Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
File:                     uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json)
Hash identifier:          zRO13dGsvMsWowJm+f2vcoCgSr6blj0GCJ7b/y03cHM=
Subject key identifier:   40:72:AB:F5:72:EC:C1:49:2F:F9:54:34:23:98:78:BF:18:7E:EE:A8
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       0199FCC6176EFE75252A7ABBE3E557D4ADD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
Manifest number:          1710
Signing time:             Sun 19 Oct 2025 14:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:04 +0000
Files and hashes:         1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=)
                          2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=)
                          3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=)
                          4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=)
                          5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=)
                          6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=)
                          7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=)
                          8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=)
                          9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: /y11DLu+cMbKRmuWoO8TZYlRL0rIQ01ozuQL8SyZiXg=)
                          10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=)
                          11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:17:6e:fe:75:25:2a:7a:bb:e3:e5:57:d4:ad:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Oct 19 14:01:04 2025 GMT
            Not After : Oct 20 14:01:04 2025 GMT
        Subject: CN=4072abf572ecc1492ff95434239878bf187eeea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:71:60:70:c5:30:ad:ca:fb:d6:c0:ce:e5:
                    65:23:0c:a5:ea:ab:93:2c:9e:22:ee:a3:64:cb:1e:
                    ce:5e:c6:8d:bb:a7:88:ba:14:93:cf:26:74:4f:d5:
                    5b:6a:3b:8d:65:57:13:ba:30:7b:8b:96:22:b2:e6:
                    c7:82:aa:0c:13:7f:6e:c1:28:cb:06:8c:6d:3d:f6:
                    09:cc:55:83:02:e8:fb:0f:99:20:9f:10:56:a8:88:
                    76:4e:0b:4d:87:23:4f:c2:86:70:ae:68:fb:73:14:
                    f4:eb:c1:ad:df:bc:d8:72:34:cf:c1:eb:f6:7e:fe:
                    12:ca:cc:2c:02:d7:63:d2:d2:80:10:0a:c9:04:63:
                    0a:ca:63:6e:b1:6d:45:89:b0:18:d8:79:41:55:cb:
                    bc:ff:18:5e:46:1f:82:99:61:80:f2:4e:13:6f:76:
                    85:11:af:f2:83:cb:2d:a6:35:0c:a5:39:f4:e0:3d:
                    1a:ad:dc:01:6d:75:fb:57:5f:5d:c9:c2:27:0d:7f:
                    b1:72:83:00:3d:1e:45:69:16:27:f6:57:68:ea:c9:
                    23:4a:90:ab:89:cb:81:10:f3:f3:c1:ab:55:b8:8d:
                    1b:72:1a:74:88:eb:2f:f8:d7:41:ac:68:1e:5f:a2:
                    05:8f:6d:ea:a0:df:54:3d:c7:71:9d:19:e1:ae:f3:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:AB:F5:72:EC:C1:49:2F:F9:54:34:23:98:78:BF:18:7E:EE:A8
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:0d:3d:97:d7:d2:a0:0f:0c:e4:20:a5:31:41:c0:ed:07:
         9d:44:b9:ef:37:bd:06:7a:98:4e:fb:bc:ac:0a:9c:7d:e3:5b:
         b9:24:51:45:fd:5d:55:b8:14:fd:f5:33:75:04:8c:0c:09:b2:
         a5:52:5b:84:53:6f:1c:be:7f:c9:d4:83:32:72:02:e9:de:6e:
         6e:ff:bf:49:4f:5e:83:78:6d:dc:bf:97:fa:be:c5:a7:59:d8:
         20:3c:82:dd:08:e8:0c:c4:36:fa:52:82:36:d4:df:3e:be:eb:
         e8:fe:66:fa:97:91:d8:aa:42:c5:42:47:cd:2d:e6:0a:74:3b:
         10:f5:fa:07:8a:f2:22:ed:a5:32:67:85:b4:b1:7d:9a:74:81:
         7c:26:cc:57:44:7d:32:51:75:09:71:e2:1c:e6:6f:a7:c9:6a:
         e3:c3:b0:38:b0:37:4f:fb:13:81:54:14:28:91:b3:56:f2:93:
         ab:62:a8:69:a0:b2:aa:9a:ef:e3:ab:6e:4f:22:77:35:0f:4f:
         37:9e:31:34:fb:30:3f:c9:8e:65:e8:fa:31:ae:91:a6:30:37:
         ef:68:c7:a8:84:2e:cd:a1:73:e1:02:aa:9c:3f:7d:74:14:c8:
         6a:67:3e:f7:be:ab:79:30:49:d9:74:1b:07:fa:ed:7b:b2:e9:
         57:eb:78:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhdu/nUlKnq74+VX1K3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjUxMDE5MTQwMTA0WhcNMjUxMDIwMTQwMTA0WjAzMTEwLwYDVQQD
Eyg0MDcyYWJmNTcyZWNjMTQ5MmZmOTU0MzQyMzk4NzhiZjE4N2VlZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqRxYHDFMK3K+9bAzuVlIwyl6quT
LJ4i7qNkyx7OXsaNu6eIuhSTzyZ0T9VbajuNZVcTujB7i5YisubHgqoME39uwSjL
BoxtPfYJzFWDAuj7D5kgnxBWqIh2TgtNhyNPwoZwrmj7cxT068Gt37zYcjTPwev2
fv4SyswsAtdj0tKAEArJBGMKymNusW1FibAY2HlBVcu8/xheRh+CmWGA8k4Tb3aF
Ea/yg8stpjUMpTn04D0ardwBbXX7V19dycInDX+xcoMAPR5FaRYn9ldo6skjSpCr
icuBEPPzwatVuI0bchp0iOsv+NdBrGgeX6IFj23qoN9UPcdxnRnhrvMmdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEByq/Vy7MFJL/lUNCOYeL8Yfu6oMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3sNPZfX
0qAPDOQgpTFBwO0HnUS57ze9BnqYTvu8rAqcfeNbuSRRRf1dVbgU/fUzdQSMDAmy
pVJbhFNvHL5/ydSDMnIC6d5ubv+/SU9eg3ht3L+X+r7Fp1nYIDyC3QjoDMQ2+lKC
NtTfPr7r6P5m+peR2KpCxUJHzS3mCnQ7EPX6B4ryIu2lMmeFtLF9mnSBfCbMV0R9
MlF1CXHiHOZvp8lq48OwOLA3T/sTgVQUKJGzVvKTq2KoaaCyqprv46tuTyJ3NQ9P
N54xNPswP8mOZej6Ma6RpjA372jHqIQuzaFz4QKqnD99dBTIamc+976reTBJ2XQb
B/rte7LpV+t4Hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:17 2025 by rpki-client