Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File:                     UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier:          XYovlDcMpd+a/Ewt0mIpA1DJA60duD9KSif4CwAZGuQ=
Subject key identifier:   C5:57:A3:82:52:BE:32:A6:A0:67:B4:76:34:E1:CA:5F:FD:FE:E6:75
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer:       /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial:       0198D5836BE277DF65C7598D063EDA457400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number:          0A6B
Signing time:             Sat 23 Aug 2025 06:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:16 +0000
Files and hashes:         1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: wrBrN9lu9lxVV8u+KdeQ0eTgEkuvtBMbH5tcYXnFXH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6b:e2:77:df:65:c7:59:8d:06:3e:da:45:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
        Validity
            Not Before: Aug 23 06:00:16 2025 GMT
            Not After : Aug 24 06:00:16 2025 GMT
        Subject: CN=c557a38252be32a6a067b47634e1ca5ffdfee675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9b:68:7e:18:4f:9f:59:8c:b8:55:b5:08:8b:
                    70:96:4d:cc:ab:e5:b3:dc:71:0b:72:67:2a:fb:ae:
                    2a:3a:97:54:67:31:b4:17:62:2f:39:d7:22:15:c5:
                    b4:98:49:8c:22:5e:d1:13:25:5e:40:34:ef:db:d4:
                    b1:04:31:bb:31:1a:fd:fb:dc:8b:f0:7f:db:99:16:
                    32:4d:aa:ac:62:d6:b5:5b:9f:36:58:46:06:c4:48:
                    f9:9a:f0:ae:ba:fb:c0:d7:fb:80:ac:31:84:27:47:
                    8c:75:85:b8:0f:1e:15:9f:91:71:56:3b:36:df:71:
                    8d:24:4c:e8:ba:6a:56:90:ca:ee:06:fd:6d:98:29:
                    b2:6c:ce:28:94:62:c8:d6:18:5e:5e:58:90:28:8e:
                    db:1a:b2:dc:45:96:9f:e6:23:5e:5c:f5:0c:34:00:
                    30:bb:1f:40:ae:2d:82:7d:a9:ae:4d:a8:93:e9:79:
                    33:a9:30:a4:7d:34:15:02:cd:67:df:a2:32:17:57:
                    89:63:82:4e:20:95:79:43:5f:3f:fc:1d:a2:f0:62:
                    e2:62:2a:af:8d:ab:ca:ea:a8:8d:3a:d3:f8:63:ff:
                    ba:2f:51:0a:85:d8:bf:d2:67:e8:28:af:7e:20:e4:
                    9b:fa:37:87:a5:51:13:e8:eb:c8:aa:ab:bf:cb:c5:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:A3:82:52:BE:32:A6:A0:67:B4:76:34:E1:CA:5F:FD:FE:E6:75
            X509v3 Authority Key Identifier:
                keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:34:91:01:36:7d:39:3d:d8:26:68:52:28:e1:1b:8a:db:59:
         28:57:ac:12:5d:eb:0e:a0:03:8d:f1:18:63:28:f5:ac:8c:b7:
         8f:10:5f:34:fb:e1:eb:a3:d9:5a:eb:5e:0f:6f:a3:dc:3c:34:
         03:5f:8b:87:ca:07:20:3f:41:c0:b0:c6:45:86:2d:82:db:65:
         04:d5:7d:b4:db:9a:66:00:5e:f0:69:be:0e:06:85:40:5b:66:
         8d:4f:b7:0b:94:4d:e3:e9:1d:2d:c0:6c:b0:80:ac:15:cf:79:
         42:96:d3:df:aa:7a:a3:d5:aa:b8:38:85:4b:5d:1b:99:22:12:
         05:c3:c7:ac:72:11:00:0e:32:ef:2a:af:eb:a9:c9:a8:c1:f6:
         34:16:85:71:68:38:38:2c:df:94:bc:83:d4:ff:db:65:34:35:
         02:a7:71:33:fe:f9:ad:eb:74:ca:65:3a:47:f0:08:7b:49:96:
         5a:ce:dc:6a:99:4c:0c:15:8d:55:5e:de:6d:98:a6:35:92:bb:
         f1:2b:f8:67:1b:d1:ca:7c:ad:19:0a:7c:c6:28:df:39:70:77:
         d1:b9:17:03:0c:00:60:06:07:ed:b4:f9:ba:be:6f:fe:74:97:
         ab:d2:8c:1a:2f:f9:06:d6:75:75:70:1b:d9:df:0f:0f:2d:e4:
         3c:da:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:23 2025 by rpki-client