Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File:                     uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier:          P/NGbdRSiFvmwrog64cgvm47MnqemPoe6zj61DCbOxw=
Subject key identifier:   CB:34:01:83:7E:AB:36:3F:AB:0A:7F:A7:A1:3D:7A:C5:58:BF:59:FD
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer:       /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial:       0199FB463BAFE1661F06D0B497D6ED47B3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number:          03FD
Signing time:             Sun 19 Oct 2025 07:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:47 +0000
Files and hashes:         1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: 1gMY8RFS5bGP+cvUgdvzz0vOQ/hmalaQYCoTKd9YI10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:3b:af:e1:66:1f:06:d0:b4:97:d6:ed:47:b3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
        Validity
            Not Before: Oct 19 07:01:47 2025 GMT
            Not After : Oct 20 07:01:47 2025 GMT
        Subject: CN=cb3401837eab363fab0a7fa7a13d7ac558bf59fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:73:aa:46:ae:ab:42:f0:be:9f:3b:d7:42:
                    8f:d3:81:fd:89:6e:68:f5:9c:6f:d1:f3:dd:ac:bf:
                    48:f8:4a:c4:10:13:b7:1d:98:29:49:98:f2:ad:10:
                    2a:db:26:db:cd:22:24:72:99:5b:0a:ed:29:52:66:
                    a3:4c:32:fc:3a:f7:53:ba:e3:e6:a8:cb:08:3d:53:
                    91:99:ec:9e:d7:1d:4e:44:bf:7a:0a:94:02:f9:0d:
                    98:54:15:05:81:6e:f0:c6:64:3f:ce:f3:f2:9a:f7:
                    5a:f0:af:c3:a0:12:6c:3d:0f:f5:e1:90:05:21:5a:
                    1d:05:6e:bc:86:b6:00:a2:ca:9e:6e:50:17:d2:83:
                    ec:cd:02:e1:92:fa:51:95:12:bb:28:72:6f:99:b4:
                    54:57:99:38:ee:1c:39:20:32:b0:f6:43:73:09:93:
                    26:20:da:15:8e:61:36:89:7e:76:87:b9:06:72:8e:
                    cc:f8:60:dd:43:ea:1a:47:5c:de:67:24:6e:25:14:
                    b8:f4:a4:df:10:bb:6a:d0:e3:3e:a9:db:1e:67:19:
                    a6:bf:16:3f:a5:28:f7:3e:07:72:ec:75:1e:46:dd:
                    83:0e:1d:dd:b0:f3:15:af:13:10:97:7f:ec:51:14:
                    53:74:36:35:29:48:5b:58:54:2b:85:fe:4d:f3:5b:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:34:01:83:7E:AB:36:3F:AB:0A:7F:A7:A1:3D:7A:C5:58:BF:59:FD
            X509v3 Authority Key Identifier:
                keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:56:e1:26:3b:dc:a2:fa:6d:f0:52:b2:2f:26:13:4b:41:
         33:c5:c1:c7:e8:87:b7:df:c0:77:5d:53:12:3f:2b:ac:76:28:
         d4:b3:c3:02:00:72:a1:3b:31:91:11:f6:63:14:08:7b:f3:ca:
         fa:f0:ff:5e:52:30:04:bb:71:39:44:03:c4:e2:c0:66:51:2f:
         11:ae:d7:87:e1:01:da:57:b5:16:7b:f3:3e:33:f5:12:94:96:
         de:33:67:f6:f9:90:2a:96:10:31:09:e8:b2:0e:c2:56:c6:2b:
         ff:f7:df:f5:b3:66:9f:ff:3d:fb:ce:75:65:2f:fd:ab:3f:3b:
         87:c8:7a:70:27:a5:96:9d:3d:aa:a9:bc:50:91:ed:9b:fd:4a:
         26:c9:aa:dd:d8:0a:e4:9f:5c:92:3b:bc:57:cf:b8:40:db:85:
         53:98:d5:a0:3a:dd:b1:42:e5:75:6e:2b:71:38:75:27:6d:38:
         82:58:e1:cc:53:86:e4:71:2b:66:05:21:69:2a:f7:fe:38:45:
         26:5d:89:31:0c:8d:71:61:a0:5a:c8:cd:6e:93:87:21:9a:57:
         10:83:65:a7:90:30:1e:23:87:dc:cf:fa:2e:62:79:58:a2:01:
         8d:11:26:31:13:30:92:ee:25:06:a4:e5:18:9f:17:4a:f1:55:
         1e:dd:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:48 2025 by rpki-client