Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File:                     Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier:          c7pPBPtikvpAMPB2RJJUMTzPX8RC3H/DCGcPa5Ap0RQ=
Subject key identifier:   E9:16:C8:58:59:9F:53:40:AE:A0:C8:32:D8:5E:17:BF:C2:FE:AC:37
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer:       /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial:       01963FF9C776C5DEBBBAA477F92BE02C93A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number:          09FF
Signing time:             Wed 16 Apr 2025 19:00:56 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:56 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:56 +0000
Files and hashes:         1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: O8k56P84KM+mk2tyBzbqP1ZeMRr0/Kzm/HZaaCqlKGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:c7:76:c5:de:bb:ba:a4:77:f9:2b:e0:2c:93:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
        Validity
            Not Before: Apr 16 19:00:56 2025 GMT
            Not After : Apr 17 19:00:56 2025 GMT
        Subject: CN=e916c858599f5340aea0c832d85e17bfc2feac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:f9:81:8d:72:e5:16:26:84:78:43:fb:bc:
                    52:2c:c1:02:9f:ca:c8:ba:8e:26:6c:64:22:03:04:
                    86:49:20:31:eb:5c:ba:ab:7d:bc:08:10:29:6e:ed:
                    a5:2b:33:e0:cc:57:97:f5:c3:cc:31:64:aa:32:a8:
                    a5:7d:97:83:85:2c:c4:35:0d:89:50:32:33:4b:ba:
                    20:63:b2:87:6f:cb:f7:19:16:0e:78:42:45:c2:e4:
                    37:9d:5c:64:44:35:4a:f2:27:9b:87:6b:7d:3e:0a:
                    0d:92:33:f2:40:e3:85:9b:b6:cb:c0:a9:0c:ba:0d:
                    55:92:ed:a5:c2:d6:d1:f6:04:1e:3a:5e:0c:41:6d:
                    92:28:ad:2b:50:c1:a6:17:81:0f:bf:44:f1:f2:c9:
                    07:0c:b5:65:6e:c9:bd:99:a9:3f:cf:42:f7:40:da:
                    e4:fc:2e:20:03:95:b1:80:b5:fd:46:80:8a:ff:78:
                    b2:3e:4f:9d:d4:c3:ff:03:43:00:55:60:97:59:9f:
                    5a:32:28:1e:08:f4:5d:67:45:ef:cc:25:6d:70:78:
                    c1:3c:d7:98:9d:1d:3f:d2:1c:74:fb:c7:5a:9b:5f:
                    5c:64:50:bc:0a:1a:ac:b5:62:64:b1:49:62:63:22:
                    3b:71:51:a2:6d:b7:90:aa:41:03:a6:7c:18:2b:4b:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:16:C8:58:59:9F:53:40:AE:A0:C8:32:D8:5E:17:BF:C2:FE:AC:37
            X509v3 Authority Key Identifier:
                keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:b6:f7:cd:bf:b7:cd:2e:8b:39:6d:15:a0:d4:ea:99:9b:
         be:f1:ac:b8:79:51:82:17:c5:66:87:90:50:b1:29:5a:71:68:
         af:87:5c:60:ad:d8:8c:38:80:bf:5f:6a:bf:c8:6a:df:3c:85:
         8c:d3:54:05:48:90:46:27:b1:75:7f:4f:86:02:0e:5a:fc:dc:
         10:0e:b3:e4:2d:9f:c4:a2:e7:4f:3a:f7:eb:57:0f:73:75:f6:
         08:10:a8:76:37:e3:63:ee:99:35:a2:b6:21:bf:c5:38:02:2f:
         57:b4:00:58:b4:70:3b:25:24:3b:1b:d6:70:63:6a:47:8f:ce:
         2f:47:0f:44:bc:be:0e:36:1c:9b:a6:75:e9:78:4f:e6:42:35:
         74:4f:2d:fe:8d:a8:9d:9e:2a:e7:9f:ea:52:5b:b6:fa:97:63:
         14:7d:a6:cf:af:6c:32:46:ff:5c:d8:8e:6c:19:94:04:04:35:
         31:82:a2:b4:60:5f:5c:7c:aa:10:9f:61:42:24:d8:cb:cb:16:
         2a:f4:87:14:e7:ad:02:7d:dc:33:b6:b0:74:bd:4a:c4:b2:b4:
         12:57:35:7e:5a:a3:6c:98:7e:d5:00:9d:12:c8:4b:6a:61:00:
         1d:27:2a:f2:00:77:2f:a9:dc:78:c1:56:74:36:99:6f:4b:cc:
         bb:8c:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:37:05 2025 by rpki-client