Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          MhESmvOoox00+tB+vDmIsVuRZIUCvePhXDt+CecDsaA=
Subject key identifier:   92:AD:A7:5D:D3:32:EA:70:41:F2:96:BB:6E:DB:3B:4C:59:63:36:43
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       0199FBEC74FD40DEB56DC9A3B27D8DF42FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          13C1
Signing time:             Sun 19 Oct 2025 10:03:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:21 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: Q2ZiWC6zC7DLwlfahrfeAE4W8g5Y+Pg7SDHg3qHt7x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:74:fd:40:de:b5:6d:c9:a3:b2:7d:8d:f4:2f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: Oct 19 10:03:21 2025 GMT
            Not After : Oct 20 10:03:21 2025 GMT
        Subject: CN=92ada75dd332ea7041f296bb6edb3b4c59633643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:a3:09:41:47:fb:89:fd:e3:08:f9:86:d7:
                    70:ae:a6:2a:f2:77:15:a3:80:f2:8f:80:62:5b:3b:
                    7c:49:22:68:71:51:c8:df:1b:e4:d7:2a:c5:d8:9e:
                    f9:eb:36:af:fc:f6:87:74:89:d8:87:d7:67:d7:a0:
                    a3:78:b7:fa:b9:79:aa:91:3f:d5:2b:db:1c:a7:9b:
                    c7:b5:84:cb:8c:ef:a3:39:97:07:c7:4e:4a:e6:36:
                    0e:1f:1d:6e:bf:69:38:80:6e:da:b0:51:5c:20:03:
                    81:e6:06:b1:6b:d9:15:d4:89:d7:18:eb:5c:3c:17:
                    c2:85:39:25:08:92:d2:a0:17:e7:b6:69:98:6b:98:
                    29:ca:0d:15:96:12:40:2e:d6:7a:4f:6b:53:7a:53:
                    dc:50:24:6e:e9:c7:59:27:f9:04:7b:07:68:7d:a5:
                    5c:6c:07:1c:05:49:ec:86:6e:a2:cf:6e:e5:c7:a2:
                    06:cf:a8:b7:39:e9:d6:4b:e3:29:7a:68:44:53:4f:
                    1e:ce:71:45:96:e1:eb:52:c4:e2:ac:29:f2:37:38:
                    de:45:e9:e1:ff:20:bb:7c:b7:8e:67:53:c2:4f:80:
                    21:23:bd:1e:08:56:3d:10:6b:c4:99:1e:33:50:a3:
                    41:9e:9c:e1:38:7a:e1:a6:fe:5a:df:8c:db:d4:c1:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:A7:5D:D3:32:EA:70:41:F2:96:BB:6E:DB:3B:4C:59:63:36:43
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:35:69:de:b4:91:96:79:27:dd:6a:0d:0f:23:89:1c:7f:
         32:bf:d7:6c:b2:9e:7f:0e:d3:53:77:dd:29:29:c5:b9:60:60:
         e1:65:ea:95:0e:b8:6c:c8:24:a2:00:fc:5a:c3:88:38:57:2d:
         aa:93:47:75:03:53:15:6e:03:28:6a:6d:81:dc:1b:52:e1:f6:
         8c:3d:5a:8d:35:5c:58:82:59:d3:7f:c8:e1:c1:7e:44:c9:92:
         5c:60:72:0a:a5:51:f3:b1:3e:e2:f7:95:e1:41:db:d4:b0:eb:
         ed:84:01:df:a5:30:a1:36:47:21:84:ca:58:c6:12:3f:ce:a7:
         e0:cb:8b:be:0f:1a:05:a6:af:17:42:67:b1:a3:9e:3b:db:21:
         41:b4:4a:83:df:bf:bc:df:56:53:0b:78:0e:38:5b:83:22:6c:
         1d:6d:36:bd:ff:58:dc:f0:2e:41:5c:90:eb:e2:5d:ea:49:55:
         d5:09:26:64:1d:9e:bd:41:73:ec:e8:6e:75:92:be:14:4f:e5:
         b3:52:5a:3b:82:94:f6:5e:b7:c1:a4:cd:67:d8:61:6b:2e:70:
         3c:00:ed:a8:9e:8e:ca:49:73:40:16:91:e7:e5:dd:b1:3b:3b:
         31:4d:3b:80:5e:c6:e2:3a:e2:25:cc:55:e9:91:ae:fd:f4:11:
         2d:c4:e2:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77HT9QN61bcmjsn2N9C/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzQ4ZmRlMWIzYWQyMmNmMjhmZTY0MDMwYWUyZmU0ZjIy
Y2I3ZmIwHhcNMjUxMDE5MTAwMzIxWhcNMjUxMDIwMTAwMzIxWjAzMTEwLwYDVQQD
Eyg5MmFkYTc1ZGQzMzJlYTcwNDFmMjk2YmI2ZWRiM2I0YzU5NjMzNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQOjCUFH+4n94wj5htdwrqYq8ncV
o4Dyj4BiWzt8SSJocVHI3xvk1yrF2J756zav/PaHdInYh9dn16CjeLf6uXmqkT/V
K9scp5vHtYTLjO+jOZcHx05K5jYOHx1uv2k4gG7asFFcIAOB5gaxa9kV1InXGOtc
PBfChTklCJLSoBfntmmYa5gpyg0VlhJALtZ6T2tTelPcUCRu6cdZJ/kEewdofaVc
bAccBUnshm6iz27lx6IGz6i3OenWS+MpemhEU08eznFFluHrUsTirCnyNzjeRenh
/yC7fLeOZ1PCT4AhI70eCFY9EGvEmR4zUKNBnpzhOHrhpv5a34zb1MEHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKtp13TMupwQfKWu27bO0xZYzZDMB8GA1UdIwQY
MBaAFLo0j94bOtIs8o/mQDCuL+TyLLf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYt
YTU0NzYwMzZmZjMxLzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYtYTU0NzYwMzZmZjMx
LzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM41ad60
kZZ5J91qDQ8jiRx/Mr/XbLKefw7TU3fdKSnFuWBg4WXqlQ64bMgkogD8WsOIOFct
qpNHdQNTFW4DKGptgdwbUuH2jD1ajTVcWIJZ03/I4cF+RMmSXGByCqVR87E+4veV
4UHb1LDr7YQB36UwoTZHIYTKWMYSP86n4MuLvg8aBaavF0JnsaOeO9shQbRKg9+/
vN9WUwt4DjhbgyJsHW02vf9Y3PAuQVyQ6+Jd6klV1QkmZB2evUFz7OhudZK+FE/l
s1JaO4KU9l63waTNZ9hhay5wPADtqJ6OyklzQBaR5+XdsTs7MU07gF7G4jriJcxV
6ZGu/fQRLcTipQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:52 2025 by rpki-client