Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File:                     cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier:          OYioyEwAnfUdffHouLxnAkIlhBKcIs2qa4n1SgbT4YE=
Subject key identifier:   0C:31:45:8D:57:69:AB:6B:A6:C4:3A:67:14:FE:D1:B4:61:CE:96:16
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer:       /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial:       0198D7063B9245A8F8B003EBA3D573D18E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number:          071B
Signing time:             Sat 23 Aug 2025 13:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:46 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:46 +0000
Files and hashes:         1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: K+EcuNhrxGfohS70AIwm9xo2je9DbdVgnVBbpo9DDyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:3b:92:45:a8:f8:b0:03:eb:a3:d5:73:d1:8e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
        Validity
            Not Before: Aug 23 13:02:46 2025 GMT
            Not After : Aug 24 13:02:46 2025 GMT
        Subject: CN=0c31458d5769ab6ba6c43a6714fed1b461ce9616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:6b:1a:ae:9e:7b:b7:a1:1c:52:56:6d:ba:
                    dd:32:2d:ad:56:f3:38:86:d9:41:4b:ab:63:b3:f2:
                    38:46:e1:1c:b0:b0:6b:2d:a7:e1:9c:67:f8:73:04:
                    b9:23:d8:a8:d9:d7:e5:0c:27:97:f4:06:08:6e:4a:
                    98:ad:4d:6b:d7:af:2c:e5:45:8c:de:67:ab:68:bd:
                    20:8d:79:c4:a9:5d:3f:15:9b:de:c0:89:c9:48:ba:
                    55:79:5d:6e:02:db:d5:0d:86:fb:36:1d:36:fd:8e:
                    20:75:37:8c:35:9e:f5:24:4f:f2:de:61:02:73:dc:
                    ae:d0:8c:06:9c:d1:59:98:df:e6:8a:10:fb:f2:13:
                    62:9b:29:64:0a:a5:d6:69:73:c2:cf:d1:fe:59:ce:
                    a2:b2:da:91:84:54:8d:79:70:23:e0:38:5a:6b:a6:
                    a1:9a:18:8e:8b:69:e7:2a:07:e5:2b:9b:a6:b0:e0:
                    96:fc:ba:ca:c0:81:22:4c:97:50:7d:94:a0:23:1b:
                    30:06:70:a9:a0:8f:96:5a:f8:0b:1b:4e:85:55:59:
                    37:6a:05:ba:f5:fe:d2:0a:82:f8:5b:d6:96:7a:07:
                    78:d8:7a:d9:62:91:3b:7e:33:ec:71:8f:61:51:0a:
                    71:f9:8a:d2:db:99:e2:b7:c4:fe:4d:00:78:95:bb:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:31:45:8D:57:69:AB:6B:A6:C4:3A:67:14:FE:D1:B4:61:CE:96:16
            X509v3 Authority Key Identifier:
                keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3e:29:da:73:dc:78:11:66:17:14:fb:3e:fe:fe:ee:c3:9f:
         76:78:95:54:7a:20:32:31:57:70:d6:a8:c9:bd:03:02:bd:d1:
         ae:b0:a4:52:4b:39:50:90:61:d6:72:57:42:4a:1b:9d:87:d0:
         51:a6:b6:32:88:43:37:ea:62:a2:ee:bc:c8:2e:5f:07:c5:96:
         fc:af:43:5e:3d:ec:2c:c1:43:24:a4:af:d9:6a:47:bd:ae:f2:
         ff:1f:62:bb:62:3c:c6:3c:d1:42:c9:3b:f8:c1:8f:0c:ce:78:
         a2:78:3f:d7:6d:7a:fc:59:bf:e0:fd:e2:68:ec:5a:2a:b6:68:
         66:ba:01:fc:87:b7:19:85:fd:d6:63:f0:13:ac:39:64:9d:6d:
         c1:4b:5f:52:86:b7:d7:61:52:2c:f4:34:f7:de:a3:5d:0a:8a:
         20:dd:8d:d2:8a:67:eb:35:ab:d2:42:1c:18:41:be:dc:92:34:
         46:33:cf:c6:82:f7:9d:cb:f8:65:76:b9:69:76:d2:d7:b2:ff:
         b3:9a:c2:42:77:1e:20:76:be:fa:40:5c:89:8c:eb:27:fb:43:
         e0:04:5d:ed:58:57:93:18:75:40:9d:65:ec:fc:dc:45:2d:fd:
         95:a7:a0:79:c4:a7:48:d6:3c:22:0a:e7:ee:a4:c6:23:1a:15:
         d2:58:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:05 2025 by rpki-client