Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
File:                     uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json)
Hash identifier:          o+q+WIuE3TUpifKoJX9cFVPnB1wjFFenGgaBAqJOldY=
Subject key identifier:   0A:FF:79:EF:7F:2B:9E:22:E6:DD:DF:55:E7:79:C2:13:9F:BE:D2:C7
Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
Certificate issuer:       /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Certificate serial:       0198D54EB0E3EC47462FF9FB84D1C18B28BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
Manifest number:          08FA
Signing time:             Sat 23 Aug 2025 05:02:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:40 +0000
Files and hashes:         1: TlU9Uk_nAAl7-fcJ5oPvF-WHQ6g.roa (hash: kHfyiCHQk1viwG97rNRumEvrS7xQPQhtjEnkV3NwAaY=)
                          2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: hmee8BlTKCgrJ9Vwul6gUDbe7Xpq9xIWkqH45Uq7Zmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:b0:e3:ec:47:46:2f:f9:fb:84:d1:c1:8b:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
        Validity
            Not Before: Aug 23 05:02:40 2025 GMT
            Not After : Aug 24 05:02:40 2025 GMT
        Subject: CN=0aff79ef7f2b9e22e6dddf55e779c2139fbed2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ff:96:47:ef:b0:e6:06:02:7d:06:a1:da:d9:
                    50:b9:9c:de:51:d4:3d:75:7a:5a:d0:63:7a:44:4a:
                    30:e9:a1:dd:4b:a5:72:a1:11:3c:5c:63:05:19:f2:
                    b8:e3:6a:9f:56:25:9d:09:1a:ab:58:7c:ed:64:73:
                    57:35:40:25:c0:5c:44:92:db:01:6a:d0:c8:31:57:
                    86:55:f3:42:70:2a:9e:50:bf:d2:48:bc:aa:23:63:
                    04:37:3f:62:c6:33:35:a6:81:95:3e:3f:b7:6c:b7:
                    dc:bf:e1:3c:94:9f:db:85:56:5e:73:59:c9:7f:10:
                    3d:8a:70:6b:53:55:51:78:61:8c:fb:23:00:1e:57:
                    09:fb:fd:4d:93:39:cf:7c:e5:fa:58:48:b0:70:1c:
                    22:41:35:7e:05:90:a6:9f:6a:aa:28:3a:c5:73:c5:
                    5a:21:7a:e9:60:18:96:5c:02:d7:3d:46:06:19:be:
                    8d:23:2e:97:6c:67:37:54:4b:1e:52:d8:7e:59:43:
                    51:c1:84:df:64:7a:94:9d:49:3b:a2:cc:5f:bb:52:
                    3d:96:a1:db:8d:81:ad:11:57:f2:d6:74:16:95:ad:
                    77:58:58:03:26:d4:08:63:4d:71:21:17:c0:cb:cf:
                    8c:af:a1:ce:e8:85:74:e8:e9:db:d4:ac:58:5f:18:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FF:79:EF:7F:2B:9E:22:E6:DD:DF:55:E7:79:C2:13:9F:BE:D2:C7
            X509v3 Authority Key Identifier:
                keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:d5:f7:93:11:8f:9e:09:49:15:ca:b1:05:a3:82:9b:39:
         a0:36:63:24:90:bf:e5:43:42:ef:2a:bb:6d:c1:40:57:a5:f4:
         ca:fa:66:7e:a4:83:c2:81:af:1e:06:1a:c5:2c:19:97:4e:a2:
         e6:bc:36:95:91:6c:d5:ec:fb:5c:59:0c:c3:da:62:d6:af:a7:
         f2:e2:96:d8:8a:96:0d:b3:7e:68:00:42:ef:0f:58:a0:d2:97:
         4e:7d:2f:b8:12:9d:1d:ed:44:d4:b1:7a:30:9f:b0:b8:23:30:
         88:9b:4b:92:12:76:1f:7b:4f:f9:1a:0f:70:67:db:50:1f:7e:
         b1:38:90:95:21:db:77:1f:47:19:b6:28:72:4f:44:2f:fc:52:
         f7:63:8c:74:81:25:e5:bb:33:1d:34:82:26:9b:06:0b:d2:87:
         0e:75:b0:64:df:cb:e8:33:f9:55:b7:4a:26:58:7a:49:64:6d:
         5b:1e:da:f6:29:76:f6:f9:fd:bf:7f:b2:6b:c4:a2:6c:ee:21:
         33:c0:28:af:0d:ff:dd:d8:58:e7:33:67:dd:3f:b9:a0:eb:6c:
         7b:c9:18:d0:73:ac:93:4b:19:20:3d:f4:32:be:4c:55:1f:85:
         55:58:74:61:70:73:ba:e2:09:b1:31:20:1d:bc:1d:0f:b8:01:
         1e:d2:8d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrDj7EdGL/n7hNHBiyi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi
NGU3NDMwHhcNMjUwODIzMDUwMjQwWhcNMjUwODI0MDUwMjQwWjAzMTEwLwYDVQQD
EygwYWZmNzllZjdmMmI5ZTIyZTZkZGRmNTVlNzc5YzIxMzlmYmVkMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f+WR++w5gYCfQah2tlQuZzeUdQ9
dXpa0GN6REow6aHdS6VyoRE8XGMFGfK442qfViWdCRqrWHztZHNXNUAlwFxEktsB
atDIMVeGVfNCcCqeUL/SSLyqI2MENz9ixjM1poGVPj+3bLfcv+E8lJ/bhVZec1nJ
fxA9inBrU1VReGGM+yMAHlcJ+/1NkznPfOX6WEiwcBwiQTV+BZCmn2qqKDrFc8Va
IXrpYBiWXALXPUYGGb6NIy6XbGc3VEseUth+WUNRwYTfZHqUnUk7osxfu1I9lqHb
jYGtEVfy1nQWla13WFgDJtQIY01xIRfAy8+Mr6HO6IV06Onb1KxYXxgSFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr/ee9/K54i5t3fVed5whOfvtLHMB8GA1UdIwQY
MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt
N2U4NTlmZjQ2NTFjLzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj
LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+3V95MR
j54JSRXKsQWjgps5oDZjJJC/5UNC7yq7bcFAV6X0yvpmfqSDwoGvHgYaxSwZl06i
5rw2lZFs1ez7XFkMw9pi1q+n8uKW2IqWDbN+aABC7w9YoNKXTn0vuBKdHe1E1LF6
MJ+wuCMwiJtLkhJ2H3tP+RoPcGfbUB9+sTiQlSHbdx9HGbYock9EL/xS92OMdIEl
5bszHTSCJpsGC9KHDnWwZN/L6DP5VbdKJlh6SWRtWx7a9il29vn9v3+ya8SibO4h
M8Aorw3/3dhY5zNn3T+5oOtse8kY0HOsk0sZID30Mr5MVR+FVVh0YXBzuuIJsTEg
HbwdD7gBHtKNKA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:26 2025 by rpki-client