Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File:                     uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier:          ui3T3eq/mr2KYNnfaHFRPKvyhRRsWY4BzQoDWofEGqw=
Subject key identifier:   5E:75:F0:50:5C:FC:DA:C9:74:E2:D7:5A:F0:58:47:41:B4:61:87:7F
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer:       /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial:       0197B6A200551187268EC4F22A0A2F5BB429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number:          0282
Signing time:             Sat 28 Jun 2025 13:02:39 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:39 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:39 +0000
Files and hashes:         1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
                          2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: Y4NzgOBk3plnz06FqczwvyHhdvWDF8b+WPY6Pwbp3qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:00:55:11:87:26:8e:c4:f2:2a:0a:2f:5b:b4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
        Validity
            Not Before: Jun 28 13:02:39 2025 GMT
            Not After : Jun 29 13:02:39 2025 GMT
        Subject: CN=5e75f0505cfcdac974e2d75af0584741b461877f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:19:7c:8c:79:e2:55:53:4d:7d:4e:68:8d:
                    3e:f1:04:70:3d:4c:88:e1:40:66:19:10:d1:76:fa:
                    40:c6:02:4b:25:ff:ef:71:d6:41:a0:cc:25:01:43:
                    07:6f:be:a9:a5:d3:53:d0:57:cd:4d:82:4f:20:66:
                    21:d2:6d:4a:b7:d1:3b:2b:d5:12:46:ca:46:26:26:
                    c7:5a:b0:f9:08:3d:ae:50:aa:c6:57:40:45:f1:e8:
                    bc:6d:4b:e5:db:4b:a0:9d:2f:11:2f:cc:4f:f7:8f:
                    44:a6:23:a3:c9:b7:bb:64:ac:cc:7f:13:59:ab:4f:
                    1b:61:09:97:bb:d5:03:26:26:46:64:9f:d6:a6:0b:
                    a4:4d:8f:24:d4:b0:92:07:0f:0b:89:34:5f:a0:15:
                    c2:f2:72:f1:19:b1:96:e1:c6:c2:a4:90:5d:04:38:
                    eb:53:a1:73:aa:8d:74:26:1b:73:e3:fb:2a:98:32:
                    42:a2:a0:d9:00:40:96:bd:a1:95:00:dd:15:bb:89:
                    2f:26:4e:c8:65:12:52:5a:f2:f9:99:44:15:50:8a:
                    6e:39:98:14:1a:66:98:de:a1:06:0f:a1:7e:de:b8:
                    55:d3:70:36:f0:f3:f2:4b:2a:97:18:14:35:63:67:
                    25:2a:eb:ae:8a:1b:87:72:d7:42:ae:88:14:ef:61:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:F0:50:5C:FC:DA:C9:74:E2:D7:5A:F0:58:47:41:B4:61:87:7F
            X509v3 Authority Key Identifier:
                keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:bb:5e:4c:5a:02:68:77:35:ca:a8:f5:1e:41:4f:d9:06:bd:
         66:99:95:b7:af:5b:56:b6:5a:3d:4e:fa:d3:31:7f:28:eb:f4:
         c9:65:55:f0:ac:fd:12:dd:56:26:34:3f:17:ff:df:3c:7a:78:
         83:4b:62:da:ac:b1:50:e1:de:06:17:db:af:b5:20:44:53:14:
         4c:f6:fa:a8:21:a5:b2:12:eb:61:89:35:c3:7e:2c:cb:a9:37:
         63:fc:07:bd:4a:e7:30:df:ee:b8:53:69:17:0f:38:67:c5:17:
         2b:05:3c:4b:5b:65:cc:e5:91:b8:c1:86:1a:a5:0a:a5:7a:9f:
         6e:f6:69:3e:9d:13:f8:b1:2b:cd:7f:7c:ff:1c:3a:a7:73:e6:
         a2:23:5b:0b:ae:7f:d5:c4:0f:23:86:b1:30:1c:f7:8a:03:3c:
         cc:29:a5:36:4a:97:b1:74:41:96:b5:6f:9e:f6:2a:81:fa:85:
         48:65:6f:2a:06:48:87:f1:14:3b:17:5c:42:d0:40:95:45:82:
         46:32:3f:99:23:6a:c2:39:a3:96:1a:81:25:15:df:8e:28:15:
         90:3b:3c:34:35:41:6c:4c:08:32:9c:35:bf:a7:a4:e7:ca:63:
         f4:9e:87:0e:12:7e:61:d3:2c:f4:28:df:39:51:de:30:bf:e8:
         ab:ba:d9:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogBVEYcmjsTyKgovW7QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1
NTFkMzcwHhcNMjUwNjI4MTMwMjM5WhcNMjUwNjI5MTMwMjM5WjAzMTEwLwYDVQQD
Eyg1ZTc1ZjA1MDVjZmNkYWM5NzRlMmQ3NWFmMDU4NDc0MWI0NjE4NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsQZfIx54lVTTX1OaI0+8QRwPUyI
4UBmGRDRdvpAxgJLJf/vcdZBoMwlAUMHb76ppdNT0FfNTYJPIGYh0m1Kt9E7K9US
RspGJibHWrD5CD2uUKrGV0BF8ei8bUvl20ugnS8RL8xP949EpiOjybe7ZKzMfxNZ
q08bYQmXu9UDJiZGZJ/WpgukTY8k1LCSBw8LiTRfoBXC8nLxGbGW4cbCpJBdBDjr
U6Fzqo10Jhtz4/sqmDJCoqDZAECWvaGVAN0Vu4kvJk7IZRJSWvL5mUQVUIpuOZgU
GmaY3qEGD6F+3rhV03A28PPySyqXGBQ1Y2clKuuuihuHctdCrogU72GDQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF518FBc/NrJdOLXWvBYR0G0YYd/MB8GA1UdIwQY
MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt
YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh
LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrteTFoC
aHc1yqj1HkFP2Qa9ZpmVt69bVrZaPU760zF/KOv0yWVV8Kz9Et1WJjQ/F//fPHp4
g0ti2qyxUOHeBhfbr7UgRFMUTPb6qCGlshLrYYk1w34sy6k3Y/wHvUrnMN/uuFNp
Fw84Z8UXKwU8S1tlzOWRuMGGGqUKpXqfbvZpPp0T+LErzX98/xw6p3PmoiNbC65/
1cQPI4axMBz3igM8zCmlNkqXsXRBlrVvnvYqgfqFSGVvKgZIh/EUOxdcQtBAlUWC
RjI/mSNqwjmjlhqBJRXfjigVkDs8NDVBbEwIMpw1v6ek58pj9J6HDhJ+YdMs9Cjf
OVHeML/oq7rZ+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:07 2025 by rpki-client