Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File:                     1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier:          I+9w2AbYm2NohEhdTcW1zCq9yBchkKsx2wMktHz9M90=
Subject key identifier:   0B:32:52:41:35:CC:06:1E:A6:B7:51:07:67:81:28:9B:C3:00:BF:D2
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer:       /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial:       01975948E9AF83CCFE62DD09A0B29C5ECC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number:          1169
Signing time:             Tue 10 Jun 2025 10:00:39 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:39 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:39 +0000
Files and hashes:         1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: e8IMiGltcBc3CPVNp3bIsUtGvW02hDoSgc4FiEJA3pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:48:e9:af:83:cc:fe:62:dd:09:a0:b2:9c:5e:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
        Validity
            Not Before: Jun 10 10:00:39 2025 GMT
            Not After : Jun 11 10:00:39 2025 GMT
        Subject: CN=0b32524135cc061ea6b751076781289bc300bfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b1:1a:59:a9:da:1c:fa:a2:f6:09:99:72:6b:
                    a0:4e:46:f9:c4:18:9c:a2:16:e5:28:d2:5d:55:3a:
                    69:ae:23:ef:1c:75:c8:d5:2f:d5:d1:54:f9:0f:89:
                    7f:6b:04:f8:35:d5:d8:c5:79:e5:f0:58:3e:ac:d4:
                    f0:db:db:49:63:70:4d:3f:41:2b:4e:50:68:a3:dc:
                    94:7e:59:41:f4:b4:d2:4c:8a:45:0b:8f:b5:e0:e5:
                    e5:b2:26:cb:1c:aa:cf:9e:a8:01:27:f7:d8:88:15:
                    28:8e:56:bd:01:a7:ab:a4:ef:b3:f0:ad:d2:2f:a5:
                    a7:23:06:8c:b3:72:42:64:53:74:6f:5f:70:41:88:
                    6c:eb:1a:87:04:ed:88:e2:1c:17:c7:73:67:28:f5:
                    af:d7:38:6e:0e:de:51:ae:cc:d0:63:4b:fb:92:66:
                    1b:a8:61:19:e7:a7:b1:45:aa:4a:dd:41:0f:ca:37:
                    f8:0d:7b:5b:fc:a4:0f:ff:62:61:5b:01:89:9f:28:
                    b1:5b:e7:a1:7f:86:09:2c:50:7d:53:6a:90:b5:de:
                    74:df:48:c7:a7:30:0b:80:9e:49:02:cb:67:38:87:
                    c0:39:1b:e1:8d:20:82:66:2a:c0:ec:ab:9e:ac:2e:
                    7c:eb:d9:f2:31:94:60:20:71:14:f5:59:0e:02:1e:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:32:52:41:35:CC:06:1E:A6:B7:51:07:67:81:28:9B:C3:00:BF:D2
            X509v3 Authority Key Identifier:
                keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:55:6a:70:d0:49:85:eb:96:eb:12:a9:8b:14:e8:7b:2c:48:
         b2:bb:48:55:39:9f:b7:75:1b:cf:9c:24:cd:36:3c:b0:2b:97:
         a7:47:07:d5:e1:cd:4c:87:fa:a0:d2:ad:cc:86:68:c9:2f:66:
         fb:24:c0:5e:fb:37:c1:17:08:60:93:e4:59:1f:f8:f1:93:f3:
         37:90:e8:f0:40:54:82:20:57:73:47:5e:3e:a4:a7:63:63:98:
         49:c7:5e:68:a3:45:41:ba:0b:96:85:52:59:f0:08:d7:28:03:
         24:6d:1e:7d:f5:8b:ed:9d:0e:07:1b:df:39:6c:c0:4d:56:d6:
         18:1e:01:2e:a6:57:f3:7a:b1:c3:26:af:5e:3d:2b:59:dd:b4:
         79:af:f1:ae:96:0c:b6:5d:61:82:e2:ac:f4:8a:db:90:d9:a8:
         3f:4c:64:4e:f7:87:2c:e5:a5:62:95:f6:2e:df:03:aa:d9:20:
         d3:4d:dc:b1:39:47:fe:1c:99:3f:2e:de:32:65:a3:3c:a9:23:
         4d:cd:94:d9:63:af:5e:63:09:1d:43:00:27:b6:d7:98:3b:94:
         ff:a1:12:08:19:fe:24:1c:83:6c:6a:84:8f:05:30:62:a4:7f:
         28:cd:3c:e6:53:e6:90:d7:00:ea:63:e6:aa:d8:16:5a:28:ca:
         e6:62:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:26:23 2025 by rpki-client