Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File:                     uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier:          VyTho6W7mcwf/ai+rd1FmpcP8AliGM3+sL4Hq8J/0DM=
Subject key identifier:   62:FD:AB:75:18:86:1D:0B:81:1D:04:80:D3:CB:FB:E7:F4:5A:11:40
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer:       /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial:       0196BB2431176AD1F2860F18B50DA526B8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number:          025D
Signing time:             Sat 10 May 2025 17:00:33 +0000
Manifest this update:     Sat 10 May 2025 17:00:33 +0000
Manifest next update:     Sun 11 May 2025 17:00:33 +0000
Files and hashes:         1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
                          2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
                          3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
                          4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
                          5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: wL4NDKuBtUHH67GCk7VgG5K2N4NfAaukoO1s552bbcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:31:17:6a:d1:f2:86:0f:18:b5:0d:a5:26:b8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
        Validity
            Not Before: May 10 17:00:33 2025 GMT
            Not After : May 11 17:00:33 2025 GMT
        Subject: CN=62fdab7518861d0b811d0480d3cbfbe7f45a1140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:fb:16:03:36:66:25:7e:be:d4:54:3b:e0:
                    6b:ed:c5:5c:12:b5:a2:05:f9:7b:78:9d:c6:2a:bf:
                    a4:75:dd:76:e6:64:03:35:6c:87:48:f6:b1:1e:b5:
                    16:fb:ea:b0:11:bb:31:9f:44:1e:ca:34:f7:78:8c:
                    7a:76:a4:0e:38:4b:f8:0f:26:a1:f8:f0:17:ad:7e:
                    fe:d9:ca:1e:f0:cd:0a:84:78:e2:93:02:b0:ab:70:
                    4f:d0:f6:03:5a:da:81:d0:03:11:4b:c2:03:ad:a3:
                    db:cf:51:6f:16:69:88:ae:14:7b:94:75:71:fb:0a:
                    c2:19:77:25:f3:e8:5b:47:7b:3e:18:ec:3b:85:8b:
                    ca:5b:ec:16:0e:d8:10:82:7e:44:10:a8:de:37:6b:
                    1f:3d:11:42:bc:7b:33:c3:14:df:e1:90:2e:d1:a2:
                    58:8b:a4:36:f9:52:06:ad:af:78:ff:6e:64:98:9c:
                    0e:b8:f3:4d:18:d8:a5:aa:26:71:38:e6:0f:d8:f2:
                    17:62:03:2a:15:d2:01:d9:e2:8a:7f:c6:2b:68:ce:
                    b4:6e:c8:b2:ae:af:9f:1f:83:ff:89:32:57:45:1a:
                    32:14:88:a6:47:c0:3e:1f:55:8f:fc:5e:ee:01:0d:
                    76:71:59:90:95:cb:4d:a3:af:2c:8a:93:01:b0:1d:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FD:AB:75:18:86:1D:0B:81:1D:04:80:D3:CB:FB:E7:F4:5A:11:40
            X509v3 Authority Key Identifier:
                keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:24:de:e9:4c:ba:e0:28:87:d7:1c:a2:d4:37:45:0b:2d:
         60:48:7f:76:0e:21:95:0b:b5:93:96:d1:10:2f:c2:ca:74:62:
         c0:74:0a:bb:03:33:cf:8e:0b:04:c5:c3:1b:dd:5d:0f:20:13:
         ac:65:e8:84:88:dc:61:81:a7:c4:f8:7e:eb:cd:16:38:bb:35:
         d4:be:e3:38:1f:26:2e:4b:12:92:aa:69:76:64:a8:5a:2a:a0:
         01:bb:80:7b:a4:42:ca:3e:b8:c6:c6:ad:d1:51:d7:76:68:45:
         c7:5a:26:a6:24:89:5e:bf:da:62:5d:42:ca:b8:1e:5f:1c:2d:
         26:54:c4:dc:ae:ec:62:d7:de:41:37:13:53:97:38:dd:ca:fa:
         7d:81:4d:67:03:77:68:a7:72:99:bb:39:ca:ae:ef:e2:30:47:
         b5:d9:c6:fb:44:c6:e7:05:7a:bf:95:27:35:de:79:fd:a7:e0:
         e7:08:77:14:24:f4:6b:42:27:fa:57:f6:87:fb:43:a2:4e:65:
         77:ec:8f:63:7a:62:32:c9:38:8b:3f:5e:b9:62:4c:ba:a7:da:
         39:58:05:c0:38:d9:86:3e:fe:b1:44:c7:d1:23:00:d3:a7:85:
         de:a2:6c:c3:e3:9f:88:f2:0b:32:ca:d5:a4:5f:84:9b:79:c7:
         a5:09:c5:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7JDEXatHyhg8YtQ2lJrjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz
ODg1ZTcwHhcNMjUwNTEwMTcwMDMzWhcNMjUwNTExMTcwMDMzWjAzMTEwLwYDVQQD
Eyg2MmZkYWI3NTE4ODYxZDBiODExZDA0ODBkM2NiZmJlN2Y0NWExMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfH7FgM2ZiV+vtRUO+Br7cVcErWi
Bfl7eJ3GKr+kdd125mQDNWyHSPaxHrUW++qwEbsxn0QeyjT3eIx6dqQOOEv4Dyah
+PAXrX7+2coe8M0KhHjikwKwq3BP0PYDWtqB0AMRS8IDraPbz1FvFmmIrhR7lHVx
+wrCGXcl8+hbR3s+GOw7hYvKW+wWDtgQgn5EEKjeN2sfPRFCvHszwxTf4ZAu0aJY
i6Q2+VIGra94/25kmJwOuPNNGNilqiZxOOYP2PIXYgMqFdIB2eKKf8YraM60bsiy
rq+fH4P/iTJXRRoyFIimR8A+H1WP/F7uAQ12cVmQlctNo68sipMBsB1yrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGL9q3UYhh0LgR0EgNPL++f0WhFAMB8GA1UdIwQY
MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct
OGE5NmYwM2JjNjE3LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3
LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHwk3ulM
uuAoh9ccotQ3RQstYEh/dg4hlQu1k5bREC/CynRiwHQKuwMzz44LBMXDG91dDyAT
rGXohIjcYYGnxPh+680WOLs11L7jOB8mLksSkqppdmSoWiqgAbuAe6RCyj64xsat
0VHXdmhFx1ompiSJXr/aYl1CyrgeXxwtJlTE3K7sYtfeQTcTU5c43cr6fYFNZwN3
aKdymbs5yq7v4jBHtdnG+0TG5wV6v5UnNd55/afg5wh3FCT0a0In+lf2h/tDok5l
d+yPY3piMsk4iz9euWJMuqfaOVgFwDjZhj7+sUTH0SMA06eF3qJsw+OfiPILMsrV
pF+Em3nHpQnFgw==
-----END CERTIFICATE-----
Generated at Sat May 10 21:55:09 2025 by rpki-client