Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File:                     ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier:          qqRtVBobCvPgzdDq0h8yDwdMs0RVc2nujug2SDop4Vo=
Subject key identifier:   41:7C:98:E6:CB:92:A2:81:36:79:BF:04:52:0D:43:F9:43:B6:E6:8C
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer:       /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial:       01974666DCB02869C7DFE2D16BD86AE25BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number:          1156
Signing time:             Fri 06 Jun 2025 18:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:35 +0000
Files and hashes:         1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: tzPLRAWciohXH2iGz31oS4GeztfLylhs6sB5amIWr8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:dc:b0:28:69:c7:df:e2:d1:6b:d8:6a:e2:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
        Validity
            Not Before: Jun  6 18:00:35 2025 GMT
            Not After : Jun  7 18:00:35 2025 GMT
        Subject: CN=417c98e6cb92a2813679bf04520d43f943b6e68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:34:d8:a0:40:23:a7:e3:11:9c:d4:3e:76:
                    2a:f0:33:8f:7f:10:8f:8f:4c:d2:54:2e:9b:48:cb:
                    2d:bc:d9:1d:d8:52:7f:88:94:1f:54:46:d3:07:bc:
                    b1:42:9c:a7:c4:66:84:c6:74:b2:8d:3b:a3:bb:5a:
                    64:24:89:ec:28:6f:ee:16:39:c0:88:eb:68:47:cb:
                    42:74:5c:4b:56:a7:d3:11:09:dd:77:23:2d:9b:61:
                    ba:89:cd:e1:6b:72:db:10:ea:99:dc:9d:d0:98:93:
                    47:3b:fe:ef:5e:e4:2c:6b:ce:d4:a9:45:cc:7e:e5:
                    67:a3:68:f4:84:00:a0:0f:35:3a:18:2e:1d:85:69:
                    23:1c:d1:2c:0f:75:ff:17:8e:bb:73:33:0c:2f:8d:
                    44:48:a1:84:38:9f:93:5c:62:68:0a:b4:4e:56:51:
                    88:ff:8c:72:d0:10:be:83:ca:54:f1:17:4b:47:b0:
                    83:c3:22:ce:a8:1e:d8:1f:29:88:b5:0d:e0:17:a6:
                    72:d9:ab:7b:9f:24:36:e1:2d:e6:b9:46:16:f1:ee:
                    d7:47:53:af:e5:af:69:94:2b:3d:11:71:05:a6:b1:
                    76:f2:af:16:7a:6b:ff:44:ab:58:3b:03:8b:1b:9d:
                    c0:bb:71:23:2a:33:ee:54:b0:d4:33:37:8b:c2:b6:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:98:E6:CB:92:A2:81:36:79:BF:04:52:0D:43:F9:43:B6:E6:8C
            X509v3 Authority Key Identifier:
                keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:36:5e:56:c1:9e:07:84:2d:9a:a6:4e:97:9a:92:13:54:
         29:e6:23:e9:f4:49:38:0c:2a:3b:24:e6:60:9c:df:48:27:be:
         cf:08:e1:0e:67:5b:7a:c7:2d:7b:66:23:d1:30:6e:55:37:6d:
         5f:2d:0a:2a:ab:37:1b:4c:7a:f6:bc:14:3f:b3:8c:9e:73:08:
         28:17:a5:0b:f3:7f:61:c3:01:02:d6:22:67:00:f4:0c:8f:81:
         66:a4:96:83:d6:4b:8d:0d:c1:89:b5:68:55:40:b7:84:0f:00:
         b6:e3:1e:4b:ea:04:c9:48:2f:ba:93:69:ed:9e:47:1a:ec:90:
         3c:62:52:3c:87:9c:a3:5a:75:1b:c8:c4:52:f2:25:8b:36:ac:
         70:f2:29:86:88:ee:16:33:37:f0:5f:93:e4:dd:d5:d4:d2:b5:
         be:f6:0c:fb:fb:f5:40:fb:d1:96:af:c8:f2:28:59:41:fd:63:
         e0:0e:e2:85:53:c6:73:c5:0a:14:b0:8b:5a:a1:88:a1:d7:5d:
         13:99:ff:2b:81:77:93:80:34:e4:7d:7a:af:23:47:e8:90:bb:
         bc:5c:f4:65:5a:f2:b7:60:c4:10:b7:53:c7:d6:d9:f9:10:d5:
         52:53:90:b9:13:c0:c2:40:1d:9f:6d:87:c9:5d:00:6e:e5:cd:
         38:60:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:47 2025 by rpki-client