Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File:                     uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier:          zs/LjgH/1h/9HBspwH64++wy2poXyBx2qcKDWqLGN1E=
Subject key identifier:   8E:0F:E5:9A:D1:05:96:95:B9:C7:30:03:8D:22:B7:90:CA:D1:A3:58
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer:       /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial:       0198D660A129199CBBCB0581BF83B4E4A36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number:          088C
Signing time:             Sat 23 Aug 2025 10:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:53 +0000
Files and hashes:         1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: F6ngmo/D1c+BvM8BbH36K34u6es/WJwpaXcHle99pD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:a1:29:19:9c:bb:cb:05:81:bf:83:b4:e4:a3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
        Validity
            Not Before: Aug 23 10:01:53 2025 GMT
            Not After : Aug 24 10:01:53 2025 GMT
        Subject: CN=8e0fe59ad1059695b9c730038d22b790cad1a358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:56:c0:bd:e7:37:7e:61:e5:2d:77:e0:ed:
                    fa:a3:ac:43:c5:fe:32:1b:b1:a2:1f:19:6b:01:2d:
                    01:70:09:c2:a0:40:35:9d:79:16:f0:ba:97:f6:e0:
                    61:61:50:7e:27:08:9c:00:fe:54:0d:73:8e:43:88:
                    88:73:b9:e7:9e:f4:4a:0f:75:64:68:2b:ea:ec:08:
                    04:b4:4f:85:40:5f:42:c4:4b:b5:66:86:c4:29:fe:
                    ab:63:ca:b3:1c:a5:f5:c0:03:4e:f9:8a:36:a7:9b:
                    0e:a8:ab:9f:3d:59:44:83:83:53:c1:df:95:22:e4:
                    2e:02:fc:15:6c:7c:8e:25:14:39:28:f8:2d:58:c3:
                    c6:36:a3:51:f8:96:fa:21:30:2e:ed:02:02:fc:2a:
                    4b:af:20:d2:5c:95:2b:56:b1:4a:89:62:d4:6d:9d:
                    34:b0:27:40:ff:b9:5d:85:7c:84:d4:ef:6c:21:7c:
                    07:45:94:d8:26:95:9f:bd:d4:b5:d2:35:65:36:9f:
                    21:78:94:a6:2b:85:b1:a9:36:f0:86:0e:6c:60:06:
                    2b:77:ac:2a:64:87:f4:de:74:ad:94:f8:91:1a:a5:
                    08:64:fa:d0:13:97:40:26:d6:f7:87:90:80:15:c3:
                    cf:c9:fa:8d:64:f8:89:fc:fa:a7:9c:ee:66:d3:72:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:E5:9A:D1:05:96:95:B9:C7:30:03:8D:22:B7:90:CA:D1:A3:58
            X509v3 Authority Key Identifier:
                keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:27:2b:9f:b2:e6:94:10:70:d5:f3:5b:df:c1:40:e7:37:
         fd:a4:96:cc:e7:82:0c:82:97:5e:e2:54:34:b3:b3:f6:2f:4d:
         9b:cb:d6:98:36:be:12:07:67:24:de:f1:dc:b6:b8:9c:45:f6:
         9a:81:7b:f2:84:a3:16:23:cd:3e:47:07:fa:0d:98:e4:f8:73:
         62:11:4d:29:50:54:3b:13:23:61:b7:ad:28:88:01:4a:1e:c0:
         1d:4d:47:3c:bf:7c:25:2a:c4:51:b4:0a:5d:b7:b8:cd:d7:e9:
         2f:3f:87:a8:cd:74:e6:20:5a:2d:7d:fc:35:2b:31:f0:71:19:
         93:11:08:97:07:31:64:16:69:74:be:57:70:7f:41:8a:86:9e:
         57:9b:9a:fc:7e:9c:52:9b:b4:9d:20:1c:dc:1a:80:95:78:46:
         4b:47:f7:42:9e:9a:41:04:a4:5e:6d:9f:93:33:45:ac:8d:ca:
         cf:4d:24:64:30:4b:59:08:81:7f:e9:09:12:fe:7c:d5:38:ca:
         a4:bb:42:cc:75:d0:e9:e0:d1:a5:12:46:c7:da:ac:11:c4:7d:
         25:e5:1c:8a:a7:55:bc:20:b6:0b:f6:07:de:17:b9:cb:21:c3:
         1b:54:4d:7e:17:70:71:72:f7:66:d9:86:e9:93:c5:72:82:e6:
         9d:b1:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:07 2025 by rpki-client