Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File:                     uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier:          B/9c6reNdYnY8Hue4XPGV9iVYVII0FuC7Qu37ksLJA0=
Subject key identifier:   2A:9F:2C:8E:3C:62:E2:4A:BF:CC:6E:48:A0:75:E6:DC:A9:6A:37:C6
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer:       /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial:       0198D54DDC99641AEBAFA3B750ACD86E4836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number:          12FA
Signing time:             Sat 23 Aug 2025 05:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:46 +0000
Files and hashes:         1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
                          2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: w9stQdIHhlh+MeuAXCwKdnjwLF+oGnwoQOie/uzV1y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:dc:99:64:1a:eb:af:a3:b7:50:ac:d8:6e:48:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
        Validity
            Not Before: Aug 23 05:01:46 2025 GMT
            Not After : Aug 24 05:01:46 2025 GMT
        Subject: CN=2a9f2c8e3c62e24abfcc6e48a075e6dca96a37c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:ff:07:bc:21:ac:ce:d1:72:9f:8e:d5:d9:
                    cf:2f:cc:45:96:45:03:0e:3e:48:8c:20:b8:76:9f:
                    c9:bf:08:df:fc:c0:a9:e7:eb:a0:29:e1:7b:32:2e:
                    55:43:f6:8d:f9:d3:ff:0f:81:ca:bc:91:db:b4:4f:
                    ec:58:2c:f6:f7:e0:6c:a2:df:19:92:6a:09:f9:bc:
                    d1:1a:08:68:6c:73:5f:17:ce:55:df:e9:02:fe:57:
                    d7:19:f1:e6:95:24:2d:b7:6c:9c:49:9e:63:4e:b9:
                    e6:fa:ea:6e:cf:25:c9:ad:5f:e2:08:9a:68:0e:db:
                    64:a8:27:09:d8:70:57:80:01:0a:fd:b7:ed:03:3d:
                    41:5f:c1:59:c2:96:f4:d0:ca:a4:b2:7b:7f:72:39:
                    0c:a3:b1:50:e7:11:ae:be:1c:e0:d2:8b:5f:e4:69:
                    c9:92:7e:34:7a:bc:fd:c0:12:d6:11:ba:1f:8d:20:
                    d0:44:0d:d3:9b:d9:5b:ef:2f:8a:2f:10:ac:32:b4:
                    ad:5a:e7:9d:9b:44:fa:af:7e:6d:3d:4c:5c:c1:61:
                    1d:a2:c1:e1:42:fc:bb:86:d8:72:03:67:7f:42:89:
                    49:6c:bf:04:71:fd:f7:65:3e:22:ce:d6:e6:71:03:
                    b5:95:6c:6c:bb:d3:e2:db:e2:01:31:5e:25:34:4a:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9F:2C:8E:3C:62:E2:4A:BF:CC:6E:48:A0:75:E6:DC:A9:6A:37:C6
            X509v3 Authority Key Identifier:
                keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ed:21:ee:04:ef:bd:c0:23:a9:df:df:e4:25:96:86:49:1e:
         72:fb:0d:2a:82:e7:8b:de:b4:d3:e9:45:a7:20:c9:ef:0b:ca:
         c8:a0:2d:bc:da:2b:c1:8d:8c:9a:82:52:3e:ac:4e:99:c4:ff:
         58:2f:65:68:4b:ca:b6:48:99:9f:60:97:b7:c7:f1:9b:dd:1e:
         fc:c5:f3:28:f2:44:56:84:09:6e:c8:37:2c:c6:5d:c8:3a:b2:
         f7:a0:b8:f3:54:66:5b:a9:cc:36:1d:e6:db:3c:e0:17:8b:c1:
         85:09:03:c9:71:e4:41:de:15:f7:3d:c0:31:e3:c0:59:e0:50:
         0c:5e:52:32:ee:b7:fc:a6:b4:7b:a0:bb:ea:c2:0e:14:ea:ee:
         c5:5b:27:f5:a1:56:73:32:e0:03:ba:22:28:74:5d:e9:f3:3f:
         b3:99:b9:d0:02:85:08:9e:7c:33:a0:77:c7:95:3c:40:56:65:
         99:1d:8d:9c:13:e0:ea:ca:86:d5:e2:c6:f5:1d:b2:db:d3:f8:
         c3:4e:be:d0:59:6e:59:7b:2d:ce:75:4a:f8:05:e2:4b:87:7f:
         0d:d9:83:c7:32:f2:b0:55:3f:b2:3f:99:08:91:58:a4:7a:3e:
         02:1c:d1:42:a7:cd:0c:cf:8c:f1:41:53:41:90:a3:18:40:8a:
         fe:fd:8e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTdyZZBrrr6O3UKzYbkg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhmMjNkMGM0OGM2MmUxOGUyOGY1NjBjYzkxNTk4OTNk
NGU0MmYwHhcNMjUwODIzMDUwMTQ2WhcNMjUwODI0MDUwMTQ2WjAzMTEwLwYDVQQD
EygyYTlmMmM4ZTNjNjJlMjRhYmZjYzZlNDhhMDc1ZTZkY2E5NmEzN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqL/B7whrM7Rcp+O1dnPL8xFlkUD
Dj5IjCC4dp/Jvwjf/MCp5+ugKeF7Mi5VQ/aN+dP/D4HKvJHbtE/sWCz29+Bsot8Z
kmoJ+bzRGghobHNfF85V3+kC/lfXGfHmlSQtt2ycSZ5jTrnm+upuzyXJrV/iCJpo
DttkqCcJ2HBXgAEK/bftAz1BX8FZwpb00Mqksnt/cjkMo7FQ5xGuvhzg0otf5GnJ
kn40erz9wBLWEbofjSDQRA3Tm9lb7y+KLxCsMrStWuedm0T6r35tPUxcwWEdosHh
Qvy7hthyA2d/QolJbL8Ecf33ZT4iztbmcQO1lWxsu9Pi2+IBMV4lNEpPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqfLI48YuJKv8xuSKB15typajfGMB8GA1UdIwQY
MBaAFLjI8j0MSMYuGOKPVgzJFZiT1OQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEt
NDI0ODFhNjIxMjNjLzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEtNDI0ODFhNjIxMjNj
LzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO0h7gTv
vcAjqd/f5CWWhkkecvsNKoLni9600+lFpyDJ7wvKyKAtvNorwY2MmoJSPqxOmcT/
WC9laEvKtkiZn2CXt8fxm90e/MXzKPJEVoQJbsg3LMZdyDqy96C481RmW6nMNh3m
2zzgF4vBhQkDyXHkQd4V9z3AMePAWeBQDF5SMu63/Ka0e6C76sIOFOruxVsn9aFW
czLgA7oiKHRd6fM/s5m50AKFCJ58M6B3x5U8QFZlmR2NnBPg6sqG1eLG9R2y29P4
w06+0FluWXstznVK+AXiS4d/DdmDxzLysFU/sj+ZCJFYpHo+AhzRQqfNDM+M8UFT
QZCjGECK/v2Org==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:34 2025 by rpki-client