Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File:                     UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier:          EyzDoHgkksLBFkmCrBqxXnmh8dR2mrGmBpf+vRkQ0CA=
Subject key identifier:   A4:D7:92:62:FD:AB:49:BD:48:9B:F1:97:8D:6E:6F:48:EC:81:FB:09
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer:       /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial:       0198D5BC200F239084AC19D06EEDD38DD2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number:          1096
Signing time:             Sat 23 Aug 2025 07:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:12 +0000
Files and hashes:         1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: dIhDHK4++VMMW/20vNx2kN31PqhFktGexXeRr11fl8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:20:0f:23:90:84:ac:19:d0:6e:ed:d3:8d:d2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
        Validity
            Not Before: Aug 23 07:02:12 2025 GMT
            Not After : Aug 24 07:02:12 2025 GMT
        Subject: CN=a4d79262fdab49bd489bf1978d6e6f48ec81fb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:87:96:0f:b7:40:fd:7e:02:30:d7:4b:3d:
                    92:d0:ef:93:a8:5c:86:8f:1f:c2:b4:83:60:1e:4a:
                    f6:9f:43:fd:84:e0:72:de:90:d5:cf:78:69:3a:04:
                    57:db:eb:bc:24:a1:d2:7b:3d:4f:c7:2e:5b:43:1b:
                    f2:a9:23:6c:d7:33:ef:52:9d:f9:f1:fb:d7:a6:c1:
                    19:28:97:6b:61:4f:c7:86:bd:5c:56:aa:3d:6d:35:
                    44:6c:a1:05:be:ed:a6:26:2c:c0:40:6a:14:4b:0e:
                    30:78:b9:71:05:1d:4b:21:66:14:79:44:e7:de:59:
                    df:ff:cf:71:ed:98:f0:6e:77:f9:d8:a5:89:ce:f1:
                    9d:18:88:0f:54:e0:52:aa:2f:06:e9:f2:5b:7d:9a:
                    d0:6b:25:cd:8e:bf:0d:75:b4:8d:c0:c7:9b:b7:85:
                    c4:77:af:4a:d1:b4:ce:ed:36:46:9c:26:59:11:9f:
                    f5:9f:32:f7:60:e9:63:7c:48:46:75:66:1e:1b:5b:
                    47:1d:b7:61:39:75:6b:e8:54:22:c2:01:ff:bd:f2:
                    3c:0b:b6:5a:6d:c1:03:55:89:d5:15:3b:b7:d3:23:
                    af:cf:e4:8e:7b:4c:c4:e5:e7:9a:15:9e:64:22:52:
                    59:30:0c:72:a3:0b:93:47:34:7d:8b:55:5f:96:b1:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D7:92:62:FD:AB:49:BD:48:9B:F1:97:8D:6E:6F:48:EC:81:FB:09
            X509v3 Authority Key Identifier:
                keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:81:9c:fc:b4:51:f9:c9:28:33:2f:03:6f:80:4d:07:1b:
         2e:e5:54:ea:ce:f7:a2:c1:6e:38:4e:25:db:cc:be:6d:00:85:
         87:47:b4:0b:c3:a3:fa:63:33:23:ce:ef:cf:c0:32:eb:a1:a5:
         12:e2:1a:46:20:62:b2:65:f3:da:ea:a0:de:e5:5d:4d:3f:6c:
         da:b4:24:94:89:15:b4:8e:d8:e5:76:b6:da:e4:4f:aa:f2:b4:
         c4:86:f5:a6:1f:c5:c5:9c:d4:97:87:e3:64:a7:ff:1b:9d:f0:
         11:25:5f:c5:e4:c2:fa:1f:28:4d:bb:e5:12:2f:c2:4a:c7:9c:
         ff:70:8c:c8:3e:07:70:e2:1f:64:cd:10:7d:db:22:68:88:cd:
         ba:0c:aa:9b:e6:48:27:e7:7d:45:c6:f0:e1:43:1a:2e:23:44:
         8c:3d:b8:b4:37:78:7c:df:17:02:a3:cb:8d:1e:4c:06:5b:63:
         64:a5:d4:14:c3:86:1d:75:a4:ac:dc:83:4a:b9:d2:7c:1d:87:
         76:fb:50:58:1e:21:09:13:74:65:8d:f3:c2:b9:2c:71:2a:36:
         48:ef:e2:82:a9:3d:a5:82:26:61:3c:bc:d9:cb:b7:c9:a9:d0:
         ef:84:a5:22:4a:cb:49:2c:b8:bc:65:b6:ce:d6:7b:60:07:bd:
         39:b2:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:44 2025 by rpki-client