Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
File:                     UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft (raw, json)
Hash identifier:          6ivwAbgBu//U6lahmcosO+/f5+x84tTfkXbqtlFjPdc=
Subject key identifier:   E2:BC:E5:8B:A0:C6:98:9C:92:60:F4:B9:CF:A6:A0:37:CC:0F:C3:5A
Authority key identifier: 52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
Certificate issuer:       /CN=52f25bd05ac148851fa2a463ad0de070818404f7
Certificate serial:       0198D660561CCFF1339738FE55B33E70B12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
Manifest number:          0A74
Signing time:             Sat 23 Aug 2025 10:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:34 +0000
Files and hashes:         1: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl (hash: aH1UNtBnCg89BDb6v0XAUN2Sb0vQ4fOmq+rSp4Aa9SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:56:1c:cf:f1:33:97:38:fe:55:b3:3e:70:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f25bd05ac148851fa2a463ad0de070818404f7
        Validity
            Not Before: Aug 23 10:01:34 2025 GMT
            Not After : Aug 24 10:01:34 2025 GMT
        Subject: CN=e2bce58ba0c6989c9260f4b9cfa6a037cc0fc35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:d6:1b:8e:90:a8:98:b6:aa:ca:4b:9c:d9:
                    c7:4c:d2:80:43:d6:8c:fe:e4:e4:ba:59:c4:0c:ed:
                    58:54:42:80:4a:ca:fb:e7:f7:7b:b4:b9:0f:a1:5e:
                    8b:58:96:b6:bb:31:ee:e5:50:1a:27:3a:40:fb:38:
                    48:2c:d0:47:84:74:73:6b:33:78:87:85:c5:f0:8e:
                    96:66:ea:b8:ca:e2:43:fe:2b:7c:1c:f5:a8:d6:e1:
                    f5:b9:a3:57:3b:8e:90:7e:89:7d:f2:9c:ca:0a:be:
                    8f:5d:48:38:2a:fa:33:fc:81:02:9c:4a:cc:2c:e1:
                    55:30:b5:85:4b:38:c8:d7:b4:59:f2:cf:9f:67:98:
                    4d:f8:2b:c4:c8:af:ca:a1:8a:b4:4c:0b:6e:42:15:
                    61:4f:d8:cd:80:38:56:d7:69:3f:ec:8a:f4:1a:f7:
                    7c:11:0b:8e:60:c2:9d:46:9b:e3:12:d6:c5:71:4f:
                    70:55:0a:41:54:56:30:83:0c:eb:dc:df:4a:1c:68:
                    be:66:d7:ad:7b:f1:3c:5b:92:e5:aa:57:2e:7d:4e:
                    b7:af:9e:ac:2b:85:eb:7e:01:09:f1:fc:e0:8c:6b:
                    b1:c4:97:60:da:28:46:aa:a0:1b:36:a5:d9:a3:9a:
                    3c:c6:82:55:e8:d5:a0:a8:ac:32:84:f7:73:55:de:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BC:E5:8B:A0:C6:98:9C:92:60:F4:B9:CF:A6:A0:37:CC:0F:C3:5A
            X509v3 Authority Key Identifier:
                keyid:52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:00:5f:f2:0a:bf:7a:40:a8:68:52:ef:4f:2c:27:2f:2a:83:
         26:9f:65:f0:8a:b9:59:ca:cc:cc:37:46:2e:e5:4f:b8:16:8a:
         bf:56:90:ec:13:7c:c8:bf:2f:9a:83:b8:c1:d4:fd:dd:44:10:
         0d:4f:02:25:3a:5d:88:66:d4:95:b8:8b:13:7d:1f:0c:73:fe:
         5f:b9:8d:9e:80:7c:e1:5a:a9:9f:81:85:2f:0e:61:bd:0c:87:
         b5:23:c4:4a:cb:15:92:40:0a:7e:8d:44:ee:c6:d4:1b:7b:ff:
         34:0e:e7:c3:b8:02:5c:24:6a:58:36:c4:8a:eb:96:d5:55:09:
         12:ba:a3:b3:fc:87:88:46:04:84:a1:89:57:aa:a7:51:4e:af:
         7d:a4:a9:0d:47:5a:4c:0d:f7:62:55:4e:f6:b8:4f:74:46:38:
         c4:dd:2c:6c:11:9e:e9:20:98:e8:e8:a3:2c:d1:7f:23:ee:46:
         e8:fb:74:6b:ec:c5:0f:17:27:8b:24:6a:0a:f7:41:b5:80:b6:
         ce:68:8c:1f:d3:b8:b6:ac:b1:58:8f:f7:c1:cd:41:15:48:e6:
         21:cf:62:67:00:c1:94:b0:42:6d:ce:ee:f9:af:7f:be:18:00:
         ff:41:8f:1a:ec:10:62:52:e5:67:1f:01:38:be:37:ef:7e:1f:
         24:48:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:04 2025 by rpki-client