Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File:                     Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier:          diBSPfWYfJdz+Xu5gkvvgbxBTG/7hQ535mc3Nm3XdMk=
Subject key identifier:   3C:08:1E:67:10:58:13:C6:57:37:9E:F2:FC:12:13:AD:D2:39:7E:52
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer:       /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial:       0199FC58ADBAA760D4F118540AAF23EE380C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number:          06B3
Signing time:             Sun 19 Oct 2025 12:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:34 +0000
Files and hashes:         1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
                          2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: y32DddHYk+S2Onhxo/SksspfhZ4o4iecuRBYc1MnQqA=)
                          3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ad:ba:a7:60:d4:f1:18:54:0a:af:23:ee:38:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
        Validity
            Not Before: Oct 19 12:01:34 2025 GMT
            Not After : Oct 20 12:01:34 2025 GMT
        Subject: CN=3c081e67105813c657379ef2fc1213add2397e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:ae:07:5f:cb:bf:9a:0b:58:8e:6a:0b:a6:
                    a8:59:00:d3:22:56:83:f1:81:9d:52:b0:8e:88:70:
                    a2:3b:b5:36:f9:9f:db:eb:f9:8f:bc:a0:1d:da:e9:
                    74:c2:85:d8:a5:2a:58:e5:da:8e:b5:6a:29:b9:98:
                    d9:04:5d:b9:20:89:d1:79:50:dc:36:ae:ca:e0:7a:
                    96:02:93:79:be:f3:38:c5:97:52:69:b3:a9:a2:9a:
                    1b:2e:bd:5c:3d:75:cc:4d:3e:f2:3f:bb:97:77:4e:
                    74:7b:19:64:06:70:f9:02:23:a5:f2:85:6b:27:a1:
                    96:2b:4d:37:c8:bb:25:57:82:e5:db:80:f2:61:04:
                    31:78:20:7b:11:4a:d6:9f:45:24:c8:9d:1d:d6:47:
                    05:c5:f0:99:f1:07:67:25:02:1f:d1:5d:ef:8d:3b:
                    dc:28:56:2e:8f:d7:47:6b:97:d8:aa:ce:b1:c7:d3:
                    70:d2:a2:3c:a5:f6:08:65:ff:92:96:c5:a4:3e:da:
                    5b:a0:d3:d9:aa:b0:ad:84:53:7b:fa:99:f0:3f:69:
                    d4:4f:31:97:dd:af:80:00:d6:ec:30:89:3e:c5:c0:
                    eb:de:fd:77:a6:c6:bc:9c:b5:02:b4:1a:a5:8a:44:
                    c5:d7:64:54:ad:ec:57:01:44:01:3c:2e:f7:a5:0c:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:08:1E:67:10:58:13:C6:57:37:9E:F2:FC:12:13:AD:D2:39:7E:52
            X509v3 Authority Key Identifier:
                keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:41:e9:df:fe:39:2b:f5:78:3a:37:73:68:4e:d8:52:8d:
         25:5e:b7:bd:ca:ee:a2:88:ee:21:56:65:7d:f2:8c:6c:6d:ef:
         56:5b:c4:b4:41:c3:20:43:9d:7f:97:5d:60:42:bf:51:50:4e:
         b4:4d:8a:23:87:e1:5c:74:7d:ca:bb:d6:83:c5:f1:24:4f:05:
         6c:8e:ec:7c:c3:5e:3d:2c:87:2f:c5:fd:2e:5c:2e:49:fd:f0:
         e7:cf:b6:97:cb:cb:34:d7:8a:78:30:19:f3:83:09:55:13:01:
         86:ec:11:64:fb:04:71:a1:b8:e6:00:66:95:24:19:62:c7:8c:
         86:97:9d:5b:b7:c2:47:a4:5f:98:cd:ae:b6:d4:78:25:53:21:
         ce:e5:b0:86:3a:cc:65:4d:4b:a7:81:64:12:9f:44:81:f5:70:
         d8:29:ac:c2:c1:7d:96:46:34:a2:81:de:60:0b:2f:c1:f9:53:
         9e:aa:02:2d:ea:ab:e8:52:ea:eb:c2:cb:8c:40:43:77:c2:34:
         7b:05:68:a4:d6:b8:b0:e4:eb:bd:92:67:b8:19:73:5f:40:22:
         c7:fe:33:b8:dc:f3:b3:ae:c9:5f:4e:60:54:51:8f:1e:5a:f2:
         a5:0c:d0:1d:8f:f5:77:26:b6:78:59:b9:64:9e:9f:54:19:d8:
         8f:ba:99:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WK26p2DU8RhUCq8j7jgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0
YjIxNzEwHhcNMjUxMDE5MTIwMTM0WhcNMjUxMDIwMTIwMTM0WjAzMTEwLwYDVQQD
EygzYzA4MWU2NzEwNTgxM2M2NTczNzllZjJmYzEyMTNhZGQyMzk3ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YeuB1/Lv5oLWI5qC6aoWQDTIlaD
8YGdUrCOiHCiO7U2+Z/b6/mPvKAd2ul0woXYpSpY5dqOtWopuZjZBF25IInReVDc
Nq7K4HqWApN5vvM4xZdSabOpopobLr1cPXXMTT7yP7uXd050exlkBnD5AiOl8oVr
J6GWK003yLslV4Ll24DyYQQxeCB7EUrWn0UkyJ0d1kcFxfCZ8QdnJQIf0V3vjTvc
KFYuj9dHa5fYqs6xx9Nw0qI8pfYIZf+SlsWkPtpboNPZqrCthFN7+pnwP2nUTzGX
3a+AANbsMIk+xcDr3v13psa8nLUCtBqlikTF12RUrexXAUQBPC73pQwTVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwIHmcQWBPGVzee8vwSE63SOX5SMB8GA1UdIwQY
MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt
MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl
LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvVB6d/+
OSv1eDo3c2hO2FKNJV63vcruoojuIVZlffKMbG3vVlvEtEHDIEOdf5ddYEK/UVBO
tE2KI4fhXHR9yrvWg8XxJE8FbI7sfMNePSyHL8X9LlwuSf3w58+2l8vLNNeKeDAZ
84MJVRMBhuwRZPsEcaG45gBmlSQZYseMhpedW7fCR6RfmM2uttR4JVMhzuWwhjrM
ZU1Lp4FkEp9EgfVw2CmswsF9lkY0ooHeYAsvwflTnqoCLeqr6FLq68LLjEBDd8I0
ewVopNa4sOTrvZJnuBlzX0Aix/4zuNzzs67JX05gVFGPHlrypQzQHY/1dya2eFm5
ZJ6fVBnYj7qZaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:49 2025 by rpki-client