Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          0CiKBGBTbq6UF0AgfE7pWz+dV3/nm5//SNEMQ5TI1To=
Subject key identifier:   C9:54:5A:5E:26:4F:7D:F7:7B:EF:B5:E8:8D:FA:8C:49:E9:1D:9C:35
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       0198D6CDE875FA83F1BC63EB26267BD0D572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 12:01:12 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:12 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:12 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: GhV/KhdS/utfKQLRPUkJKslTkcfqYTx63wPZZMRPXig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:e8:75:fa:83:f1:bc:63:eb:26:26:7b:d0:d5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Aug 23 12:01:12 2025 GMT
            Not After : Aug 24 12:01:12 2025 GMT
        Subject: CN=c9545a5e264f7df77befb5e88dfa8c49e91d9c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:58:43:a7:3c:2c:83:d0:a9:49:09:8c:1f:
                    5f:91:0d:6c:c6:c9:56:a0:e0:67:fd:2a:dc:52:e1:
                    75:71:22:68:91:67:23:58:8e:5a:c6:b3:18:2b:3f:
                    a6:77:d5:d9:22:91:d7:86:c3:ee:c4:c7:23:4a:03:
                    ce:aa:9e:ca:42:07:73:84:10:33:fa:a1:fd:82:1d:
                    17:f1:be:07:a2:5e:e5:ad:f1:0a:80:41:21:a7:24:
                    b6:2d:f9:01:17:f5:fe:f8:7e:75:a5:a4:79:76:04:
                    51:98:3b:4f:33:8f:3e:10:b9:34:f8:6c:ba:7c:ab:
                    67:06:e0:63:26:a9:6a:6c:9e:8d:6b:4f:79:69:63:
                    bd:7a:d8:bb:10:51:fe:0a:6f:08:c4:82:f9:67:63:
                    17:af:9b:d5:79:95:a9:ac:f9:2a:40:ff:c6:89:ac:
                    81:9a:f6:92:07:06:e3:f1:e4:06:ae:1a:aa:a1:37:
                    50:88:20:9b:e4:01:17:c6:47:ff:eb:ff:78:d6:d1:
                    90:b3:99:b6:a5:a4:64:aa:f0:10:e7:b3:ba:ca:1f:
                    5f:1f:3e:ec:e2:d3:0f:b2:37:cc:8e:e1:8e:31:dc:
                    51:58:19:07:45:9d:b3:2e:12:59:ce:8b:33:f8:21:
                    86:79:25:62:4a:ff:7a:f9:44:fd:b0:56:ba:a9:79:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:5A:5E:26:4F:7D:F7:7B:EF:B5:E8:8D:FA:8C:49:E9:1D:9C:35
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:be:fa:61:8f:a3:07:6c:81:5f:7d:07:78:94:43:07:dd:68:
         5e:a0:f7:2b:d2:a2:4d:31:8c:cf:9e:77:0b:7f:41:6c:86:64:
         20:e3:27:27:b2:36:70:27:6b:d6:fc:4f:61:1b:c1:a3:d7:7e:
         68:b1:8a:42:d1:92:df:b0:ae:38:f2:1b:77:94:55:05:e5:05:
         18:7f:83:b7:a6:5d:bd:13:59:61:12:d2:b7:1e:52:f2:a2:c0:
         e3:be:e8:5f:36:74:bf:0c:55:ce:27:a9:22:10:97:77:20:cb:
         2b:6f:8a:ca:9a:de:55:0c:e4:80:3f:64:c5:98:2a:7c:d5:c9:
         0e:41:d3:7e:0b:75:59:70:11:c6:e5:a2:19:be:e3:ab:45:10:
         48:8d:0b:bd:68:a1:4a:a5:21:fc:f7:92:50:ad:f0:e6:d1:43:
         ad:b6:b2:1e:5e:0c:d5:12:47:05:2a:cb:07:b1:65:26:22:0f:
         a7:34:cd:cb:7f:da:c2:5a:b1:6b:dc:7f:1d:e0:82:9d:24:4d:
         32:1c:4d:d9:cc:65:21:86:53:cc:5d:ae:01:f3:e0:96:ad:66:
         dd:85:15:c7:6a:63:f8:f7:72:c2:19:4d:a0:6e:7a:b1:7d:91:
         cb:f9:16:40:13:ad:6e:ba:be:69:45:5e:55:38:1b:5e:86:d5:
         86:19:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:05 2025 by rpki-client