Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
File:                     UDCmlphoVt51uCLWrpX-ATE4IK8.mft (raw, json)
Hash identifier:          tPZ5QMktNE8oK5qH5+Rnk6iqe1N7rjyE6ZK34Xq/4cM=
Subject key identifier:   45:19:20:EE:59:59:CB:8E:98:8F:BE:C2:E9:AE:F2:43:F6:C4:FE:8F
Authority key identifier: 50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
Certificate issuer:       /CN=5030a696986856de75b822d6ae95fe01313820af
Certificate serial:       01976E87419EB04AB90DC8A91701CD3C4968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
Manifest number:          0F88
Signing time:             Sat 14 Jun 2025 13:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:47 +0000
Files and hashes:         1: UDCmlphoVt51uCLWrpX-ATE4IK8.crl (hash: IvQoxqgqKOvBokDdorVYhaPpcULSo0NH1hh76KQ3aio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:41:9e:b0:4a:b9:0d:c8:a9:17:01:cd:3c:49:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5030a696986856de75b822d6ae95fe01313820af
        Validity
            Not Before: Jun 14 13:00:47 2025 GMT
            Not After : Jun 15 13:00:47 2025 GMT
        Subject: CN=451920ee5959cb8e988fbec2e9aef243f6c4fe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:42:94:5f:2d:3f:b8:cb:bf:93:a6:af:f3:
                    b5:82:b5:55:e7:3e:15:48:98:f9:b0:4c:e7:8a:42:
                    d4:cb:6b:64:c5:55:72:7a:3e:7d:62:4e:13:13:8e:
                    de:66:1b:12:be:1f:0e:fb:bb:07:7b:e2:59:87:29:
                    a7:af:db:69:8f:73:b2:33:de:a8:88:b1:ea:f8:b1:
                    b2:44:c3:7e:34:b2:1a:06:dc:ff:5e:af:54:6e:e6:
                    55:75:f9:e8:37:d4:35:d6:aa:50:73:e9:01:e3:f1:
                    67:79:43:21:48:97:17:f1:8b:39:69:b6:f5:a7:9e:
                    83:49:3f:d6:5b:f5:67:ee:56:89:db:2d:f1:96:30:
                    ba:17:1e:66:dc:c2:36:ef:74:18:d3:e2:99:1f:ab:
                    f3:26:8e:b4:5f:f3:8d:09:c7:40:f5:f7:85:0f:b3:
                    be:62:70:fa:d7:a9:37:0a:ff:21:3c:63:73:c7:3b:
                    23:07:00:d7:c1:35:ad:97:f7:d9:fb:3c:04:90:1b:
                    b2:6d:d9:a0:6e:d7:56:44:b2:74:26:ad:e7:f9:16:
                    df:b6:8b:55:96:d1:cd:76:45:59:90:05:3c:85:fb:
                    48:df:e2:2a:65:0f:35:bb:7f:53:59:4b:28:a2:5d:
                    7a:67:9a:3f:e0:7d:c6:c1:ab:78:22:47:a3:08:c5:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:19:20:EE:59:59:CB:8E:98:8F:BE:C2:E9:AE:F2:43:F6:C4:FE:8F
            X509v3 Authority Key Identifier:
                keyid:50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:00:70:0f:9e:0f:bd:bf:84:9f:30:86:78:05:74:ce:e7:e9:
         b0:90:3b:96:df:8c:c7:8c:d9:7d:98:1b:ec:61:33:7e:fd:0b:
         81:1e:93:be:23:e9:a0:eb:d2:91:1e:e8:07:34:36:60:ff:00:
         0d:fb:c2:6c:aa:6d:70:a3:c8:6a:2b:01:bf:e9:7c:59:60:c1:
         7b:e5:a4:41:0b:1b:84:a6:f0:27:7a:35:57:ac:14:b9:db:e5:
         a9:b9:2d:16:dd:b2:c0:9a:4e:6b:3f:47:af:1d:3e:c9:3a:0d:
         55:d0:88:13:3c:80:ef:e8:48:78:2c:f0:78:4b:56:03:85:57:
         a6:1c:29:c7:e2:78:78:a2:14:98:fc:21:93:32:58:30:b0:55:
         9f:18:81:69:5c:5e:69:34:01:3c:57:6b:63:ed:c3:7c:b9:4a:
         74:5b:92:2f:95:b6:92:27:a4:17:3e:fb:ee:da:de:fe:36:92:
         51:a3:3a:89:f9:e8:22:f6:7f:f3:2a:8d:73:2b:01:95:ce:94:
         6d:36:d3:4d:12:d8:35:b4:5f:f5:3d:e2:11:bd:9d:fa:b4:82:
         90:96:a8:81:e5:5c:d1:a4:e3:49:6e:bf:65:1c:4c:be:03:09:
         36:8d:e2:6d:01:d1:69:12:2c:50:0b:04:86:fe:f4:ff:e4:a1:
         8c:ad:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:49:10 2025 by rpki-client