Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
File:                     UyClURbR4jWcx9PivGStEZ4RdbE.mft (raw, json)
Hash identifier:          1Lfq5BmMXm50/qE5XUoKPwI6HMNs9T99g2HjcvW0HL0=
Subject key identifier:   78:01:E4:FC:2F:0B:2F:EB:B2:B6:3C:07:84:5E:9A:87:BB:30:AE:94
Authority key identifier: 53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
Certificate issuer:       /CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Certificate serial:       0198D583C324936051157AEB1FB1171889A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
Manifest number:          0593
Signing time:             Sat 23 Aug 2025 06:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:38 +0000
Files and hashes:         1: UyClURbR4jWcx9PivGStEZ4RdbE.crl (hash: cAwXBq3ZHBL8QWlG7M6BlqJQXzcFdcd6JsjVR57CAbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c3:24:93:60:51:15:7a:eb:1f:b1:17:18:89:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
        Validity
            Not Before: Aug 23 06:00:38 2025 GMT
            Not After : Aug 24 06:00:38 2025 GMT
        Subject: CN=7801e4fc2f0b2febb2b63c07845e9a87bb30ae94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:2b:64:b3:6a:df:c9:70:c2:da:89:97:86:
                    0c:23:1b:7b:2f:a9:3b:1c:e3:1d:2f:d7:33:53:ae:
                    f7:22:28:dc:e4:00:98:22:fe:2e:35:24:7d:5f:55:
                    50:76:1d:01:06:bc:92:49:89:23:1a:8e:56:44:62:
                    fd:d3:23:f3:ea:62:8e:31:40:34:aa:85:04:e8:52:
                    e7:dc:84:cc:8d:60:de:c7:57:22:50:60:a4:ce:c1:
                    d6:7f:f2:a9:e2:a7:26:fd:77:9d:b4:f9:15:72:9c:
                    2d:1a:93:55:fc:6b:61:e8:ff:dd:41:61:1a:2e:40:
                    f0:a7:4b:72:73:10:47:0c:0f:ce:ac:3b:7d:54:e5:
                    08:5d:8e:cc:c1:99:5e:74:18:b7:16:17:1f:ba:89:
                    f3:b0:55:4b:c6:71:1b:f0:5f:80:fa:2f:bd:63:6a:
                    f1:e6:a5:5b:fe:e2:c4:05:c8:c1:7e:8b:87:52:86:
                    b1:27:b5:75:52:0b:9e:ce:1e:17:1c:4e:d6:a3:83:
                    1e:05:27:e5:5a:9f:44:4c:7d:b1:49:51:b4:1e:a7:
                    8a:1e:0d:b0:8e:07:98:02:36:71:ce:41:9e:22:7a:
                    77:b4:e2:b8:e2:ad:18:2d:86:d9:a6:15:4b:df:ff:
                    a2:91:11:4f:68:72:9a:7f:43:be:cb:0d:14:c2:90:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:E4:FC:2F:0B:2F:EB:B2:B6:3C:07:84:5E:9A:87:BB:30:AE:94
            X509v3 Authority Key Identifier:
                keyid:53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:64:c3:f9:43:25:74:fe:0e:dc:28:86:a5:b1:5a:63:62:
         f7:d6:12:66:f5:ad:5b:6d:e6:2b:06:d2:8f:5e:f3:10:8e:a4:
         6e:33:53:5a:ca:2a:11:c4:96:53:fd:84:19:c7:1e:f6:fd:f7:
         e8:e9:8b:16:1f:e4:af:fe:8b:ee:19:83:9b:fb:6b:ae:37:5b:
         0e:af:ec:ad:5e:3f:e1:cc:f4:5c:ae:dc:7b:eb:5c:42:b0:3b:
         f8:b5:ef:f0:cb:a1:a3:02:5a:c8:a2:dd:2a:5f:e6:71:66:c5:
         15:31:66:0c:a0:bf:a0:ee:ad:4b:07:18:14:f2:4b:0c:9c:cc:
         af:60:79:26:bd:ea:ca:c2:e1:7b:f6:f2:5c:86:28:53:ab:bc:
         c4:d6:af:71:2a:81:62:f2:f2:fc:5d:53:4b:ae:01:7d:8f:71:
         4d:8f:42:1c:76:3e:1c:0c:56:88:df:f4:24:ac:a2:bc:09:96:
         ff:35:9c:90:d1:5c:18:21:ec:ca:05:2c:cd:47:72:b8:57:f3:
         4e:df:57:f3:82:c8:cf:5c:f5:a4:f0:75:33:1a:d2:56:29:70:
         8b:86:cc:f4:ef:d2:34:89:b5:0f:fe:62:ed:bf:f6:96:d4:6f:
         22:1d:49:95:d3:ac:23:50:be:d7:e8:4d:8e:25:a9:e3:fd:c1:
         b6:b2:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:46 2025 by rpki-client