Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File:                     UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier:          BM/p/ops1Y50W04P7ifbgO7E4E1+td5B0xaRptBDPNc=
Subject key identifier:   B2:06:D6:EE:5D:71:D2:FE:3E:FF:0E:2F:32:FB:38:66:31:DA:31:E7
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer:       /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial:       019921B1767FE8DAA3B071CB4630EEE7FADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 01:01:42 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:42 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:42 +0000
Files and hashes:         1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: MYdaDh46wA4EOLPKJEHGsA4wcNVkYVynRn5TAA8ygwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:76:7f:e8:da:a3:b0:71:cb:46:30:ee:e7:fa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
        Validity
            Not Before: Sep  7 01:01:42 2025 GMT
            Not After : Sep  8 01:01:42 2025 GMT
        Subject: CN=b206d6ee5d71d2fe3eff0e2f32fb386631da31e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:25:08:85:f3:24:e1:fd:0b:d7:48:67:15:
                    7f:35:37:f9:eb:79:50:b5:b5:88:22:fe:d1:34:f1:
                    cd:e7:36:b8:2b:fb:ac:4e:b9:19:ae:b7:20:37:0a:
                    d1:c3:88:e7:78:fb:bf:97:5d:f8:8b:cd:2a:9b:6e:
                    fe:3e:1f:b2:6f:e1:bc:74:bc:b6:2f:ac:d7:9b:61:
                    e7:7f:fb:24:84:89:b4:19:db:4a:19:5c:2e:a4:ec:
                    af:21:72:42:9a:df:a2:41:7b:43:f1:15:fa:6e:9c:
                    42:20:fb:86:51:26:a1:5f:e6:a5:50:86:0f:c8:98:
                    83:04:58:18:43:30:a5:6d:8b:83:93:50:c7:ba:20:
                    33:94:f2:9a:84:80:2f:8b:19:5a:fc:9e:6f:ec:a4:
                    e7:5b:0a:dc:ab:04:64:68:a7:15:cd:ee:67:dd:52:
                    59:f0:aa:cf:4f:f2:db:e2:58:9c:08:c2:90:9f:13:
                    42:f3:f2:68:0a:10:1e:c7:4a:e1:45:65:39:f3:f0:
                    ce:8f:0e:42:45:06:84:e1:6f:66:83:be:c8:8b:e5:
                    77:ef:96:ff:29:6d:76:18:9e:33:da:55:13:68:b8:
                    fc:4d:10:0e:36:ee:29:c6:47:63:97:57:96:d1:61:
                    bc:f8:60:1b:fb:1b:5c:62:7b:e6:be:06:af:f6:4d:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:D6:EE:5D:71:D2:FE:3E:FF:0E:2F:32:FB:38:66:31:DA:31:E7
            X509v3 Authority Key Identifier:
                keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:0b:54:82:33:35:39:97:82:c7:0a:03:0c:7e:48:9c:7e:
         7f:c3:27:bc:87:23:51:d5:16:2b:61:06:1b:42:a4:3d:ae:5f:
         5a:87:13:76:7b:3b:da:43:87:cb:b9:7a:ce:18:62:ce:5b:5a:
         f1:01:bc:50:55:85:3c:aa:74:f9:26:72:9b:7b:67:94:c3:65:
         54:bf:80:24:9f:0e:ab:77:97:80:c8:33:0f:30:61:d0:74:0f:
         ea:8a:4c:0c:78:16:74:5f:87:1a:eb:fb:9c:dc:ab:fb:de:8a:
         7a:96:2b:90:01:ae:a4:23:ce:a0:d8:8f:a7:d2:51:eb:4d:b3:
         b5:20:b2:3b:33:64:68:ad:35:60:79:fe:77:34:8a:7e:de:62:
         70:d0:77:b0:d0:c8:8d:09:9b:7c:4b:27:05:32:54:27:97:ad:
         7f:32:37:37:f6:58:2a:08:9a:e1:40:9c:90:fd:39:64:d4:c3:
         7d:ca:d8:75:f4:d1:8e:cb:20:b7:0a:25:e7:25:44:36:c0:dd:
         32:c5:8e:23:ac:04:0d:38:31:c1:3e:a2:41:e8:37:e5:8b:2a:
         ab:dc:5e:be:74:5a:9f:6d:14:26:7a:22:59:60:62:56:b7:49:
         91:7b:17:3d:64:c1:ea:2b:e0:6b:a2:59:2a:ac:0e:0a:91:53:
         68:97:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:32 2025 by rpki-client