Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
File:                     Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft (raw, json)
Hash identifier:          0S56r7PlyAV9RXqSnx3jtT6q3V7OohaU6V6cHZXgA8Q=
Subject key identifier:   7E:09:30:3A:4A:AC:2E:53:98:5E:AE:16:C1:38:7D:04:31:21:69:7C
Authority key identifier: 53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C
Certificate issuer:       /CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
Certificate serial:       0197B74534DECEC0CFB2223EE9863CC48924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
Manifest number:          0758
Signing time:             Sat 28 Jun 2025 16:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:55 +0000
Files and hashes:         1: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl (hash: SkTSyIQ1Dq1StlrBnQDKbLRPKgMgWlAzkH0uqGWmTwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:34:de:ce:c0:cf:b2:22:3e:e9:86:3c:c4:89:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5337ddfa6530fcc67f76937debe3d8208cb9902c
        Validity
            Not Before: Jun 28 16:00:55 2025 GMT
            Not After : Jun 29 16:00:55 2025 GMT
        Subject: CN=7e09303a4aac2e53985eae16c1387d043121697c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:b5:09:03:bc:b1:80:6f:7d:54:e0:4a:ed:
                    8b:09:2f:e7:75:7f:72:85:23:a5:23:52:6c:4a:95:
                    55:36:c6:0c:80:9f:2e:54:7b:af:f7:ca:20:e9:c9:
                    8b:65:ad:05:78:5f:59:d7:9a:65:f8:23:96:5c:73:
                    d5:d6:c1:65:26:eb:7b:d0:90:fb:78:54:02:9a:da:
                    9b:14:fa:dd:e4:09:ef:d1:94:1f:2d:0e:ca:ad:0b:
                    26:ed:e8:21:af:aa:df:63:0e:57:f0:7f:a7:72:01:
                    49:cc:48:42:3e:eb:3c:65:26:c0:ee:31:bb:e5:88:
                    7b:66:30:cf:33:cb:b4:58:85:94:4c:a6:e4:65:9f:
                    73:cf:20:b5:8c:90:62:52:98:59:f3:a6:18:4a:af:
                    f7:e1:b0:7b:d0:36:a0:4c:4e:ff:07:4f:2b:7e:12:
                    ed:59:d4:1d:a2:2d:40:dc:18:92:5e:d7:7f:c6:96:
                    4c:a1:c6:48:59:ba:33:bb:06:36:da:51:2f:93:3a:
                    79:63:76:e5:8d:e4:45:b6:e7:05:7d:bf:ef:6b:1a:
                    7a:47:4b:21:49:e6:51:34:02:81:67:42:8d:9b:43:
                    d6:5e:c2:58:36:5d:b9:1d:6b:b9:aa:68:3e:14:e7:
                    38:2b:25:cd:97:92:29:c1:4e:6e:78:1e:75:1d:a6:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:30:3A:4A:AC:2E:53:98:5E:AE:16:C1:38:7D:04:31:21:69:7C
            X509v3 Authority Key Identifier:
                keyid:53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:86:e5:cf:14:1f:51:88:77:79:ad:20:55:65:99:58:bb:
         66:e2:5a:3e:43:e5:05:ec:74:c2:25:1c:6a:e4:15:5c:ee:de:
         96:d6:38:5b:74:11:a0:e2:dc:d5:98:04:17:6a:91:bd:fc:05:
         ca:0f:11:5f:0f:a5:c1:4e:f6:75:e9:32:a7:91:e9:5b:75:27:
         74:f1:82:25:e0:03:8b:a2:bb:78:f2:a0:a4:72:e6:3c:4a:c6:
         1e:84:61:d7:fa:c2:be:65:32:77:8c:4a:ef:62:08:58:6b:3b:
         88:8b:d4:77:b7:20:17:88:e3:7e:87:30:3b:5a:51:84:c0:91:
         1b:a9:ab:e7:89:ab:67:08:6f:9f:39:95:30:41:08:fd:ae:40:
         05:64:3f:4b:01:75:4d:25:b3:09:00:55:c1:9d:4f:88:55:d0:
         54:e2:a0:a0:7a:a1:f7:2c:69:79:54:3c:b1:2e:5d:2f:bd:2c:
         0b:90:48:ed:61:0e:d4:e5:3d:d9:17:7d:9c:63:e7:6b:99:7f:
         56:eb:e7:79:f1:66:df:c7:49:16:04:55:56:d6:08:8b:9c:e6:
         10:71:e5:93:9e:f9:ef:dc:fb:9d:a3:e3:7e:f1:1b:5e:c0:81:
         01:ca:9a:26:d8:bd:29:fb:2a:80:ed:d4:cc:b3:01:99:ad:f8:
         e8:2f:01:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTTezsDPsiI+6YY8xIkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzdkZGZhNjUzMGZjYzY3Zjc2OTM3ZGViZTNkODIwOGNi
OTkwMmMwHhcNMjUwNjI4MTYwMDU1WhcNMjUwNjI5MTYwMDU1WjAzMTEwLwYDVQQD
Eyg3ZTA5MzAzYTRhYWMyZTUzOTg1ZWFlMTZjMTM4N2QwNDMxMjE2OTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU+1CQO8sYBvfVTgSu2LCS/ndX9y
hSOlI1JsSpVVNsYMgJ8uVHuv98og6cmLZa0FeF9Z15pl+COWXHPV1sFlJut70JD7
eFQCmtqbFPrd5Anv0ZQfLQ7KrQsm7eghr6rfYw5X8H+ncgFJzEhCPus8ZSbA7jG7
5Yh7ZjDPM8u0WIWUTKbkZZ9zzyC1jJBiUphZ86YYSq/34bB70DagTE7/B08rfhLt
WdQdoi1A3BiSXtd/xpZMocZIWbozuwY22lEvkzp5Y3bljeRFtucFfb/vaxp6R0sh
SeZRNAKBZ0KNm0PWXsJYNl25HWu5qmg+FOc4KyXNl5IpwU5ueB51HaZxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4JMDpKrC5TmF6uFsE4fQQxIWl8MB8GA1UdIwQY
MBaAFFM33fplMPzGf3aTfevj2CCMuZAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYt
ZGRlMzY1NzRiMTc4LzEvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYtZGRlMzY1NzRiMTc4
LzEvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcmG5c8U
H1GId3mtIFVlmVi7ZuJaPkPlBex0wiUcauQVXO7eltY4W3QRoOLc1ZgEF2qRvfwF
yg8RXw+lwU72dekyp5HpW3UndPGCJeADi6K7ePKgpHLmPErGHoRh1/rCvmUyd4xK
72IIWGs7iIvUd7cgF4jjfocwO1pRhMCRG6mr54mrZwhvnzmVMEEI/a5ABWQ/SwF1
TSWzCQBVwZ1PiFXQVOKgoHqh9yxpeVQ8sS5dL70sC5BI7WEO1OU92Rd9nGPna5l/
VuvnefFm38dJFgRVVtYIi5zmEHHlk57579z7naPjfvEbXsCBAcqaJti9KfsqgO3U
zLMBma346C8BYA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:49 2025 by rpki-client