Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
File:                     uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json)
Hash identifier:          sap9QSktfCt11xfT4BK58mITInrazcTXDPWvYS1sazI=
Subject key identifier:   C1:E1:98:32:13:40:91:6C:22:BF:0F:5C:42:4B:63:1C:8F:78:56:59
Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
Certificate issuer:       /CN=bb362881ffe362531400608b6328bb12dfa16081
Certificate serial:       0198D65F0CE4E8165C7311D707BD3A73670A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
Manifest number:          0D4F
Signing time:             Sat 23 Aug 2025 10:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:09 +0000
Files and hashes:         1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: KVHetrenhQx5Avd8MKiJRkFWNA3LbspKRHKXROb+L7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:0c:e4:e8:16:5c:73:11:d7:07:bd:3a:73:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081
        Validity
            Not Before: Aug 23 10:00:09 2025 GMT
            Not After : Aug 24 10:00:09 2025 GMT
        Subject: CN=c1e198321340916c22bf0f5c424b631c8f785659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:70:f9:30:1c:19:e8:2d:c0:38:1b:93:26:12:
                    fc:ec:3f:58:e2:59:64:52:8d:25:3d:f8:6b:fb:0e:
                    72:01:da:1b:d8:ca:9e:6f:1e:b2:0a:bc:0c:b2:58:
                    1d:4d:dd:35:c6:3d:e8:1e:3e:5d:88:3b:a0:c5:d0:
                    9c:24:d0:07:8a:49:32:42:ee:dd:7b:74:44:89:a2:
                    61:6c:fb:a2:d1:03:01:ca:fe:ab:45:69:22:52:de:
                    07:05:3b:61:b3:03:50:4a:4c:97:3c:cb:50:1b:ef:
                    c6:45:37:4d:2e:93:c1:3f:40:0c:84:fa:0b:e4:de:
                    c5:dc:42:74:fd:eb:18:eb:6c:7a:be:54:44:c6:fb:
                    de:5d:23:34:83:3d:1a:72:30:ad:6a:f9:af:29:32:
                    b7:a2:7b:50:5c:d7:41:11:f5:47:e4:72:5f:88:ab:
                    ba:b0:8c:77:1d:dc:79:36:a1:18:31:94:d1:18:95:
                    7c:c7:3e:aa:f9:6d:cc:e0:20:62:ce:44:21:bc:3b:
                    f1:b8:68:f9:ed:1a:89:dd:8a:b5:4a:46:bf:ea:82:
                    f0:a6:ca:aa:0a:3d:df:7c:d1:60:48:5d:7c:f0:a2:
                    a6:46:d6:77:b1:87:03:6c:66:96:13:90:3b:da:4b:
                    2b:a1:7b:39:d8:b2:41:46:1b:1e:a4:ac:31:f3:f0:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E1:98:32:13:40:91:6C:22:BF:0F:5C:42:4B:63:1C:8F:78:56:59
            X509v3 Authority Key Identifier:
                keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a5:87:e6:6a:34:68:cc:8a:63:82:05:80:9d:79:5e:b0:cb:
         01:a1:c4:e5:5f:26:e6:84:a5:a1:99:00:a6:78:77:c1:b5:63:
         f3:02:7a:71:b8:f5:85:96:c1:91:c8:2d:93:82:ed:42:13:ff:
         36:0c:5c:5b:b7:5d:cd:18:46:41:64:3a:d5:5d:2f:ad:20:60:
         40:77:ac:5d:de:92:d8:6c:36:38:4b:e8:b2:bc:79:fa:a3:fb:
         c2:72:f0:6c:28:15:42:65:b4:f6:35:31:a2:cf:3b:92:69:f8:
         fe:47:ec:d7:4a:46:e8:53:ab:f3:c9:17:ee:52:67:44:62:d2:
         e9:1e:98:86:87:3e:71:00:4b:08:fb:28:45:ea:f5:8f:d5:95:
         2a:3b:7a:8f:d0:c0:2a:16:7f:08:9e:68:97:ba:5d:32:b1:4e:
         cc:a3:70:70:09:a9:73:38:f9:50:e4:01:1b:89:b6:dc:a4:e3:
         80:0e:44:fe:c9:20:55:2e:87:66:6d:2e:1d:fd:79:b3:79:2c:
         20:72:b3:78:20:bf:4f:75:15:a5:6e:fe:c1:f3:95:ea:3a:54:
         31:d9:00:03:64:52:58:b3:e3:c8:60:d4:ab:81:58:d5:c8:9f:
         6f:c3:89:4a:01:51:a9:0e:57:f7:54:fb:39:ba:08:3f:2e:b7:
         2a:9a:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:08 2025 by rpki-client