Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File:                     UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier:          VZv3TGT8hSnayvPM88S1tOAULbL4uHWRfZREWcTDagw=
Subject key identifier:   DE:A2:30:88:28:75:C1:39:A0:68:6E:F4:04:41:D3:7C:9B:63:FA:FC
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       0196A8AFF922C4D91771FE96CCCE1EFA0E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number:          088D
Signing time:             Wed 07 May 2025 03:00:26 +0000
Manifest this update:     Wed 07 May 2025 03:00:26 +0000
Manifest next update:     Thu 08 May 2025 03:00:26 +0000
Files and hashes:         1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: /rydjt/NzSgSEfBy8p7Ci3GdWhHCRUgZk7jFS1f2PFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:af:f9:22:c4:d9:17:71:fe:96:cc:ce:1e:fa:0e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: May  7 03:00:26 2025 GMT
            Not After : May  8 03:00:26 2025 GMT
        Subject: CN=dea230882875c139a0686ef40441d37c9b63fafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:1c:35:ce:39:9e:34:38:7a:60:9d:ed:fb:
                    52:78:dc:ae:3b:88:e7:b3:8a:d0:1f:a8:42:e9:2b:
                    e1:dd:4d:0e:ef:14:25:44:ef:86:9c:a4:c5:0b:e8:
                    df:e8:bf:9f:21:0a:01:54:82:b2:be:7c:35:ed:5b:
                    30:ce:32:b8:b4:d1:f0:ac:a0:a8:49:d5:cf:23:5f:
                    a4:c3:db:41:53:00:be:0e:6f:d0:6b:4c:b6:6d:72:
                    f8:6b:98:91:85:f0:3f:4c:44:3a:97:ea:90:88:c3:
                    6a:cd:80:00:8d:23:49:a1:74:78:98:25:0b:a1:ea:
                    c0:04:d4:4d:fb:2a:4b:58:e0:93:f0:f0:9d:43:3e:
                    47:21:e6:9a:00:7d:cc:39:7e:a9:04:e3:61:81:bd:
                    a5:e8:ef:4e:c2:d7:8e:5d:a1:00:fe:e2:7c:4e:ce:
                    a1:5a:92:92:3e:90:0b:43:1f:bf:b8:d1:48:45:ef:
                    27:f4:fa:88:44:42:dc:30:73:ad:a7:6b:ea:76:65:
                    ef:cc:e3:bb:43:a7:49:38:58:62:d1:b3:7c:33:28:
                    bd:58:8f:ec:57:d8:cc:2e:1a:12:46:69:3c:7c:e6:
                    6a:7e:27:8e:d1:38:11:f2:c0:22:57:15:09:1b:f3:
                    48:42:ff:80:c7:99:46:4f:a7:11:25:81:b3:c2:a2:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A2:30:88:28:75:C1:39:A0:68:6E:F4:04:41:D3:7C:9B:63:FA:FC
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:95:ad:4e:7f:f5:86:a2:ca:04:67:85:eb:65:c7:16:cb:be:
         e8:52:a3:56:0c:de:dd:b6:a5:b1:c1:d2:aa:04:6a:56:4f:3d:
         89:ce:7b:eb:38:e8:ca:d2:42:ae:5c:fc:e3:61:df:7a:9c:a6:
         0e:50:35:65:0f:fe:4f:95:74:1f:fe:e9:3e:da:b9:c8:2a:89:
         6c:d1:96:71:c9:7a:48:6b:51:2f:d7:ce:84:bf:00:77:09:c3:
         d4:80:29:75:3b:d1:c1:b0:5e:ea:d9:0c:89:46:cc:6f:87:8f:
         89:c4:0a:bd:23:4d:ac:de:ad:f4:91:0a:6c:e1:e9:91:13:52:
         9d:7f:f7:9d:a9:7e:75:a4:79:d1:26:6f:e6:7f:fc:6e:b4:0c:
         13:63:20:5e:ed:8b:32:e8:f3:07:53:36:9a:11:1a:49:7e:2d:
         14:81:9b:06:f6:3e:67:fc:96:bd:7f:f4:e1:55:86:61:1e:e3:
         af:7a:08:86:79:5f:9c:72:0e:1d:be:18:cb:03:56:6f:c7:4a:
         8e:07:69:7d:1e:52:d6:f5:3b:48:7c:40:b0:04:2b:c2:77:44:
         f2:82:21:30:36:19:70:bc:71:d1:ee:45:81:e2:2c:21:b4:52:
         6d:4e:7e:b5:19:b4:2c:ac:77:25:cd:30:b9:e9:f5:24:48:e5:
         ae:aa:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:33:11 2025 by rpki-client