Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File:                     uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier:          u+JaKkT4RlaThXCj5giYGBMuHNclWVat4c4vAmTsy50=
Subject key identifier:   CC:7B:E7:0E:8B:52:A6:1C:5B:0E:CB:41:E4:4F:1E:4D:85:C2:02:6B
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer:       /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial:       0196BB91E4CD623A303210D6A70218DB504F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number:          0BFE
Signing time:             Sat 10 May 2025 19:00:22 +0000
Manifest this update:     Sat 10 May 2025 19:00:22 +0000
Manifest next update:     Sun 11 May 2025 19:00:22 +0000
Files and hashes:         1: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: LE+YTJczMP9xUlI+WGUnIGuup8n5q45Org3pRjr3edg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:91:e4:cd:62:3a:30:32:10:d6:a7:02:18:db:50:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
        Validity
            Not Before: May 10 19:00:22 2025 GMT
            Not After : May 11 19:00:22 2025 GMT
        Subject: CN=cc7be70e8b52a61c5b0ecb41e44f1e4d85c2026b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:cd:3b:ac:84:e7:cd:83:ca:e5:28:e8:88:
                    f9:76:c2:e2:96:df:e0:76:3e:ce:15:98:82:d6:a3:
                    8b:df:fe:b5:4d:3a:05:f6:db:67:22:2c:02:31:32:
                    14:9f:48:ea:56:1e:0a:da:a3:10:a1:97:13:50:1a:
                    64:f2:b4:8c:e7:7b:54:e4:fe:30:f8:35:20:8f:08:
                    42:fc:a3:f7:e5:c6:ee:22:29:4e:20:44:4e:c2:54:
                    67:89:26:c8:ef:d7:40:10:73:e2:f9:b2:8c:ac:af:
                    f2:15:92:05:73:37:80:fe:02:65:af:65:75:3d:d1:
                    a2:59:c3:c6:e6:ef:d2:85:2a:db:47:9e:42:c1:a0:
                    1b:df:14:d5:59:47:23:d4:a6:8d:e2:af:53:ec:22:
                    d0:df:0b:c7:02:1a:66:50:16:24:1f:b3:51:30:6a:
                    c9:ca:ba:ca:5e:d1:4f:99:2a:01:88:1e:83:01:bb:
                    08:9f:5c:82:b1:42:88:bc:0a:9e:49:f5:6f:c5:2f:
                    aa:5e:4f:55:00:3d:e7:77:64:8d:6a:36:9b:0d:73:
                    03:7f:a6:1a:1d:83:ed:98:65:e0:b9:f2:13:cc:79:
                    2f:a5:d8:bf:49:9d:07:a2:85:91:08:d0:a2:5a:78:
                    16:c7:e1:b0:2a:6c:39:06:d4:1b:02:1d:a2:de:38:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:E7:0E:8B:52:A6:1C:5B:0E:CB:41:E4:4F:1E:4D:85:C2:02:6B
            X509v3 Authority Key Identifier:
                keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:00:df:ef:ad:3f:50:75:38:2f:05:ed:14:81:0c:00:af:5f:
         43:3b:cd:50:7b:3f:e5:2c:15:99:60:3d:21:39:5e:a9:36:0a:
         4a:e8:fb:ab:42:cd:dc:34:3c:ad:58:ea:89:05:72:be:1e:20:
         19:7b:91:ce:d2:e6:b3:9f:54:30:38:65:d8:fd:55:df:3f:b2:
         5b:54:54:2d:e8:0b:05:76:55:21:4f:e1:9b:e0:b4:eb:32:a0:
         dd:b8:ac:9c:e8:c0:c4:dd:c1:d9:36:44:ff:82:4e:23:07:3f:
         eb:40:ae:47:ed:b1:e5:e2:9c:c3:67:3a:41:ba:b2:ef:d8:29:
         d8:3e:42:d8:c0:b7:b1:d9:73:8b:cd:fb:78:cd:b0:2c:f6:05:
         00:74:60:d0:91:90:88:b5:f0:e4:26:c8:8a:dc:9f:9f:df:4c:
         a2:ab:b6:d9:08:01:da:6b:16:2c:4e:70:e2:0e:af:ed:62:9d:
         98:86:d6:bd:df:12:d0:fd:d5:85:7a:63:b2:9f:8f:1e:6c:8e:
         8b:db:70:33:44:52:67:e0:a7:22:13:6b:39:e0:ec:40:a3:2b:
         09:a3:8e:19:02:3e:be:74:c7:d9:4d:8a:5c:9c:f9:f0:cf:ee:
         9e:03:45:4f:d6:e2:99:7c:83:0f:3a:8c:91:0e:4e:d5:c8:95:
         52:ca:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:12:26 2025 by rpki-client