Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          M7ggr5343yqWx+DldEvyXu+HsJQ9Aa5sOJ9ISuQ8RCU=
Subject key identifier:   D1:B0:67:FC:3E:E9:09:79:DD:DB:62:EA:7E:9E:79:5F:BE:36:B2:FB
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       01974EC590989BEAB33CF98D1FE26FF600D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0D10
Signing time:             Sun 08 Jun 2025 09:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:59 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: lJPpVjYEhfQPcsfMPC7ixOfU7qQbLcdhShlZEZCN0bE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:90:98:9b:ea:b3:3c:f9:8d:1f:e2:6f:f6:00:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Jun  8 09:00:59 2025 GMT
            Not After : Jun  9 09:00:59 2025 GMT
        Subject: CN=d1b067fc3ee90979dddb62ea7e9e795fbe36b2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:05:a6:5b:17:19:6f:d2:e4:6c:f9:26:41:
                    11:37:db:13:59:98:47:cd:b4:cd:d3:7a:fc:ac:0f:
                    75:97:08:98:37:e7:fd:2f:26:18:06:96:72:87:3b:
                    e5:ba:7f:0e:f7:e2:91:e8:fe:ef:6b:42:24:72:64:
                    1a:c8:5f:9f:79:fe:82:c8:ef:5b:41:78:35:47:57:
                    09:02:04:cd:90:8d:21:8d:af:68:e9:cd:69:9a:26:
                    17:75:ce:67:3b:75:ca:18:a9:cf:c3:16:c3:7e:21:
                    a4:09:79:34:07:a9:aa:d4:72:36:7e:c0:eb:84:23:
                    96:20:c7:ad:c3:dc:d6:00:ed:d0:71:cb:83:5b:cf:
                    bd:8c:6b:29:be:d3:af:51:97:dc:eb:69:e8:d2:5d:
                    60:fd:c9:c0:fa:21:26:9f:1f:1e:5a:e3:26:a7:98:
                    9c:b5:b6:03:2b:4d:06:37:55:89:99:55:f3:4d:1a:
                    90:79:67:0b:b2:c9:57:08:ff:6c:ec:26:e0:1f:57:
                    58:ed:4d:84:91:05:57:a8:db:cf:de:3d:dd:4d:cf:
                    99:52:cd:d9:00:ee:f4:9b:b6:c8:00:d8:67:73:86:
                    b5:d2:dc:d5:47:79:db:07:1f:e0:20:21:9c:24:60:
                    56:9a:85:e9:f3:47:2c:3f:81:79:c6:3f:b3:5e:e1:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:67:FC:3E:E9:09:79:DD:DB:62:EA:7E:9E:79:5F:BE:36:B2:FB
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:25:80:9a:c2:7b:69:21:85:2e:19:c1:0c:3a:87:d7:bf:
         83:06:ad:d5:f0:ce:31:c6:76:22:e6:dd:81:0a:d6:33:44:c3:
         7f:33:03:6e:29:3b:b8:b7:58:84:5b:ab:e5:c9:c6:0a:c6:f6:
         e7:56:1d:0b:dc:01:de:64:a3:ce:78:77:69:0a:1f:ed:f5:82:
         e1:b4:9d:7e:0e:61:14:df:ae:b0:31:b9:f4:71:48:80:73:e5:
         5c:fa:1b:20:4a:11:a7:13:12:3b:cc:01:98:f9:be:61:2e:21:
         26:c6:fd:79:05:5f:49:87:28:06:57:58:c9:93:f5:a2:a6:71:
         ac:70:37:1d:6b:74:8a:da:11:51:82:83:f5:bb:9d:55:ab:31:
         d0:51:c6:4e:89:dc:0e:76:48:27:d3:1b:11:d5:65:b8:0e:cc:
         e6:9e:14:1a:14:bf:cb:25:5d:fa:0a:60:c1:03:ca:af:d4:65:
         71:73:c8:e6:27:7e:6b:6d:94:92:34:93:ca:98:86:49:33:00:
         e6:56:f3:c6:83:e1:58:51:39:3f:f2:75:3b:08:4f:14:e7:58:
         5b:f1:90:cd:cf:7e:f1:20:d6:21:3f:03:0e:48:0d:e2:85:f9:
         fa:22:8f:f5:4b:37:77:4d:90:a5:47:8d:da:37:8a:c6:19:f7:
         c2:84:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:24 2025 by rpki-client