Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File:                     UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier:          H5WvWEYuu1Y9P6IGA7lca4sekBAPvFFCExS63EAwOUM=
Subject key identifier:   06:35:2F:EB:55:E3:DE:03:51:5E:17:59:63:24:9B:49:BA:DF:E4:B2
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer:       /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial:       0198D4E03AE4BB51DA4BEE63D1D167F9DB89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number:          06F7
Signing time:             Sat 23 Aug 2025 03:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:01 +0000
Files and hashes:         1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: bEwTLxYqJNBhGKcWPKyHAPcw0R3tvgxT4j35ALTnwTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:3a:e4:bb:51:da:4b:ee:63:d1:d1:67:f9:db:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
        Validity
            Not Before: Aug 23 03:02:01 2025 GMT
            Not After : Aug 24 03:02:01 2025 GMT
        Subject: CN=06352feb55e3de03515e175963249b49badfe4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:fa:1e:3a:82:0b:e9:ca:7c:28:99:a0:9e:
                    2f:04:fa:12:04:4c:83:a9:3a:92:48:90:dd:9b:84:
                    2c:35:a5:e3:6f:46:ee:90:54:3a:f3:23:48:1b:5e:
                    d5:4e:0a:ee:f5:1c:c5:af:30:93:fe:54:89:2f:b9:
                    d7:2f:3a:a3:2f:49:d0:52:8a:66:9d:fd:6a:67:9a:
                    2c:3f:28:49:7e:23:5a:c1:b9:e5:db:1a:d9:77:40:
                    6a:c5:29:95:28:5a:c3:8b:21:c3:f6:03:74:39:a3:
                    91:b8:13:81:fa:0c:14:ee:ad:98:a3:1d:52:4b:f9:
                    8b:25:5c:34:d0:9b:63:60:a5:c3:ee:5c:94:49:67:
                    03:46:db:c7:0c:e5:d3:51:a6:c4:39:49:fd:66:26:
                    8d:07:75:4b:28:56:66:0c:ef:4c:68:a4:91:04:e9:
                    18:07:70:60:e2:b6:73:7f:c3:7d:6f:31:a0:4f:36:
                    7c:ba:08:a5:7f:5c:7e:9f:2d:4b:9a:e8:75:fc:58:
                    b5:f9:5b:6b:14:08:94:09:2e:6a:34:31:9b:60:92:
                    bd:16:94:5e:c6:0f:cf:55:12:4b:fe:03:6a:fd:2e:
                    de:a6:f7:17:3d:ea:f5:32:5e:14:de:f6:f6:3e:c9:
                    f0:ee:56:5d:8d:bc:c0:e4:3d:9a:d2:cf:40:91:bb:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:35:2F:EB:55:E3:DE:03:51:5E:17:59:63:24:9B:49:BA:DF:E4:B2
            X509v3 Authority Key Identifier:
                keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:25:6c:22:09:5c:37:d2:8e:a3:0d:d4:a7:f8:2f:e1:29:e7:
         cb:dc:16:29:40:01:7a:b7:20:57:46:b1:4e:c0:95:3e:67:54:
         ff:f4:fb:f7:6b:0b:2d:bf:59:77:b8:85:76:2e:44:3a:78:68:
         6d:a3:00:52:24:79:35:0d:aa:9d:2a:a2:73:fc:b3:df:d7:b6:
         16:26:3a:1a:87:10:6f:5a:71:e4:7a:f1:ee:39:4f:0b:bd:7d:
         be:77:16:83:e3:bf:1b:fa:dd:7e:dd:52:01:c7:70:e0:48:78:
         be:7f:2b:bf:8f:83:64:72:03:d8:9c:31:19:33:7e:06:5c:59:
         e5:4f:8c:21:9a:58:ea:7f:be:03:7b:9d:27:73:f9:fc:d1:17:
         b6:7d:e7:cf:f0:15:55:68:4c:5a:fa:b1:82:ff:06:96:1e:ce:
         37:94:91:89:94:d4:0b:ee:df:bf:27:b8:79:1c:cf:c4:78:3a:
         6c:cd:bc:31:f0:e6:dc:20:b1:d8:39:11:15:6b:08:4c:8b:97:
         53:5d:1e:0c:ac:14:25:65:35:7e:22:20:69:f1:93:97:4f:13:
         68:40:1a:3f:e0:9f:40:e8:ef:c4:01:76:e3:d8:41:62:1f:09:
         fa:5e:18:ab:7d:f8:7d:37:0e:16:9b:72:61:5e:da:fa:ff:d7:
         45:fc:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:24 2025 by rpki-client