Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File:                     ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier:          PyDYG7mdK1iZ1+bPAY8L7LzwqfZSv/Bwp0iUyxZpsRs=
Subject key identifier:   A6:FD:9B:CD:DC:06:16:CD:88:DD:1E:BD:80:BD:4B:BB:14:6C:91:CE
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer:       /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial:       0198D4743DF84DF72647A30D19FDADD40F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number:          1006
Signing time:             Sat 23 Aug 2025 01:04:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:04 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:04 +0000
Files and hashes:         1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: 4hq7misKw0EnY/bJ2yU9quSzE8I/w3Q5Z0ARi3sWPgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:3d:f8:4d:f7:26:47:a3:0d:19:fd:ad:d4:0f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
        Validity
            Not Before: Aug 23 01:04:04 2025 GMT
            Not After : Aug 24 01:04:04 2025 GMT
        Subject: CN=a6fd9bcddc0616cd88dd1ebd80bd4bbb146c91ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:63:3c:c9:54:63:0e:1b:a8:68:41:35:59:
                    fa:c7:c6:ee:de:e7:82:6d:90:eb:b0:ac:c2:47:9c:
                    e5:a2:ce:2c:b7:0b:68:7b:81:aa:7f:e7:8a:35:94:
                    93:81:f4:e9:c7:ac:28:5a:d8:d6:7d:1b:14:fd:2d:
                    fa:3e:59:2f:cd:f1:a9:bb:45:76:b9:73:d4:4c:62:
                    45:a7:52:66:3a:98:68:17:e2:ab:f4:8f:76:42:44:
                    61:47:b5:d3:56:c8:e4:9f:52:6a:34:e7:27:99:9f:
                    72:26:48:fd:2f:58:1b:43:4a:26:51:ae:ea:e2:c1:
                    97:b6:8f:85:89:f4:5d:c7:f4:7e:45:5a:fe:8d:22:
                    7d:d8:35:b3:88:67:99:f5:7e:e5:65:e4:ff:ca:8c:
                    09:f0:b0:3e:89:2c:65:f9:c1:c0:d3:23:60:cf:8e:
                    9a:b3:d3:75:bc:5e:44:f5:42:be:ab:03:dc:f7:1d:
                    82:70:30:3f:be:de:8c:e0:ff:ba:45:45:9d:8f:6e:
                    30:ea:de:e1:ee:ca:7e:96:94:b3:be:8e:af:a3:0d:
                    6e:50:9a:35:35:7f:8c:8d:61:4c:c1:d2:82:33:42:
                    8c:5f:d7:fe:85:cb:54:91:88:ad:d1:16:e7:2a:84:
                    40:4c:ff:aa:c0:e9:5d:e8:f3:d8:b0:ce:11:96:a5:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:9B:CD:DC:06:16:CD:88:DD:1E:BD:80:BD:4B:BB:14:6C:91:CE
            X509v3 Authority Key Identifier:
                keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:cd:b2:12:e0:db:fb:d2:ae:06:0a:df:d1:3e:27:ef:fd:
         74:0c:97:f6:0f:5a:47:1b:2e:20:97:ac:a2:09:a9:50:a7:ec:
         3c:82:7e:d9:31:02:0b:b8:be:89:0b:cb:b5:2c:02:83:18:cd:
         01:2d:60:28:ff:da:84:fa:89:87:89:8b:11:7e:37:db:12:50:
         36:5d:73:fb:7a:fe:46:81:9e:3f:dc:b6:3f:06:48:c6:92:b2:
         37:15:5e:08:60:95:55:d9:6c:e4:9f:c5:87:f6:7e:2c:de:9c:
         f1:e9:d6:1a:e0:99:d9:ef:3f:44:bf:e8:73:32:cf:90:90:f8:
         8d:d1:21:fe:66:27:1a:b2:71:7a:a2:f0:0a:32:af:3d:cb:1f:
         04:de:f3:e3:c3:11:8d:4a:09:90:93:a1:3c:2e:a0:26:8e:8d:
         e8:d8:4e:35:27:84:83:eb:52:f3:e9:f7:b3:6f:a5:7e:d5:9f:
         04:a9:91:e2:6a:46:ba:72:a7:b8:33:c9:07:de:ac:29:18:34:
         2a:e5:d1:f6:59:4d:e7:31:64:a3:d9:3c:fe:ab:ce:dd:06:25:
         4a:f9:07:62:d7:f8:c2:a4:cd:fd:86:04:7c:c9:bb:74:ad:eb:
         1a:dd:76:65:18:b9:08:37:62:90:36:05:44:bf:d2:00:e2:ad:
         7b:bb:24:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdD34TfcmR6MNGf2t1A9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTNjYTE4ZTNhMDQ4ZDU5ZmE2Y2Y1OTY2N2NmZDM5YTA1
Nzk3M2UwHhcNMjUwODIzMDEwNDA0WhcNMjUwODI0MDEwNDA0WjAzMTEwLwYDVQQD
EyhhNmZkOWJjZGRjMDYxNmNkODhkZDFlYmQ4MGJkNGJiYjE0NmM5MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKZjPMlUYw4bqGhBNVn6x8bu3ueC
bZDrsKzCR5zlos4stwtoe4Gqf+eKNZSTgfTpx6woWtjWfRsU/S36PlkvzfGpu0V2
uXPUTGJFp1JmOphoF+Kr9I92QkRhR7XTVsjkn1JqNOcnmZ9yJkj9L1gbQ0omUa7q
4sGXto+FifRdx/R+RVr+jSJ92DWziGeZ9X7lZeT/yowJ8LA+iSxl+cHA0yNgz46a
s9N1vF5E9UK+qwPc9x2CcDA/vt6M4P+6RUWdj24w6t7h7sp+lpSzvo6vow1uUJo1
NX+MjWFMwdKCM0KMX9f+hctUkYit0RbnKoRATP+qwOld6PPYsM4RlqWeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb9m83cBhbNiN0evYC9S7sUbJHOMB8GA1UdIwQY
MBaAFLpTyhjjoEjVn6bPWWZ8/TmgV5c+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMt
MWIyMDQ1NGEyODYyLzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMtMWIyMDQ1NGEyODYy
LzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbnNshLg
2/vSrgYK39E+J+/9dAyX9g9aRxsuIJesogmpUKfsPIJ+2TECC7i+iQvLtSwCgxjN
AS1gKP/ahPqJh4mLEX432xJQNl1z+3r+RoGeP9y2PwZIxpKyNxVeCGCVVdls5J/F
h/Z+LN6c8enWGuCZ2e8/RL/oczLPkJD4jdEh/mYnGrJxeqLwCjKvPcsfBN7z48MR
jUoJkJOhPC6gJo6N6NhONSeEg+tS8+n3s2+lftWfBKmR4mpGunKnuDPJB96sKRg0
KuXR9llN5zFko9k8/qvO3QYlSvkHYtf4wqTN/YYEfMm7dK3rGt12ZRi5CDdikDYF
RL/SAOKte7skoA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:00:33 2025 by rpki-client