Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
File:                     UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json)
Hash identifier:          G1Cu40U/9F+HX+3etjIpYRh8WaMVXZldT4xERBZpcHE=
Subject key identifier:   1B:E1:7A:D3:2F:4E:02:26:29:46:3A:74:5D:3C:CE:81:BD:11:5B:24
Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Certificate issuer:       /CN=50445e52444423193f495fbcc45774e4c8e47bdb
Certificate serial:       01969F085E8A91FC257EF995D112480D87EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
Manifest number:          0CB5
Signing time:             Mon 05 May 2025 06:00:47 +0000
Manifest this update:     Mon 05 May 2025 06:00:47 +0000
Manifest next update:     Tue 06 May 2025 06:00:47 +0000
Files and hashes:         1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: dcNEaTtI7PCHecr7ddl+uvrxbhxGJO6JKexOXEiPGnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:5e:8a:91:fc:25:7e:f9:95:d1:12:48:0d:87:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb
        Validity
            Not Before: May  5 06:00:47 2025 GMT
            Not After : May  6 06:00:47 2025 GMT
        Subject: CN=1be17ad32f4e022629463a745d3cce81bd115b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:07:c6:40:e2:fd:f6:5f:6e:cf:02:c3:1d:
                    9c:a3:ad:17:81:4f:26:04:ec:ce:1a:ad:c3:32:9d:
                    f5:10:b0:d3:02:03:02:00:95:9d:98:7e:a4:e0:8b:
                    34:23:0a:92:c5:74:2c:c0:2a:00:1a:83:e4:05:f5:
                    16:f9:cc:c4:4d:83:30:61:09:ef:9c:bb:04:93:79:
                    7d:22:6e:e7:e6:70:ff:cc:1b:59:b0:10:6f:fa:ed:
                    14:10:31:d0:73:cf:69:44:80:24:76:92:7c:9d:fd:
                    99:b1:20:58:85:6b:2b:bb:8a:ff:da:a5:0a:b6:d8:
                    7f:e0:9f:36:df:51:12:a2:e7:09:ee:a2:ea:65:fe:
                    66:09:5a:b6:f7:ed:13:d5:3f:64:8f:a3:2a:32:31:
                    d6:ec:6a:f8:68:8c:4d:6b:16:43:ea:86:f2:04:83:
                    24:63:08:71:69:d8:a8:7d:df:e1:bb:ad:93:16:ce:
                    fb:b8:20:7e:a7:68:41:8b:d4:49:c6:03:a3:a2:d8:
                    f4:5a:16:49:56:c6:11:b5:60:14:f9:72:0f:ff:13:
                    ac:bb:c3:85:e5:2f:8d:6f:e5:d6:ce:32:f4:3b:07:
                    55:eb:3b:a0:6a:94:a7:38:e0:93:93:ed:79:0a:9c:
                    ed:e3:33:f3:70:f6:5b:21:2e:9e:bb:a1:5a:c4:3d:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:7A:D3:2F:4E:02:26:29:46:3A:74:5D:3C:CE:81:BD:11:5B:24
            X509v3 Authority Key Identifier:
                keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c5:6b:e1:ee:94:22:db:18:fc:65:6f:3c:a2:ad:69:08:4b:
         8a:47:79:b1:c7:78:1b:7c:44:fd:90:57:83:39:60:16:e3:f6:
         f5:6d:0a:e1:1f:48:e8:01:f8:73:d3:9f:e0:08:5d:71:ad:37:
         f8:b5:13:02:b3:8f:11:78:24:2b:6f:30:17:23:5b:e8:7a:5e:
         aa:8f:da:20:08:4d:13:6e:68:83:d1:40:1e:b3:48:c1:02:72:
         26:af:1a:f6:6d:13:00:28:1f:0e:1f:7e:56:8f:4d:d9:97:2e:
         b3:24:4a:ea:87:e9:4d:f6:ec:e0:07:33:63:e6:55:ff:3b:dc:
         47:ed:1d:ad:a5:11:c4:eb:77:02:ef:1f:b7:14:fd:00:9d:46:
         3e:21:67:80:24:95:5d:af:89:54:0a:36:b0:29:4b:79:88:09:
         35:91:a7:4f:ef:45:4f:ea:61:4a:fa:3c:93:76:b0:41:06:15:
         4b:4c:df:7c:49:40:94:67:e1:19:e4:50:d6:f2:8c:9c:05:dd:
         f4:0d:82:fd:e0:a4:4b:60:f1:39:20:f6:85:7e:d6:92:4b:23:
         35:ff:ca:50:37:de:1d:f1:1e:66:a8:73:0e:6e:22:c0:e3:1d:
         c2:d6:35:c5:07:9e:84:e8:95:c2:22:77:5a:e1:56:65:a6:03:
         44:be:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:15:49 2025 by rpki-client