Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          7punE4L+G56O+1IMkNK2t2eTqgvwBkVJRmMktecOTY8=
Subject key identifier:   B3:21:3A:AA:46:C7:2B:04:14:F3:AE:E4:7A:FF:04:5A:59:5E:76:EB
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       0198D473759CADAA8DBE88E4C89D342CC6C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          0DCC
Signing time:             Sat 23 Aug 2025 01:03:13 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:13 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:13 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: UETOEB9eJlVtxZ5EBPLjmvS0jyb1SAl8Uhc2wUvFuf8=)
                          2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:75:9c:ad:aa:8d:be:88:e4:c8:9d:34:2c:c6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: Aug 23 01:03:13 2025 GMT
            Not After : Aug 24 01:03:13 2025 GMT
        Subject: CN=b3213aaa46c72b0414f3aee47aff045a595e76eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:d1:7f:92:2d:11:56:c7:77:cf:d9:b6:b8:
                    8d:fa:7a:a8:4a:0b:19:01:5d:a3:96:03:37:af:5d:
                    6c:20:55:42:9e:88:cf:4a:e3:74:01:05:a3:48:2b:
                    ae:12:58:06:be:b7:f6:3f:f1:4a:88:30:f4:f1:cc:
                    96:cf:0c:a5:e6:d7:48:3e:79:e0:2a:6a:81:e4:eb:
                    3d:ab:00:2d:00:72:06:9e:b2:91:d0:08:c8:06:7b:
                    bb:56:2c:e1:d1:0e:8f:b8:ea:02:c2:68:d5:c9:e0:
                    de:ac:30:b2:07:d4:76:26:b2:7f:f5:df:10:33:40:
                    0a:07:56:b7:a0:26:84:35:ad:83:fd:99:d1:2d:12:
                    98:c7:73:40:2d:ed:43:08:54:3f:27:42:b0:6c:18:
                    59:81:d8:63:a7:be:2f:7e:9c:00:0f:e6:f8:d3:f2:
                    73:8d:bf:f1:40:2a:96:7d:75:5f:d0:79:fc:c0:a3:
                    f5:90:8f:00:ec:97:24:d5:68:e1:60:f7:19:eb:49:
                    e1:b7:5c:d8:f7:bc:68:65:37:56:19:21:83:68:a6:
                    48:a6:d0:a8:da:78:a5:f4:5f:73:1e:90:55:7b:d8:
                    4d:9f:cd:2a:0b:2d:5b:4a:87:f3:3d:73:71:37:f4:
                    8c:f3:4f:9b:ab:12:7b:3f:ca:20:22:8b:fd:a9:e0:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:21:3A:AA:46:C7:2B:04:14:F3:AE:E4:7A:FF:04:5A:59:5E:76:EB
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:2b:32:91:5c:07:e0:d1:3d:bd:9a:c7:ec:84:19:bc:29:
         0c:34:2f:e4:31:5d:58:15:5d:1c:f0:82:a3:3a:5f:71:0b:9c:
         23:22:f4:f3:7b:29:25:41:06:b1:3d:17:6f:83:87:83:6a:e6:
         ba:17:e7:94:95:42:de:d3:ec:6f:6f:50:b4:56:0c:8a:d0:82:
         89:86:d5:7c:2b:fa:3a:71:ea:fb:27:ce:c6:06:28:e8:cb:40:
         31:44:96:26:3b:aa:cf:fe:d0:49:cb:26:ad:c4:a5:91:b9:b0:
         c2:9e:91:43:f9:ab:40:27:c8:f2:12:d6:fe:d6:62:61:47:2a:
         a8:d7:54:c8:ab:47:e5:7a:e3:18:dd:0f:14:16:69:a4:0f:ac:
         72:8a:7d:35:1f:51:81:01:ce:23:b0:67:83:b3:03:ca:02:c7:
         fd:20:5d:27:8e:c3:c7:e4:e4:a1:1f:e5:8d:34:64:2e:fc:38:
         23:7f:0e:26:72:52:83:35:da:1b:0f:c9:2d:e6:c6:81:b7:5b:
         6c:83:8a:83:7f:d9:d5:14:92:0f:08:ea:86:b2:c9:a0:9f:e6:
         9f:03:df:f8:e2:cf:f7:e6:8e:dd:98:be:f2:4e:47:2f:36:17:
         d4:1b:ba:78:6b:c8:28:8a:7e:ce:6f:19:18:f4:e4:84:2b:b9:
         36:3b:e1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc3WcraqNvojkyJ00LMbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWJiMDAxNTI4MjgxNzM0YmY1Yzk0YmM0YmVmNmY2ZTk5
YTM3N2UwHhcNMjUwODIzMDEwMzEzWhcNMjUwODI0MDEwMzEzWjAzMTEwLwYDVQQD
EyhiMzIxM2FhYTQ2YzcyYjA0MTRmM2FlZTQ3YWZmMDQ1YTU5NWU3NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrPRf5ItEVbHd8/ZtriN+nqoSgsZ
AV2jlgM3r11sIFVCnojPSuN0AQWjSCuuElgGvrf2P/FKiDD08cyWzwyl5tdIPnng
KmqB5Os9qwAtAHIGnrKR0AjIBnu7Vizh0Q6PuOoCwmjVyeDerDCyB9R2JrJ/9d8Q
M0AKB1a3oCaENa2D/ZnRLRKYx3NALe1DCFQ/J0KwbBhZgdhjp74vfpwAD+b40/Jz
jb/xQCqWfXVf0Hn8wKP1kI8A7Jck1WjhYPcZ60nht1zY97xoZTdWGSGDaKZIptCo
2nil9F9zHpBVe9hNn80qCy1bSofzPXNxN/SM80+bqxJ7P8ogIov9qeByawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMhOqpGxysEFPOu5Hr/BFpZXnbrMB8GA1UdIwQY
MBaAFAPrsAFSgoFzS/XJS8S+9vbpmjd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEt
ZWFiODI4ZWNhNDViLzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEtZWFiODI4ZWNhNDVi
LzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcErMpFc
B+DRPb2ax+yEGbwpDDQv5DFdWBVdHPCCozpfcQucIyL083spJUEGsT0Xb4OHg2rm
uhfnlJVC3tPsb29QtFYMitCCiYbVfCv6OnHq+yfOxgYo6MtAMUSWJjuqz/7QScsm
rcSlkbmwwp6RQ/mrQCfI8hLW/tZiYUcqqNdUyKtH5XrjGN0PFBZppA+scop9NR9R
gQHOI7Bng7MDygLH/SBdJ47Dx+TkoR/ljTRkLvw4I38OJnJSgzXaGw/JLebGgbdb
bIOKg3/Z1RSSDwjqhrLJoJ/mnwPf+OLP9+aO3Zi+8k5HLzYX1Bu6eGvIKIp+zm8Z
GPTkhCu5NjvhOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:01 2025 by rpki-client