Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File:                     uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier:          2uWr2XbYdZ8autNA2mO8jZBV4TpO4omi/THes8SOk0Q=
Subject key identifier:   00:FE:44:92:DE:56:31:23:17:DC:E3:E3:81:08:F1:65:B8:A6:D1:19
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer:       /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial:       0196C8DFD89367DB6D9430A3B3585E7B9FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number:          03EB
Signing time:             Tue 13 May 2025 09:00:35 +0000
Manifest this update:     Tue 13 May 2025 09:00:35 +0000
Manifest next update:     Wed 14 May 2025 09:00:35 +0000
Files and hashes:         1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: gmyUbw+MeCxo4SgkBAi6FZAOKU8spQDEi4ebkBeIWFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:df:d8:93:67:db:6d:94:30:a3:b3:58:5e:7b:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
        Validity
            Not Before: May 13 09:00:35 2025 GMT
            Not After : May 14 09:00:35 2025 GMT
        Subject: CN=00fe4492de56312317dce3e38108f165b8a6d119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:52:ca:b5:a9:ff:70:c7:ec:f1:5d:d6:00:
                    ec:e2:30:f0:d1:96:f4:48:1d:86:32:04:a2:a5:6b:
                    8d:71:a6:3f:14:26:f6:47:ff:d3:e3:dd:ea:b1:6e:
                    f2:81:80:e7:09:c8:f3:b0:88:5a:9e:af:eb:af:d1:
                    64:00:cb:02:58:9b:b4:64:a7:24:25:90:54:e8:ca:
                    a7:a2:26:5b:fc:08:b5:c6:d0:ca:8d:18:14:8a:0e:
                    ae:77:c8:c5:b6:16:73:28:24:f5:eb:65:53:11:f4:
                    a1:9b:d7:1f:43:1a:82:98:4d:5c:2b:5e:be:89:99:
                    26:2d:db:77:81:7f:df:cb:05:7a:03:bb:90:6d:a5:
                    bf:c0:83:ea:fe:03:92:6e:36:01:49:4b:9c:04:64:
                    00:b0:50:c3:77:cb:84:ff:7c:d6:ec:c4:3d:bc:ab:
                    08:a3:40:96:16:74:19:e3:ab:24:37:38:e6:82:17:
                    e3:9e:b7:ea:cb:ca:e9:ff:ba:7e:c0:0d:03:cc:6b:
                    2c:80:a6:9c:d4:88:ca:fb:54:1a:03:09:6c:ec:51:
                    54:7a:b1:ee:41:ce:3f:14:95:6d:df:70:ed:e7:d9:
                    85:f8:e7:6c:c8:ed:f6:38:e7:50:7b:d8:c9:da:07:
                    83:7b:1c:40:a4:65:e1:53:5c:98:99:8d:b7:2c:1e:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:44:92:DE:56:31:23:17:DC:E3:E3:81:08:F1:65:B8:A6:D1:19
            X509v3 Authority Key Identifier:
                keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:5c:bb:b4:a5:20:8e:40:59:29:80:a4:03:77:ee:79:d5:
         e8:26:13:7f:8f:90:d8:8f:23:ae:a7:84:fd:df:cc:b4:e7:da:
         cb:6c:e4:fc:e0:b5:35:bf:70:37:fc:f3:be:e2:01:b5:03:5d:
         42:a1:02:07:a3:4c:c8:af:c2:d0:91:4d:60:c5:4b:3e:76:de:
         93:d6:d5:3c:d6:17:bd:a0:56:cb:a7:0f:8b:44:a4:4d:40:ac:
         76:39:7e:14:39:9c:7c:ba:17:30:33:4c:74:2b:1c:85:7a:3a:
         09:ad:bb:dd:9c:39:95:f8:fe:42:a8:29:25:76:02:cc:1d:e8:
         c1:21:bd:89:a0:44:94:ee:45:80:4b:b8:11:b3:cf:56:43:b5:
         d0:1e:07:d2:14:36:72:86:73:74:61:22:6c:80:0f:52:1f:57:
         48:c0:8c:b2:bc:cf:5f:6e:eb:f4:f3:29:7c:88:27:88:4e:2e:
         be:17:63:eb:22:77:06:c9:ea:f6:e6:6f:69:d4:8a:52:a7:3d:
         08:f4:ad:44:42:fa:9f:93:87:4c:e0:f1:5a:5c:3c:9a:50:8f:
         8a:4f:34:a6:0b:e8:c1:fb:e3:52:57:bb:65:8b:de:98:6c:4e:
         15:75:c2:3f:df:30:ba:84:b2:f7:9c:b6:93:f8:1c:87:3c:2a:
         86:a0:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:34:53 2025 by rpki-client