Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File:                     uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier:          Q/oOrOGBfRAg12LFKjnLEcNvMORw6dxph6oqdea0KSo=
Subject key identifier:   58:3A:0E:C9:D4:D3:FE:79:2E:5C:D7:FB:5C:2F:B4:54:6F:4F:E5:DA
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer:       /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial:       0198D65F0FC9F832C81954536A3C4890BBDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number:          0F05
Signing time:             Sat 23 Aug 2025 10:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:10 +0000
Files and hashes:         1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=)
                          2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: vHHVf5meuIs2oypFn8TYREEOLXzQ6pl72/QQZk42pLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:0f:c9:f8:32:c8:19:54:53:6a:3c:48:90:bb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
        Validity
            Not Before: Aug 23 10:00:10 2025 GMT
            Not After : Aug 24 10:00:10 2025 GMT
        Subject: CN=583a0ec9d4d3fe792e5cd7fb5c2fb4546f4fe5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:dc:77:28:e9:4a:3b:91:47:f3:49:d6:29:
                    60:19:02:c8:30:53:36:3e:87:74:5e:11:97:9c:66:
                    8d:a1:af:75:7a:af:76:63:be:c0:fe:1f:70:2d:69:
                    5b:94:c6:6e:ab:4a:ce:00:12:bc:ce:c3:34:2a:7d:
                    5d:be:57:c9:8b:86:4a:25:ed:10:fd:38:72:7f:cd:
                    29:e3:be:80:28:cc:d8:b1:5a:32:93:ac:f3:a0:71:
                    28:81:36:67:39:14:45:6c:e3:84:54:c1:fe:11:78:
                    ff:92:06:7a:7f:da:6d:7d:f3:21:0d:75:38:17:cc:
                    43:d7:73:63:86:2a:8e:2e:7e:a8:18:f1:60:05:10:
                    34:5a:f1:ee:1c:cb:99:e5:05:45:74:c6:61:88:d4:
                    fd:52:e9:d1:38:f3:d3:5b:06:9f:fd:b4:20:38:d2:
                    6b:e0:7f:b7:d1:39:c0:3f:13:a1:54:85:d7:09:1a:
                    a2:3a:ae:df:e2:28:81:e8:06:8e:d4:cf:09:0e:73:
                    06:58:97:ce:63:ef:d5:5e:2c:ce:d6:55:12:88:39:
                    12:41:69:ef:65:0b:71:5f:e5:28:c6:44:27:6b:48:
                    60:03:cd:c2:48:02:ba:c7:b9:ef:93:d8:98:f7:e6:
                    86:b6:d0:ef:b5:45:d4:d9:31:90:0b:95:a8:71:c9:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3A:0E:C9:D4:D3:FE:79:2E:5C:D7:FB:5C:2F:B4:54:6F:4F:E5:DA
            X509v3 Authority Key Identifier:
                keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bf:c9:1e:b7:ab:55:d9:0e:07:97:c8:31:11:6a:fe:a7:0f:
         0e:3c:b5:48:8a:29:59:5f:e3:24:9e:7c:42:f2:0c:fb:0c:64:
         fc:0c:e9:1e:e7:f3:f2:be:6c:de:0b:ff:0a:57:5b:01:76:29:
         31:52:22:85:c7:44:f7:73:a2:c9:1c:65:43:6b:bb:b2:96:bf:
         a9:e9:2a:77:cc:5c:b2:c1:14:23:cc:47:f9:8e:54:94:e7:8a:
         3b:3e:18:2a:14:b8:58:3a:c4:42:76:95:ab:61:b5:3a:81:8a:
         46:42:c8:cf:f0:90:61:27:d1:5c:30:45:7e:f4:64:bc:6c:a5:
         80:93:a6:17:42:13:43:97:3b:19:89:30:cc:78:3f:6d:1a:2c:
         40:4b:d9:ef:07:fc:20:eb:2e:db:f6:af:3b:1c:44:d3:39:be:
         05:58:31:d2:b5:a4:44:2d:6e:d1:40:d8:66:60:c3:1c:ea:78:
         16:75:c5:3d:8f:4e:b2:11:0c:b7:d9:73:8a:b3:32:e7:5f:02:
         d5:32:93:69:00:2e:a4:f3:d5:93:a0:60:65:f9:c3:5d:43:3f:
         0b:dc:99:98:eb:45:89:8e:20:7e:65:6b:6f:63:ec:0b:ef:ee:
         b1:cf:ea:2a:27:8a:28:40:e0:4a:55:dc:bb:45:ad:45:44:44:
         5f:e4:60:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXw/J+DLIGVRTajxIkLveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy
OTEzOTUwHhcNMjUwODIzMTAwMDEwWhcNMjUwODI0MTAwMDEwWjAzMTEwLwYDVQQD
Eyg1ODNhMGVjOWQ0ZDNmZTc5MmU1Y2Q3ZmI1YzJmYjQ1NDZmNGZlNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1djcdyjpSjuRR/NJ1ilgGQLIMFM2
Pod0XhGXnGaNoa91eq92Y77A/h9wLWlblMZuq0rOABK8zsM0Kn1dvlfJi4ZKJe0Q
/Thyf80p476AKMzYsVoyk6zzoHEogTZnORRFbOOEVMH+EXj/kgZ6f9ptffMhDXU4
F8xD13NjhiqOLn6oGPFgBRA0WvHuHMuZ5QVFdMZhiNT9UunROPPTWwaf/bQgONJr
4H+30TnAPxOhVIXXCRqiOq7f4iiB6AaO1M8JDnMGWJfOY+/VXizO1lUSiDkSQWnv
ZQtxX+UoxkQna0hgA83CSAK6x7nvk9iY9+aGttDvtUXU2TGQC5WoccmrnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg6DsnU0/55LlzX+1wvtFRvT+XaMB8GA1UdIwQY
MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt
YTE4NjFlNTM1NDRkLzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk
LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7/JHrer
VdkOB5fIMRFq/qcPDjy1SIopWV/jJJ58QvIM+wxk/AzpHufz8r5s3gv/CldbAXYp
MVIihcdE93OiyRxlQ2u7spa/qekqd8xcssEUI8xH+Y5UlOeKOz4YKhS4WDrEQnaV
q2G1OoGKRkLIz/CQYSfRXDBFfvRkvGylgJOmF0ITQ5c7GYkwzHg/bRosQEvZ7wf8
IOsu2/avOxxE0zm+BVgx0rWkRC1u0UDYZmDDHOp4FnXFPY9OshEMt9lzirMy518C
1TKTaQAupPPVk6BgZfnDXUM/C9yZmOtFiY4gfmVrb2PsC+/usc/qKieKKEDgSlXc
u0WtRUREX+Rgmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:02 2025 by rpki-client