Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File:                     uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier:          sxPxmtmWtgCwnQFnR4KRHokdXADEQEvFBeRkVxMX8mc=
Subject key identifier:   81:5C:D1:C9:F5:D8:66:51:E3:C7:80:0D:B9:5E:81:5D:A1:CC:26:A0
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer:       /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial:       0197B7EA75AEA650AC7448E0298892C41B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 19:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:25 +0000
Files and hashes:         1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: 5sYHzFjZtGO5rqrB/qzS7cM19JP9HNLHb8rsBtWFAng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:75:ae:a6:50:ac:74:48:e0:29:88:92:c4:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
        Validity
            Not Before: Jun 28 19:01:25 2025 GMT
            Not After : Jun 29 19:01:25 2025 GMT
        Subject: CN=815cd1c9f5d86651e3c7800db95e815da1cc26a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:d1:e0:90:0b:a8:0a:53:ae:32:9c:47:32:
                    5b:e4:bc:6f:5d:50:c5:57:20:70:5f:4f:a7:4f:e5:
                    fe:99:6d:d7:d6:6a:62:39:f2:40:a0:fa:40:83:ef:
                    67:fc:43:94:b5:6e:af:43:bf:80:8d:20:ef:9f:b4:
                    82:6f:55:d0:fc:08:71:f8:e5:54:9e:bd:1a:f9:32:
                    5a:51:30:f6:81:7a:74:29:25:c0:bb:d1:cf:04:08:
                    1d:b0:f7:72:47:9f:51:82:fd:c5:ba:84:fd:95:96:
                    8e:21:a6:a8:96:44:cb:c7:2e:58:7c:fe:c2:8b:49:
                    6a:76:75:2a:07:d6:22:d9:fc:f9:84:66:09:eb:d9:
                    8a:3c:19:df:a9:be:58:a0:80:43:a8:ab:d9:f7:ab:
                    f7:a1:a8:c7:d9:9e:bb:44:d4:a9:4a:9b:68:96:78:
                    32:3a:17:7e:8d:6a:08:9b:34:73:c9:4f:8a:2a:d4:
                    cd:19:93:a1:a7:78:be:5d:1b:fd:8a:cd:87:75:27:
                    ea:48:11:9b:31:9c:62:78:e1:28:f3:43:55:07:14:
                    3b:b9:db:65:cb:68:2d:06:ec:2f:2e:14:3b:39:b9:
                    53:4c:e8:6d:1b:9c:79:1a:68:a8:37:45:4d:11:b7:
                    ce:2a:88:d0:69:74:86:26:66:62:84:61:0a:08:04:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5C:D1:C9:F5:D8:66:51:E3:C7:80:0D:B9:5E:81:5D:A1:CC:26:A0
            X509v3 Authority Key Identifier:
                keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:5d:fa:65:df:b9:46:76:46:d1:5d:d3:96:46:fb:9f:3f:
         14:3d:57:91:fa:3b:9c:66:6c:91:4b:d4:d3:35:05:99:b7:fa:
         43:8b:3e:67:2c:55:5d:75:9a:9a:25:c5:67:72:a2:2e:0d:c4:
         1a:4c:32:09:e6:88:86:0b:e1:ed:ee:b8:ea:71:82:a1:22:26:
         40:dd:85:c6:e6:cd:09:fb:5b:06:2d:a9:e3:b3:e3:11:03:fa:
         e2:3b:da:ae:7b:ad:1a:b7:ce:25:e3:ed:8f:19:91:bc:eb:17:
         5b:62:be:a2:0b:f0:94:d2:f7:2f:e2:d7:7b:5f:be:22:5d:aa:
         c1:91:49:5e:16:cc:db:9f:5c:83:42:81:3e:e2:a2:df:fb:41:
         59:8c:e7:3e:e1:82:67:9f:9b:73:f6:6e:ee:d8:0f:5d:2f:76:
         1b:16:4e:4e:a2:42:b2:a5:3e:dc:74:1c:a8:20:67:0d:5f:46:
         80:b0:29:56:dd:d5:ec:3e:68:41:3e:9f:d4:f4:b1:bc:5e:f8:
         05:0e:0c:71:9f:40:bc:7a:ca:06:b5:83:7d:7c:8e:28:c4:bf:
         ed:15:e0:04:90:48:f8:d3:e7:b2:9a:cc:37:86:b9:d4:46:84:
         df:23:c5:b8:41:1d:1e:4f:40:89:90:58:a2:ef:fb:bd:9a:87:
         53:f0:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:34 2025 by rpki-client