Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
File:                     uv5tfV8eRHjRoCUXHaawObJjAR8.mft (raw, json)
Hash identifier:          DHwPSWOBu01j3W55MtN1PhmxQfOqG6Ijoj5hH5n2ikE=
Subject key identifier:   9C:0B:91:16:D2:E8:A5:B9:5A:02:24:30:CC:0D:71:3A:1C:FB:46:54
Authority key identifier: BA:FE:6D:7D:5F:1E:44:78:D1:A0:25:17:1D:A6:B0:39:B2:63:01:1F
Certificate issuer:       /CN=bafe6d7d5f1e4478d1a025171da6b039b263011f
Certificate serial:       0198D8501C8F1FBB1FC8BCC818FB4784643A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv5tfV8eRHjRoCUXHaawObJjAR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
Manifest number:          09EE
Signing time:             Sat 23 Aug 2025 19:03:05 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:05 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:05 +0000
Files and hashes:         1: uv5tfV8eRHjRoCUXHaawObJjAR8.crl (hash: abXcQO9HKS8Dh2BomEyZQn80MpQPQYWVJ22xk+yT19A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv5tfV8eRHjRoCUXHaawObJjAR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:1c:8f:1f:bb:1f:c8:bc:c8:18:fb:47:84:64:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafe6d7d5f1e4478d1a025171da6b039b263011f
        Validity
            Not Before: Aug 23 19:03:05 2025 GMT
            Not After : Aug 24 19:03:05 2025 GMT
        Subject: CN=9c0b9116d2e8a5b95a022430cc0d713a1cfb4654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:bf:f9:16:7f:82:45:8a:82:af:43:7e:2b:
                    e2:e8:46:fa:e4:54:c4:13:81:fe:3e:fd:8c:fb:0d:
                    83:bc:12:12:cb:1e:cd:a2:ab:b3:58:7f:ca:8b:f5:
                    50:87:87:5b:6b:c2:f7:bf:3a:68:ac:dd:6d:1d:73:
                    4d:93:c9:18:90:e5:6a:7b:91:06:9b:42:23:0f:e1:
                    a6:ea:f2:7f:fd:46:28:ae:62:02:62:5a:0a:44:5f:
                    5b:83:84:0a:1f:00:86:ec:6b:53:f5:26:d8:5c:7c:
                    2d:6b:7c:e1:88:4b:74:75:de:83:fe:52:ee:26:4c:
                    c1:79:23:9c:c2:24:3c:a6:ba:cc:65:b5:ae:50:26:
                    75:98:a1:1c:71:53:01:19:15:b5:fa:08:2a:32:7b:
                    ab:df:53:b4:e4:93:03:bd:e9:c5:d8:da:d3:64:dd:
                    1b:54:96:94:95:0f:ba:d5:ca:c6:b6:55:99:db:9a:
                    91:17:b8:0a:14:e8:a8:0c:0a:26:21:f7:80:5c:f5:
                    14:9d:f1:1b:d4:49:1c:46:bc:88:f0:fc:93:eb:fa:
                    65:dc:4f:10:81:5d:7c:b6:e6:2c:8a:a0:f1:01:18:
                    b7:2d:0f:b5:12:ac:56:0c:ab:94:b0:d1:66:64:10:
                    9a:44:fb:74:b7:69:af:f1:2f:36:41:55:08:e0:43:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0B:91:16:D2:E8:A5:B9:5A:02:24:30:CC:0D:71:3A:1C:FB:46:54
            X509v3 Authority Key Identifier:
                keyid:BA:FE:6D:7D:5F:1E:44:78:D1:A0:25:17:1D:A6:B0:39:B2:63:01:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv5tfV8eRHjRoCUXHaawObJjAR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e1:9e:75:27:44:93:d0:9a:f6:9a:f6:c7:e7:fb:57:55:5e:
         25:f2:1f:fe:3d:a1:e0:55:92:c7:0a:4c:f4:b9:ca:0c:b3:1f:
         de:2e:8a:ad:73:e0:60:f5:97:07:27:63:32:ad:31:24:75:f3:
         8e:2c:16:56:90:a7:9f:2e:76:bf:70:82:05:2d:2c:58:66:9f:
         5b:f4:88:69:ba:82:ea:2e:c7:01:0d:f2:a5:aa:6f:3d:25:fa:
         9f:d6:89:01:60:4e:f8:9c:0d:55:61:04:0f:40:98:ca:85:67:
         1b:32:34:03:a7:a7:75:22:c9:01:09:0e:65:71:36:f7:a1:80:
         0c:27:d5:96:57:e5:08:34:8c:ec:86:61:78:bc:d0:de:3a:1c:
         e6:fe:b1:fa:84:60:c6:ce:5b:c1:dd:5a:ed:91:b5:a5:80:9a:
         56:cd:8f:55:0e:c8:0f:49:30:98:ac:00:a5:a8:fe:cb:9b:79:
         02:a7:4a:28:3b:ab:e3:6b:65:d6:94:fb:3c:51:7c:b7:02:18:
         ef:80:2f:73:1a:d4:c4:2d:4f:29:48:ad:4d:7f:3d:4a:99:2a:
         71:10:38:ec:dd:35:a8:49:1b:4c:22:9b:d8:81:c6:d0:92:22:
         55:db:4e:24:37:91:b4:6c:bf:22:21:99:a5:7c:96:d9:85:88:
         8f:9e:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:13 2025 by rpki-client