Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File:                     Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier:          Keq7dVsoBMugYUQXTH8zEBWhdCVM0P5uGhas6zxELKo=
Subject key identifier:   60:11:5F:DE:E2:01:96:00:E6:C1:0F:E1:4A:B7:73:10:7C:F9:AE:7E
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer:       /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial:       0198D65F3B5C4E8001B8E132A5DF656FCA07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number:          0B56
Signing time:             Sat 23 Aug 2025 10:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:21 +0000
Files and hashes:         1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: kWV8UsGNucnIDFReVF77mKI+mxSJGzs+4t1fZ1ulVzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:3b:5c:4e:80:01:b8:e1:32:a5:df:65:6f:ca:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
        Validity
            Not Before: Aug 23 10:00:21 2025 GMT
            Not After : Aug 24 10:00:21 2025 GMT
        Subject: CN=60115fdee2019600e6c10fe14ab773107cf9ae7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:51:b8:4d:4d:54:ce:fa:57:f5:78:07:be:
                    02:31:16:a9:cc:ad:23:68:1c:3f:c6:cf:c9:27:79:
                    8d:98:cd:29:c8:fd:bb:88:e4:4b:0c:78:e4:8b:70:
                    9f:4b:d6:c3:fd:06:f1:6d:0a:a9:77:a0:81:af:bb:
                    2d:99:98:93:b8:44:ca:4d:4d:98:04:17:b3:36:b4:
                    a1:f5:32:08:46:d4:86:40:84:b6:3f:98:3d:f5:6d:
                    8f:5b:e7:c0:9c:1e:ef:7d:3a:60:a3:c6:e9:47:c1:
                    ef:cf:a7:7b:e1:12:0a:5f:e8:8e:8c:2f:a6:e0:94:
                    f3:c4:50:bf:6c:ec:89:8f:32:1b:29:19:fc:cc:73:
                    13:20:3c:79:05:06:f3:47:20:f1:03:fa:61:73:0f:
                    ff:f4:ce:fc:ad:74:6e:93:34:ec:56:87:27:35:a5:
                    0d:a2:60:23:66:de:f4:af:90:13:82:28:5d:cb:87:
                    a2:eb:77:e2:63:29:d3:f2:ac:79:8b:32:c8:72:29:
                    2b:6f:50:2a:30:8b:f9:ec:d7:37:69:d1:86:dd:74:
                    55:96:d6:1c:00:20:cd:e2:1a:32:c4:2d:a2:9b:21:
                    e1:e1:ac:59:ec:64:be:b6:4d:b9:19:95:c2:dd:ad:
                    7b:91:1b:2d:7e:7e:c0:a2:96:ac:21:31:50:f4:35:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:11:5F:DE:E2:01:96:00:E6:C1:0F:E1:4A:B7:73:10:7C:F9:AE:7E
            X509v3 Authority Key Identifier:
                keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5f:a3:a0:10:44:fc:27:af:20:3c:50:c8:23:56:ca:0a:8e:
         d8:43:f9:0e:b6:7c:6e:a1:e3:f2:7d:f1:1f:2c:3a:c6:26:5e:
         49:34:d0:cc:d4:ab:6a:85:15:90:c6:1d:f5:6e:c3:a9:08:d2:
         e5:f6:54:0b:30:c1:53:ad:e8:ec:4f:48:d8:b2:04:13:49:63:
         be:53:b6:c3:d1:0e:b7:07:d2:aa:a3:b7:58:3d:b0:95:d1:d4:
         b4:ae:f7:4c:1c:94:c6:62:80:f8:f5:de:08:8d:b4:ae:8e:25:
         13:fa:7c:e2:a5:5c:1c:c1:0b:85:e8:0a:06:1b:17:75:a0:4b:
         5a:b0:88:10:86:61:bd:aa:22:45:ae:fb:27:03:99:81:6d:c2:
         65:5c:ae:62:a9:8b:a3:9c:c1:18:5f:c2:20:7b:5e:bb:1c:88:
         69:a4:26:f4:94:4c:09:c6:99:2a:e8:cc:43:d0:19:cf:f0:ca:
         30:1c:bc:e1:2b:10:0c:11:82:9e:a6:78:4f:e5:11:12:8f:15:
         0b:c3:c9:16:d2:8e:65:6c:cf:60:2d:ba:db:a3:2d:c3:cb:8d:
         24:ce:40:6a:a5:bf:3d:ef:c5:c3:65:4b:70:e9:9d:c3:86:48:
         91:45:a3:fc:7f:d7:27:21:4c:d4:f3:03:84:d4:ce:cf:20:81:
         76:8d:a2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXztcToABuOEypd9lb8oHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk
OTZiZjkwHhcNMjUwODIzMTAwMDIxWhcNMjUwODI0MTAwMDIxWjAzMTEwLwYDVQQD
Eyg2MDExNWZkZWUyMDE5NjAwZTZjMTBmZTE0YWI3NzMxMDdjZjlhZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx59RuE1NVM76V/V4B74CMRapzK0j
aBw/xs/JJ3mNmM0pyP27iORLDHjki3CfS9bD/QbxbQqpd6CBr7stmZiTuETKTU2Y
BBezNrSh9TIIRtSGQIS2P5g99W2PW+fAnB7vfTpgo8bpR8Hvz6d74RIKX+iOjC+m
4JTzxFC/bOyJjzIbKRn8zHMTIDx5BQbzRyDxA/phcw//9M78rXRukzTsVocnNaUN
omAjZt70r5ATgihdy4ei63fiYynT8qx5izLIcikrb1AqMIv57Nc3adGG3XRVltYc
ACDN4hoyxC2imyHh4axZ7GS+tk25GZXC3a17kRstfn7AopasITFQ9DWQdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGARX97iAZYA5sEP4Uq3cxB8+a5+MB8GA1UdIwQY
MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt
Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi
LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl+joBBE
/CevIDxQyCNWygqO2EP5DrZ8bqHj8n3xHyw6xiZeSTTQzNSraoUVkMYd9W7DqQjS
5fZUCzDBU63o7E9I2LIEE0ljvlO2w9EOtwfSqqO3WD2wldHUtK73TByUxmKA+PXe
CI20ro4lE/p84qVcHMELhegKBhsXdaBLWrCIEIZhvaoiRa77JwOZgW3CZVyuYqmL
o5zBGF/CIHteuxyIaaQm9JRMCcaZKujMQ9AZz/DKMBy84SsQDBGCnqZ4T+UREo8V
C8PJFtKOZWzPYC2626Mtw8uNJM5AaqW/Pe/Fw2VLcOmdw4ZIkUWj/H/XJyFM1PMD
hNTOzyCBdo2i8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:18 2025 by rpki-client