Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File:                     UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier:          jUMLEfp/AiZfLAtM8ai2qBKRDBNLJvgDcAeaGlu/wAs=
Subject key identifier:   E5:C2:1F:28:89:E4:F9:52:BC:5E:83:67:DC:E3:8A:CF:D5:F5:68:32
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer:       /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial:       0196CFF45905C3E441A1D89838833F5F738B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number:          095F
Signing time:             Wed 14 May 2025 18:00:19 +0000
Manifest this update:     Wed 14 May 2025 18:00:19 +0000
Manifest next update:     Thu 15 May 2025 18:00:19 +0000
Files and hashes:         1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: Wemw/9/sMzI3up1ZR9NJFzXoYWz9jpGE4hfvf3nBni8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 18:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:f4:59:05:c3:e4:41:a1:d8:98:38:83:3f:5f:73:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
        Validity
            Not Before: May 14 18:00:19 2025 GMT
            Not After : May 15 18:00:19 2025 GMT
        Subject: CN=e5c21f2889e4f952bc5e8367dce38acfd5f56832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:32:5f:48:c1:5b:34:19:84:bb:06:6c:b9:
                    89:22:1e:3a:76:a5:8c:bb:b5:8b:35:0d:c1:cd:29:
                    d5:6e:a7:5d:72:ae:60:cb:41:ee:93:cc:75:cf:25:
                    e6:55:26:0a:11:51:26:0b:2a:14:6d:1e:3a:fa:58:
                    d7:0c:a3:13:94:0e:81:25:d1:4c:f8:e7:29:99:2c:
                    e6:ed:85:6b:8f:fd:1d:e9:f3:de:87:f3:74:3a:74:
                    c6:92:25:45:0a:ab:65:71:51:c9:c9:b9:7a:ed:16:
                    fb:04:5b:08:23:35:a4:25:37:66:96:0f:8e:8d:2b:
                    c3:4b:19:50:a0:38:46:14:66:8e:f4:97:f7:fa:ec:
                    cc:11:dc:9f:bb:c1:81:ee:ac:57:32:0d:f5:cc:f2:
                    56:cb:dc:18:63:41:0f:0b:b3:e9:c8:78:cd:42:50:
                    19:f3:4e:ec:f6:32:8a:10:74:75:14:b3:d0:93:4c:
                    1c:95:ca:ba:fa:a7:b4:1b:c8:fe:4b:e3:5e:9a:d2:
                    13:c3:f4:0d:f1:4a:fb:0e:51:8d:05:f8:e5:d0:f9:
                    0c:f6:9c:64:38:44:8f:47:60:64:fb:c0:02:a9:d0:
                    21:89:7a:a4:90:7f:94:c8:d1:06:c6:9a:c6:bf:e8:
                    b0:e1:d8:e4:77:f8:02:fa:40:b3:bc:9c:bf:ee:a1:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C2:1F:28:89:E4:F9:52:BC:5E:83:67:DC:E3:8A:CF:D5:F5:68:32
            X509v3 Authority Key Identifier:
                keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:24:88:e3:3b:4a:89:35:d6:3e:62:2a:8e:f8:4d:6d:bf:45:
         23:de:1a:e7:88:53:d2:c7:d8:33:dd:e4:5a:61:ab:53:e7:0d:
         01:7e:40:c7:30:be:d7:86:cc:1c:71:5c:c7:21:89:d8:67:5d:
         d0:48:05:4f:8f:cf:3c:a0:d9:b5:d5:a8:40:2c:83:1f:45:12:
         79:1e:d5:af:31:42:6b:1d:99:0f:49:dd:df:e0:62:ed:b0:a9:
         be:eb:04:f4:c9:09:6c:c0:52:04:49:ee:34:93:b2:71:b9:14:
         2e:c6:82:e6:fd:71:27:50:a6:9d:90:75:e1:53:bc:75:0d:d4:
         fe:66:3f:d0:2c:0d:bd:bd:59:9b:6f:ae:c8:cc:73:99:8f:d1:
         1e:65:29:5a:36:df:8d:b3:be:26:46:6b:82:87:76:50:ab:37:
         10:2e:3a:6c:ba:bf:b7:df:7d:43:0c:a5:80:1f:44:4f:f7:e2:
         8f:61:ff:7e:5b:76:41:58:77:de:dc:08:c2:ba:bc:80:1c:07:
         83:d5:99:9e:16:34:1f:34:ed:1f:e1:4a:68:c7:6c:be:84:79:
         b2:4a:e0:3b:39:b5:e9:53:67:88:44:ba:04:23:a9:16:4f:d5:
         7d:b4:ff:51:d5:41:e5:25:5c:02:e5:b5:b1:0e:38:06:c1:49:
         19:c8:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:59:40 2025 by rpki-client