:c4:ca:fc:
                    77:0c:9d:0d:81:f0:6d:57:46:ab:db:8a:db:87:59:
                    12:74:a9:71:d6:5e:88:f6:76:a2:24:eb:25:6d:1b:
                    20:82:39:f8:07:a9:98:06:cd:75:bc:67:29:6f:83:
                    70:55:e0:2c:aa:23:ca:59:44:72:6a:19:00:3a:8c:
                    e7:c1:48:36:0c:ce:07:b1:5d:6b:81:74:ee:6e:36:
                    1b:cd:7c:60:7f:fe:61:46:05:f8:36:f3:0f:13:e7:
                    6b:31:41:fa:2a:4a:b9:fe:20:a3:52:0d:24:fe:97:
                    71:b3:34:78:2e:e1:19:0e:04:96:35:1d:8b:7b:87:
                    c4:05:e9:44:97:1e:2e:3d:69:bd:df:75:3a:3a:aa:
                    14:db:f6:43:cf:5d:3e:b6:ea:8c:ff:cf:2a:59:fc:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EB:03:74:3A:8E:79:65:0B:97:0A:BE:05:44:59:F9:0E:D2:D1:C9
            X509v3 Authority Key Identifier:
                keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:81:55:26:95:ad:c7:f0:86:3a:97:83:46:27:0a:2e:58:
         24:7d:b0:2d:9a:50:de:49:7d:bf:c0:ec:0c:12:4e:5a:15:75:
         40:43:a7:99:ba:c1:27:26:d4:6c:bd:cd:d8:1c:98:f8:9b:6e:
         57:8a:11:7f:e3:d3:7e:7a:1c:9e:b4:0a:9d:d6:17:77:eb:88:
         52:e4:9d:57:9c:97:d3:56:33:6a:0d:4d:6f:3c:66:a2:83:34:
         9d:0b:c6:99:84:e8:ca:97:2b:9b:d0:1e:33:14:8a:60:e4:ce:
         d0:3b:9f:70:4e:59:49:a9:60:55:3a:26:ca:d2:fb:17:b1:5f:
         75:dd:c9:00:39:5d:e6:76:0e:45:87:45:74:8c:f1:09:e1:a1:
         46:75:f8:6c:17:05:bc:76:0e:6a:a5:34:7d:73:7a:ad:b6:56:
         99:d7:c2:d9:fc:e0:c1:42:ea:9b:31:8f:00:1a:4f:cb:ad:c2:
         82:c5:02:5a:21:31:e4:73:3a:7d:2f:0b:b8:81:e6:23:78:aa:
         84:36:df:14:74:27:ed:56:ab:34:c0:13:b0:a7:79:6c:a8:10:
         ff:33:a1:e8:68:4c:38:51:73:d4:54:51:43:e1:eb:16:08:ed:
         0f:41:3f:15:fd:15:d3:29:b1:ee:5b:d5:39:5e:9d:9d:63:06:
         26:42:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:19 2025 by rpki-client