Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          pzQw5LzdeykGRKrZgzfBqXqUdU3XAR9+t5qP6D3z7uw=
Subject key identifier:   31:5E:0E:A6:FE:C2:5E:36:64:B3:E6:76:C8:A0:1E:D3:65:53:6A:47
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       0198D4E0318DEEA6F76CD6CDFA503ABB4B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0DDA
Signing time:             Sat 23 Aug 2025 03:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:59 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: cpw26oE1uce2c3xaMmTuA1UaZRhIvSwZvzwquflp740=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:31:8d:ee:a6:f7:6c:d6:cd:fa:50:3a:bb:4b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: Aug 23 03:01:59 2025 GMT
            Not After : Aug 24 03:01:59 2025 GMT
        Subject: CN=315e0ea6fec25e3664b3e676c8a01ed365536a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:1b:86:75:fb:c0:03:d5:d9:b4:8d:e1:a1:
                    1e:f1:aa:a1:ea:a6:5a:52:0f:34:ed:e0:8c:5e:3c:
                    a1:df:ec:43:e9:0f:e9:c7:6a:02:5c:fb:c1:44:00:
                    5f:61:80:63:6a:6b:fb:91:9b:d2:be:37:2d:c6:b3:
                    46:0c:1c:1d:bb:47:fc:5c:bc:3e:d8:3e:4e:ab:d7:
                    e7:98:27:68:d9:51:16:26:e7:6d:55:dc:16:c6:fd:
                    9c:24:95:41:59:81:53:f4:24:b8:52:34:1e:5a:ff:
                    9a:51:c0:63:6a:1d:23:f2:b9:c3:13:ad:5d:f2:93:
                    f9:08:b3:bb:c5:af:9c:f3:b7:2f:40:27:7d:86:49:
                    8c:4c:77:bc:ad:82:b0:5c:52:97:b4:d7:7c:16:2e:
                    18:46:f5:da:7b:d2:70:f7:fa:b3:3a:a8:ad:81:3a:
                    e2:28:1d:6a:b5:24:45:b7:4d:fe:7f:52:a7:53:b6:
                    77:ca:c6:28:be:f9:21:58:3f:16:a7:a9:b7:79:66:
                    f5:ce:9f:9d:e4:49:60:80:b4:0e:bf:89:68:68:a9:
                    e1:b0:84:22:ad:d7:26:c5:75:ee:59:3c:ea:dd:65:
                    74:6f:fb:74:c0:d5:25:83:f0:f9:e2:84:22:cd:df:
                    00:1e:7c:2a:a5:59:32:09:53:88:96:e0:64:ca:58:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:0E:A6:FE:C2:5E:36:64:B3:E6:76:C8:A0:1E:D3:65:53:6A:47
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4a:ec:90:96:f3:ff:a5:f3:52:f3:b4:a1:96:87:45:e4:4e:
         91:6b:9c:13:a2:27:98:02:7d:8c:3b:63:74:b3:1e:7e:18:f9:
         70:e4:05:4f:de:bb:3b:e9:68:c8:9f:bf:e9:ae:bc:80:fc:9e:
         f1:72:3c:a4:90:8f:4f:3d:f2:3d:80:b2:b5:46:c4:55:01:f1:
         1c:0f:96:67:df:54:47:35:83:09:44:36:54:c9:c9:a8:d6:29:
         1e:9d:36:43:dc:ab:4d:64:de:f2:80:bf:b2:2c:33:f3:53:e9:
         af:e9:3e:16:14:0a:76:5f:8d:a1:31:33:92:64:92:9a:64:9d:
         59:85:b7:a9:92:42:8a:be:e8:ca:37:b8:dd:a2:1b:66:6a:0c:
         ed:28:fd:45:9c:3c:8a:d9:17:92:e5:06:c1:5a:47:24:f4:3e:
         29:47:fe:5d:3e:ed:e6:e9:a6:d3:de:24:b8:36:ae:cd:48:77:
         e0:86:ad:17:4e:31:7a:8e:37:c9:d5:68:68:f2:4d:96:7f:2e:
         23:71:86:0d:41:85:80:73:6d:b7:31:00:b3:ce:71:b5:a2:0d:
         dd:8b:a3:4f:f9:06:6b:29:fc:48:1e:7c:0f:38:3b:2f:c2:ae:
         3b:0c:25:f5:58:14:2b:2a:52:55:2f:8a:1b:42:c6:88:44:20:
         1c:5c:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:13 2025 by rpki-client