Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          prd46Hd9r06pIVLuVPKyCTe0IO4AJxaGyZytqrs3kYo=
Subject key identifier:   6E:3B:C8:E1:37:97:FD:AC:28:3F:06:69:D0:31:35:78:F6:BB:1E:26
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       019921B254ADAB91B5CE713DF8B6FDC20835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          0A7D
Signing time:             Sun 07 Sep 2025 01:02:39 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:39 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:39 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: AyD8CZ3wCPmgMO8lXEGBuxT+5jbc+UR/zT/YWHQRXK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:54:ad:ab:91:b5:ce:71:3d:f8:b6:fd:c2:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Sep  7 01:02:39 2025 GMT
            Not After : Sep  8 01:02:39 2025 GMT
        Subject: CN=6e3bc8e13797fdac283f0669d0313578f6bb1e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:f5:d5:2e:4b:f6:01:c4:e0:1f:db:4f:38:
                    f5:c5:16:46:7d:c8:eb:b8:cb:40:ef:c0:62:65:3a:
                    e1:3a:b2:bc:88:8d:fa:e1:53:04:fb:9e:cd:44:c5:
                    fd:30:47:b9:8b:dc:73:1a:62:d6:53:8d:48:59:05:
                    e3:bd:85:f8:a9:53:c6:e9:f4:24:b4:88:a8:d0:cc:
                    e6:52:02:a7:ea:93:0e:ce:26:2a:f0:5d:0f:1e:ce:
                    86:6f:6a:14:a0:e8:81:6b:8b:19:66:f7:09:4e:fa:
                    23:cd:d0:6d:22:15:27:74:28:91:e0:d1:04:05:98:
                    85:a7:a4:af:5c:37:34:75:1f:2d:7a:7c:0b:f3:da:
                    5e:5a:17:3a:59:f9:55:80:b2:13:f9:6f:62:b0:d4:
                    4b:64:f3:fd:98:bf:82:03:36:e9:a9:a9:62:3b:ca:
                    50:f3:f6:9d:d8:0a:8a:05:af:30:93:1f:9a:f3:f7:
                    48:83:53:65:9d:d0:13:05:cf:70:2b:73:fc:a2:d8:
                    be:1f:73:ff:ae:b6:d5:2a:4b:bd:c1:d8:9a:00:1c:
                    b0:c8:87:b2:f8:ad:cb:a1:39:16:f5:1a:18:55:33:
                    73:fe:57:89:2f:69:c5:ed:3c:cc:cf:e3:0d:4f:a3:
                    de:0d:ae:73:86:bf:09:4f:4c:df:f0:46:49:b3:b5:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:C8:E1:37:97:FD:AC:28:3F:06:69:D0:31:35:78:F6:BB:1E:26
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:00:cc:f0:e1:8c:fc:ac:8f:e9:35:23:23:1a:5d:bb:13:
         c0:7a:5d:15:47:94:b8:93:a1:6a:f3:6c:f1:f1:de:c3:7f:9f:
         47:12:36:51:45:3d:1c:77:b0:dc:fd:3e:df:4b:3a:f2:c1:13:
         4f:cb:91:65:37:50:bc:ec:03:81:4f:d0:49:85:fb:02:66:aa:
         e6:a6:69:12:b9:33:76:37:93:61:4f:ae:59:df:e4:86:87:a0:
         e9:c8:b0:75:5f:98:ee:a7:57:cd:10:41:7b:92:d5:67:ee:23:
         b6:c8:bb:0c:f4:df:95:15:a0:e1:50:0c:4a:53:03:8b:fd:c6:
         81:b5:89:5d:43:ac:65:a1:d1:29:38:2c:a1:60:3e:b5:71:2b:
         0a:3b:a7:4b:17:5d:b7:49:79:78:60:09:fc:2b:12:10:21:47:
         2a:15:4e:60:1e:e8:6d:1e:57:cd:55:75:f6:b6:21:4e:bd:e7:
         01:67:d6:46:6f:b1:8a:56:78:1e:54:0b:dd:77:30:52:bb:a7:
         f8:b6:a2:1c:e8:1d:0a:91:c7:2a:7c:3a:69:2b:25:40:fb:03:
         ec:bc:84:3a:a6:f9:ce:3c:2a:a9:88:ff:71:4e:e4:72:02:2a:
         b9:0c:95:42:66:c2:cc:7e:e0:31:48:bf:bf:44:97:f3:a7:89:
         1c:a4:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:57 2025 by rpki-client