Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File:                     Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier:          JUzUzv80ryECrNA9V7w75Asi4fyck5I/5GwA5rvLALk=
Subject key identifier:   4D:2F:27:65:0E:3D:2D:45:88:BC:03:70:FA:A9:8A:BE:76:32:05:90
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer:       /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial:       0197B6A08C4CD7978140F91EFCBAB3B61BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:04 +0000
Files and hashes:         1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: AWH499W9uvRdOetiCaVmkENjGeJPCxIfkcnQwJFZ+Oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:8c:4c:d7:97:81:40:f9:1e:fc:ba:b3:b6:1b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
        Validity
            Not Before: Jun 28 13:01:04 2025 GMT
            Not After : Jun 29 13:01:04 2025 GMT
        Subject: CN=4d2f27650e3d2d4588bc0370faa98abe76320590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:6a:7c:2f:4a:de:21:4e:16:64:b7:92:de:
                    b5:1c:ec:88:ae:32:25:88:2e:50:f9:f6:06:85:68:
                    25:0f:95:e0:06:42:22:73:24:3d:d6:a0:a7:2e:f2:
                    6b:fd:67:e1:d7:cf:1b:f3:55:25:a3:a5:59:4e:df:
                    f3:57:05:a1:eb:19:e7:f2:a1:88:cd:31:71:09:6a:
                    81:e2:6f:fe:c9:a5:b3:36:56:95:a9:c0:83:f4:d1:
                    76:7f:41:d7:e2:0e:ba:bb:45:04:b7:c7:a8:e2:6f:
                    af:2d:59:3e:e9:9e:c8:83:9b:5f:19:a1:61:54:c9:
                    81:4f:af:a5:5a:c6:dd:d5:98:df:21:15:40:34:98:
                    2b:c2:9f:7f:fe:f3:e8:89:ae:0d:64:8a:81:81:25:
                    b9:b4:e6:56:c7:c4:b5:20:83:d2:ee:f2:5d:9a:e3:
                    78:0c:51:08:f5:c8:d9:b2:4f:76:61:92:14:fa:44:
                    cb:c7:d5:0d:04:a9:ca:38:10:b8:47:97:29:e6:6a:
                    29:04:57:b5:01:44:fd:33:5c:81:12:c0:cb:b4:b5:
                    82:5e:1c:73:11:a9:57:e2:dc:fd:da:88:e0:91:b3:
                    60:d0:f1:e2:a0:90:15:df:57:1f:70:5e:b5:58:6e:
                    35:bc:f6:f1:b5:8f:c0:ea:fd:7d:94:21:16:77:1b:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2F:27:65:0E:3D:2D:45:88:BC:03:70:FA:A9:8A:BE:76:32:05:90
            X509v3 Authority Key Identifier:
                keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:4d:b8:2f:2a:cb:c7:7a:78:69:e0:5b:a7:50:3b:05:f3:
         56:37:83:20:a0:c7:a1:96:eb:7b:73:62:41:2b:69:da:68:4f:
         00:01:45:75:e7:ae:77:6f:e8:ac:94:85:3b:bb:d6:8b:ef:09:
         78:90:ad:d9:a7:00:99:cf:36:c4:88:96:fb:f0:34:23:9d:74:
         33:a8:be:14:db:95:4f:6e:f1:3c:39:c3:b1:c1:84:f5:b6:27:
         8f:d6:d6:d4:a2:95:38:7f:d7:b2:bc:10:a6:13:71:5b:91:ce:
         58:50:72:5b:b1:62:df:dc:4d:1f:22:07:6a:8b:55:5b:48:70:
         e0:ae:97:2c:96:61:07:c3:fd:fa:70:0a:14:eb:b1:cc:97:cc:
         d0:77:39:7b:08:d1:57:91:89:79:6b:85:07:0b:65:ce:87:ae:
         70:27:e6:b3:e5:7e:73:42:b0:e4:b6:a1:a6:e6:bd:53:d3:0d:
         a9:7c:b7:8c:4d:c4:e1:e4:88:8e:dd:4c:88:41:26:7c:61:31:
         80:b2:d8:ce:6a:4f:54:26:e5:04:81:76:56:ce:a0:eb:47:0d:
         35:99:b4:b1:7a:3c:56:83:b4:bb:4c:54:f7:3e:a7:f3:61:a1:
         3b:86:30:36:73:1c:67:c5:13:bd:c5:fe:a1:cf:45:15:70:3a:
         c8:55:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:44 2025 by rpki-client