Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
File:                     uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json)
Hash identifier:          fL3FxQbQkxW4aC49VYwnK0vppiocmE90hGSzbP7oSX4=
Subject key identifier:   FE:72:57:47:0B:75:ED:CA:D5:11:2F:7F:79:89:B6:E1:66:89:EE:8B
Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4
Certificate issuer:       /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
Certificate serial:       0198D472D1FD367066EE684DAC288FAB172D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
Manifest number:          0A55
Signing time:             Sat 23 Aug 2025 01:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:31 +0000
Files and hashes:         1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: mYQ/cMzaNXDlSGWXwKQN08bLEmnvX74tZrbNjgLJvZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d1:fd:36:70:66:ee:68:4d:ac:28:8f:ab:17:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4
        Validity
            Not Before: Aug 23 01:02:31 2025 GMT
            Not After : Aug 24 01:02:31 2025 GMT
        Subject: CN=fe7257470b75edcad5112f7f7989b6e16689ee8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:8f:ec:c1:6f:ad:73:56:8d:fa:9e:13:16:
                    b5:5c:68:e4:0d:53:1d:93:a9:aa:32:19:17:63:5a:
                    5a:3c:b1:24:6a:d9:df:a1:05:a8:c4:b0:e0:94:a0:
                    6b:81:e3:81:67:e6:c2:11:73:71:3f:ee:78:fe:02:
                    63:89:42:84:03:23:f3:5f:84:7d:2c:dc:96:55:78:
                    ed:13:ce:d8:f4:25:52:2a:e6:2e:d9:2b:2e:05:a5:
                    bd:7a:cd:3a:85:c2:a0:f4:f2:32:c6:da:7b:ca:06:
                    33:58:8a:1d:95:c4:3a:fd:38:03:e8:e4:c8:97:20:
                    50:ed:c1:88:a7:fc:8e:1a:c2:51:d8:3b:47:13:10:
                    d4:c3:00:bf:e0:a3:13:66:37:55:84:f3:5a:0c:40:
                    21:f9:85:fb:59:70:db:e9:d6:20:b4:ae:8b:5c:6b:
                    c9:4f:74:2a:5d:83:dd:24:59:cc:e2:fb:40:0c:b4:
                    55:4d:39:09:c2:e9:50:cf:83:65:c8:bf:6d:67:3a:
                    8a:0a:f9:a9:9e:cb:80:46:9b:b9:2d:20:d5:d5:5b:
                    96:91:56:3a:fa:80:2e:46:6f:bf:70:78:53:a7:14:
                    12:52:82:9a:74:43:49:52:cb:f1:21:7d:7f:7f:9a:
                    f2:77:f6:2c:44:4c:96:94:66:e6:93:dc:93:a9:39:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:72:57:47:0B:75:ED:CA:D5:11:2F:7F:79:89:B6:E1:66:89:EE:8B
            X509v3 Authority Key Identifier:
                keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:63:2a:e7:48:2e:7f:a6:9e:60:99:98:f2:fa:c2:5c:ff:
         02:61:da:f9:28:61:15:73:d1:cf:59:bc:b0:5a:58:58:be:37:
         ba:7c:12:26:64:c3:aa:10:5c:cb:a6:29:9a:68:e9:a2:ec:49:
         7c:cc:51:e8:af:90:44:e8:81:26:6d:2d:95:76:43:32:98:63:
         be:f2:a8:ae:b9:51:bd:e9:f7:21:9d:a0:72:62:03:e1:35:04:
         45:9f:9a:9d:e9:28:c3:4c:6a:5c:a6:af:16:95:91:14:0b:5f:
         4c:6b:1a:1f:7a:55:9c:be:f0:cc:97:ad:29:22:9f:57:b0:50:
         d4:ae:86:0c:c1:99:09:e3:e0:0a:54:3b:9b:43:ad:77:8d:34:
         bf:4b:b8:37:bf:ae:cc:e5:b4:51:75:ea:d7:96:ed:8a:52:f4:
         a2:2f:f6:1c:0d:fa:68:84:52:0e:57:3b:e7:e3:c5:9e:bc:be:
         6b:49:9b:7b:62:c9:1f:7f:00:47:66:28:33:00:c9:0b:ae:69:
         77:49:37:d3:37:15:fc:b7:46:52:25:49:b8:b7:68:1d:35:20:
         b1:55:18:67:a2:d0:99:4a:df:c4:54:de:67:0a:f2:ce:71:b4:
         17:c2:99:da:0b:16:f9:e2:a8:8a:d2:7d:85:2c:6e:e8:0f:d7:
         41:b4:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:42 2025 by rpki-client