Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          5bh3vo4brNsueQSYnQAYjojEMmPYhkD4qrb18Bvn9qk=
Subject key identifier:   95:79:0E:FE:08:64:03:7C:AC:07:6F:7C:74:6C:51:8E:D5:55:E1:9F
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       019769CF0F9D2BC7FE8F5A54D7007E667314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          158B
Signing time:             Fri 13 Jun 2025 15:01:07 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:07 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:07 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: Jpr4mWRG8qPVwVpzS3AN1MlghoN7pwQfMjTFFlFQ9NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:0f:9d:2b:c7:fe:8f:5a:54:d7:00:7e:66:73:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Jun 13 15:01:07 2025 GMT
            Not After : Jun 14 15:01:07 2025 GMT
        Subject: CN=95790efe0864037cac076f7c746c518ed555e19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:ae:21:59:2b:00:06:2d:60:dc:4f:23:29:
                    3b:95:57:b9:4d:09:1a:71:94:5d:e2:42:1c:55:9b:
                    f8:37:22:88:89:7a:08:58:f3:ed:89:ca:a5:87:ed:
                    0b:6c:5b:f0:44:0d:89:5d:1e:d2:de:a6:b9:88:f1:
                    1d:81:09:91:c7:0e:54:42:2e:73:b8:b6:a8:b2:22:
                    95:4e:d8:ad:ad:01:14:eb:3e:cf:64:e3:53:fd:45:
                    d2:69:9f:29:5b:8e:bd:17:1d:38:fe:fa:d2:20:51:
                    49:fc:b5:02:ac:5e:43:ad:db:2a:24:00:22:d4:16:
                    b0:2a:da:f6:ea:d1:b4:f5:ba:8a:6e:bd:e6:12:e7:
                    3c:7d:60:bb:57:db:e5:f5:dc:bc:81:4b:eb:1d:c7:
                    f6:aa:5b:33:08:c1:95:0c:26:35:5c:20:c2:44:fb:
                    e7:a9:7b:ad:23:93:5b:d7:e1:75:7d:d7:59:80:7a:
                    1f:2f:80:1a:8f:a3:95:27:6f:04:c0:63:d4:ca:8c:
                    d6:ee:65:33:20:30:0c:db:4d:1c:2c:dc:ac:26:62:
                    26:25:c8:69:d2:c9:76:85:48:74:cb:c6:47:f3:3c:
                    64:b6:75:56:a0:a5:9b:24:19:d7:10:a5:e4:d9:ae:
                    85:1f:80:87:44:f0:ab:49:86:9d:12:a2:4b:df:bd:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:79:0E:FE:08:64:03:7C:AC:07:6F:7C:74:6C:51:8E:D5:55:E1:9F
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:de:34:6c:97:82:d7:2a:58:53:2c:b5:97:69:c8:53:9b:1c:
         80:ae:a5:22:1e:bd:95:7a:4d:68:f5:67:0c:32:49:7a:79:66:
         7f:13:36:79:5e:3d:ce:ff:10:5d:7f:c6:f0:4e:f7:3a:d1:10:
         84:ca:bd:b7:b3:b9:79:d4:fe:ff:72:84:04:3e:26:3c:5c:62:
         47:92:18:6f:1c:2a:cc:15:e5:b6:d0:da:49:47:42:4a:5e:c8:
         93:80:2b:7b:51:b8:ef:4d:bb:5b:37:ab:4e:67:e7:36:1c:6d:
         43:fe:95:c7:b0:f4:64:a0:eb:eb:65:86:fd:72:17:5a:23:3e:
         9e:8a:91:dd:a9:8b:47:a1:a8:8a:c5:d7:0d:01:75:2b:dc:d8:
         82:7d:9e:a6:3b:f5:0d:94:dc:58:5b:01:5a:ef:66:f6:fe:aa:
         2f:74:a9:b5:6c:26:94:7c:a0:8e:ff:fe:c1:fa:18:b8:94:f9:
         fd:ae:c8:1d:a1:e1:13:dc:c5:38:c4:9d:15:a8:4b:f5:03:1f:
         a8:2d:db:a9:a1:4b:a8:66:9b:15:4c:7a:eb:9f:86:0a:ed:7d:
         8b:63:03:56:d1:5e:5a:c6:7c:59:d0:46:ca:65:dc:88:74:ee:
         b9:aa:a2:12:ad:19:3e:ed:68:61:4e:9b:e6:65:28:49:96:b0:
         c0:7e:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----