Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          KCwlXYFfblIe5qDmu2/xbWl+AxoNJY9Fb1c/WQeLDV0=
Subject key identifier:   27:E7:E4:5F:FD:E5:D3:13:AD:06:EF:BD:BE:E8:A0:10:43:D8:3A:1A
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       0197CBE03BB4A667FD5ED9A81F12625C11FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          15C5
Signing time:             Wed 02 Jul 2025 16:02:39 +0000
Manifest this update:     Wed 02 Jul 2025 16:02:39 +0000
Manifest next update:     Thu 03 Jul 2025 16:02:39 +0000
Files and hashes:         1: KHPRuQDdd-kWMT7LTpUd4Jl5CLc.roa (hash: HHEh/ZmjNau8OqCWaktRrOiEVjCo5faN7oV96b1l4Q8=)
                          2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: SIZiM6r61HAm2JFwSkPUcNqNtIYcYtLIPg9ioZGuAo8=)
                          4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:e0:3b:b4:a6:67:fd:5e:d9:a8:1f:12:62:5c:11:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Jul  2 16:02:39 2025 GMT
            Not After : Jul  3 16:02:39 2025 GMT
        Subject: CN=27e7e45ffde5d313ad06efbdbee8a01043d83a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:9e:e7:03:eb:f0:e3:9a:16:d2:39:5b:f5:
                    ee:43:f3:40:8d:97:e2:88:cb:b9:44:51:c9:a2:39:
                    11:12:5b:59:70:8d:bc:cb:3e:11:77:cc:77:0f:e7:
                    64:4f:1f:51:0d:9f:e1:1d:d9:95:b9:34:f5:77:a2:
                    5c:d1:82:c4:66:d3:06:05:a6:70:54:14:5f:6b:f0:
                    c1:f2:5c:7b:c2:b0:36:38:5c:b9:c6:a4:4c:2b:92:
                    21:1b:a9:f8:d9:de:9b:d0:6e:d4:de:47:87:60:9c:
                    73:f6:7f:e0:5e:59:b7:2c:c7:12:78:c5:03:78:78:
                    b8:b8:97:77:70:3e:11:7a:78:ec:bb:e9:ff:b8:62:
                    c9:bb:6f:b9:8e:c9:de:b4:40:e2:31:4e:1b:9c:45:
                    0d:dc:fd:1f:3e:99:04:ef:f9:14:d8:2c:b3:b4:d0:
                    26:13:d7:0a:9c:3e:f7:85:08:6a:6e:bb:5c:58:1f:
                    88:96:0b:b1:86:1d:9c:5b:60:90:99:3e:9b:96:9b:
                    74:b5:47:d8:5a:31:ca:5d:d2:b2:fd:3a:3f:e3:e6:
                    f8:fb:b1:3e:53:f7:93:2f:ea:2d:11:91:af:b6:33:
                    db:a4:c6:74:9a:d2:50:61:c1:84:57:2a:6b:4e:97:
                    ad:9a:40:b4:38:21:b5:1f:29:4c:46:bd:97:07:a4:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:E4:5F:FD:E5:D3:13:AD:06:EF:BD:BE:E8:A0:10:43:D8:3A:1A
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:f0:e3:14:15:95:2a:3a:ab:e7:76:09:81:d1:28:05:20:
         80:0d:2b:8a:be:b4:91:b5:18:60:17:0d:d1:af:b8:8c:3f:bd:
         d9:dc:f6:9a:b0:bb:48:b2:ca:16:a2:5a:60:06:4d:7d:1d:15:
         87:86:a8:35:00:f1:a6:40:9d:37:4e:d3:86:93:93:e7:e7:b6:
         4b:74:8e:c4:43:b0:fb:72:22:f0:5e:c3:df:fa:37:a0:d7:4a:
         02:94:e3:57:21:b8:70:a6:15:fe:9b:cb:81:72:07:fd:bc:7c:
         12:e4:ff:db:75:b2:32:12:42:8f:8d:3c:bd:46:ad:fd:9c:96:
         83:80:68:f1:a8:60:a5:c8:28:29:4d:fa:17:d8:8f:52:8f:9d:
         cb:2c:14:c9:82:f9:f1:d3:53:49:c8:44:2f:65:85:8c:97:bc:
         f4:81:7c:ce:d5:b8:46:de:44:dc:31:74:94:f0:e7:5d:2d:15:
         f7:88:bf:01:ce:01:0b:d4:b1:93:c1:69:24:7b:cb:d9:d3:d0:
         7e:89:b7:96:98:7e:f2:89:e5:8c:83:e0:b1:29:bc:76:1e:55:
         1c:82:71:16:7d:e6:9e:23:dc:5c:9e:9e:9c:ea:ad:ad:6e:ff:
         bc:bf:08:4c:32:f3:94:0d:d6:7d:28:7b:a8:88:af:96:7b:16:
         84:50:b8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL4Du0pmf9XtmoHxJiXBH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUwNzAyMTYwMjM5WhcNMjUwNzAzMTYwMjM5WjAzMTEwLwYDVQQD
EygyN2U3ZTQ1ZmZkZTVkMzEzYWQwNmVmYmRiZWU4YTAxMDQzZDgzYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwWe5wPr8OOaFtI5W/XuQ/NAjZfi
iMu5RFHJojkREltZcI28yz4Rd8x3D+dkTx9RDZ/hHdmVuTT1d6Jc0YLEZtMGBaZw
VBRfa/DB8lx7wrA2OFy5xqRMK5IhG6n42d6b0G7U3keHYJxz9n/gXlm3LMcSeMUD
eHi4uJd3cD4Renjsu+n/uGLJu2+5jsnetEDiMU4bnEUN3P0fPpkE7/kU2CyztNAm
E9cKnD73hQhqbrtcWB+Ilguxhh2cW2CQmT6blpt0tUfYWjHKXdKy/To/4+b4+7E+
U/eTL+otEZGvtjPbpMZ0mtJQYcGEVyprTpetmkC0OCG1HylMRr2XB6Ss1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfn5F/95dMTrQbvvb7ooBBD2DoaMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHnw4xQV
lSo6q+d2CYHRKAUggA0rir60kbUYYBcN0a+4jD+92dz2mrC7SLLKFqJaYAZNfR0V
h4aoNQDxpkCdN07ThpOT5+e2S3SOxEOw+3Ii8F7D3/o3oNdKApTjVyG4cKYV/pvL
gXIH/bx8EuT/23WyMhJCj408vUat/ZyWg4Bo8ahgpcgoKU36F9iPUo+dyywUyYL5
8dNTSchEL2WFjJe89IF8ztW4Rt5E3DF0lPDnXS0V94i/Ac4BC9Sxk8FpJHvL2dPQ
fom3lph+8onljIPgsSm8dh5VHIJxFn3mniPcXJ6enOqtrW7/vL8ITDLzlA3WfSh7
qIivlnsWhFC4+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:05:03 2025 by rpki-client