Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          tl5wq3UV95kBXAu3qqjfi9YR4PnMA9TWnVTeUkgxUpo=
Subject key identifier:   CB:A3:B6:F5:F7:6E:DB:25:3F:27:27:A9:0C:B8:78:25:4F:14:F3:96
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       0198D473CE3B74429BA0CEF7BBAF29B75763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 01:03:35 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:35 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:35 +0000
Files and hashes:         1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: /Ls0jkfKjqwLsySFUMp32+v+sSs6BplAyWP5kG2veVo=)
                          2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:ce:3b:74:42:9b:a0:ce:f7:bb:af:29:b7:57:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Aug 23 01:03:35 2025 GMT
            Not After : Aug 24 01:03:35 2025 GMT
        Subject: CN=cba3b6f5f76edb253f2727a90cb878254f14f396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:7b:de:27:04:5c:b8:30:00:01:aa:2c:b6:
                    57:bc:4b:87:ab:f9:e1:37:82:e7:71:14:c1:8e:0c:
                    6e:72:c3:9c:b3:62:ca:6d:a7:72:b6:12:c3:63:e0:
                    cf:bc:66:27:cf:76:44:1d:28:b5:3c:1b:24:da:c4:
                    cf:06:04:66:10:90:c1:d3:51:f5:0e:d0:70:15:3c:
                    45:47:f6:c4:c3:15:3a:87:87:69:ee:89:42:2f:b7:
                    9c:8a:a9:82:73:ff:54:ad:c9:ef:a2:a6:3e:8a:eb:
                    9a:c3:af:6d:a5:31:0e:70:2c:bd:a8:46:f2:ca:3c:
                    b7:65:a8:54:05:bd:ef:d3:98:4d:3c:39:9e:ec:8b:
                    13:a0:6b:fc:31:34:58:a0:64:4d:72:27:1f:17:0e:
                    63:59:1e:5c:a3:f0:29:27:24:2c:93:23:9c:a8:1b:
                    8a:96:04:f4:e9:da:a9:a6:c0:69:53:92:e0:32:d2:
                    11:7b:ea:f1:88:42:b2:8d:09:2a:b6:e1:78:2f:6a:
                    29:ce:23:2a:09:4b:53:e5:f8:ba:b7:93:28:10:03:
                    ba:08:63:a9:45:7f:2a:a3:69:eb:4a:cf:b0:ce:72:
                    47:95:cd:80:5f:a7:96:56:d7:ff:e0:75:0d:08:61:
                    40:ad:88:1e:54:00:90:0d:a9:13:d7:e6:4f:fa:3d:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:B6:F5:F7:6E:DB:25:3F:27:27:A9:0C:B8:78:25:4F:14:F3:96
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:26:14:02:ef:49:a1:7b:6c:7f:47:c6:3d:f6:ea:7d:cd:
         ec:79:91:14:55:30:35:be:a4:83:df:86:db:e3:f0:2e:c7:8e:
         99:24:62:75:05:3f:13:39:5a:ac:7d:af:a2:9d:0f:74:c4:78:
         62:e6:3e:51:c0:a8:4a:45:c4:d9:f1:2a:f3:bb:20:c4:17:d7:
         32:ed:6d:4e:cf:bf:51:91:d7:19:78:39:80:27:30:5e:d5:e7:
         fb:35:da:1c:83:ba:14:c6:a1:d9:f5:f4:93:4b:7a:71:00:d1:
         a8:66:4b:55:a5:ea:83:92:7f:02:5a:65:0c:39:f4:dc:82:dc:
         f1:c7:91:c1:03:a2:5d:b9:7e:dc:3b:b8:81:9d:02:27:89:06:
         5c:d8:1d:33:c7:a3:4b:a0:f3:3d:54:8b:c8:e0:27:ac:81:ba:
         02:64:bd:30:c6:83:fd:3d:58:cb:31:f6:7a:e4:59:e5:a4:54:
         e0:63:c1:82:d0:36:3c:1b:93:98:3f:4b:2b:71:44:98:cc:f0:
         e6:bc:c9:07:b1:63:95:6c:80:12:7a:87:23:25:44:9f:3e:07:
         b3:81:70:eb:39:83:ee:16:87:a4:df:5d:58:2e:08:0f:c5:89:
         0c:0c:3b:93:e4:5a:f0:de:a8:11:64:0f:62:1b:b0:e7:cf:aa:
         5d:57:52:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc847dEKboM73u68pt1djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmI3MjI3MTVmOTFiZTc5MmExZWMzYzMxZTc3ZWQ5ZGEw
NWNiZTEwHhcNMjUwODIzMDEwMzM1WhcNMjUwODI0MDEwMzM1WjAzMTEwLwYDVQQD
EyhjYmEzYjZmNWY3NmVkYjI1M2YyNzI3YTkwY2I4NzgyNTRmMTRmMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtR73icEXLgwAAGqLLZXvEuHq/nh
N4LncRTBjgxucsOcs2LKbadythLDY+DPvGYnz3ZEHSi1PBsk2sTPBgRmEJDB01H1
DtBwFTxFR/bEwxU6h4dp7olCL7eciqmCc/9UrcnvoqY+iuuaw69tpTEOcCy9qEby
yjy3ZahUBb3v05hNPDme7IsToGv8MTRYoGRNcicfFw5jWR5co/ApJyQskyOcqBuK
lgT06dqppsBpU5LgMtIRe+rxiEKyjQkqtuF4L2opziMqCUtT5fi6t5MoEAO6CGOp
RX8qo2nrSs+wznJHlc2AX6eWVtf/4HUNCGFArYgeVACQDakT1+ZP+j1I+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMujtvX3btslPycnqQy4eCVPFPOWMB8GA1UdIwQY
MBaAFLgrcicV+RvnkqHsPDHnftnaBcvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zOTY3NTktYjBjNi00OGVmLTk3YjMt
YTE1YTE4NjEzZGE2LzEvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zOTY3NTktYjBjNi00OGVmLTk3YjMtYTE1YTE4NjEzZGE2
LzEvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2smFALv
SaF7bH9Hxj326n3N7HmRFFUwNb6kg9+G2+PwLseOmSRidQU/EzlarH2vop0PdMR4
YuY+UcCoSkXE2fEq87sgxBfXMu1tTs+/UZHXGXg5gCcwXtXn+zXaHIO6FMah2fX0
k0t6cQDRqGZLVaXqg5J/AlplDDn03ILc8ceRwQOiXbl+3Du4gZ0CJ4kGXNgdM8ej
S6DzPVSLyOAnrIG6AmS9MMaD/T1YyzH2euRZ5aRU4GPBgtA2PBuTmD9LK3FEmMzw
5rzJB7FjlWyAEnqHIyVEnz4Hs4Fw6zmD7haHpN9dWC4ID8WJDAw7k+Ra8N6oEWQP
Yhuw58+qXVdSgw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:37 2025 by rpki-client