Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File:                     UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier:          b0IeG4sB0tegAnjPLyAaYV0WAWu8xsC/8DxMLV3Y9Sk=
Subject key identifier:   3D:DE:E5:77:D6:CF:4F:3D:7D:C0:48:BE:CC:87:CB:A9:0F:5B:24:B5
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer:       /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial:       0198D84FAE4205B532B95907C272295F7CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number:          81
Signing time:             Sat 23 Aug 2025 19:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:37 +0000
Files and hashes:         1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: zCMNRz9to6Se97RSEpXpmt0b+Y5F0gboWn/3LvwjhJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:ae:42:05:b5:32:b9:59:07:c2:72:29:5f:7c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
        Validity
            Not Before: Aug 23 19:02:37 2025 GMT
            Not After : Aug 24 19:02:37 2025 GMT
        Subject: CN=3ddee577d6cf4f3d7dc048becc87cba90f5b24b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:d1:8d:df:fe:ed:84:11:5d:01:a5:79:0c:
                    51:d4:8b:32:dd:ec:3a:d7:cd:ce:fd:cb:99:71:6e:
                    3c:84:fe:1a:4d:6f:fa:d4:51:7f:71:6c:ae:f4:0b:
                    88:fc:6a:5f:34:64:36:16:cb:b5:33:f2:d9:c0:d7:
                    da:a5:84:a3:c3:a0:97:a1:c1:37:88:8e:ec:57:e9:
                    0c:22:e0:75:79:ca:50:f7:5a:29:ed:de:a8:c4:10:
                    97:20:f6:4b:b7:d8:18:ba:26:c6:cc:fc:fd:a1:c2:
                    77:d0:ae:f0:06:c4:ee:f0:07:a1:77:af:5b:96:9f:
                    7f:01:ca:39:23:e5:fa:94:14:00:00:f4:de:75:98:
                    fc:d0:b0:ec:39:c1:93:1d:2e:87:07:9b:ed:34:4b:
                    f4:d1:79:4d:97:24:76:0e:e3:d1:bf:40:2e:29:6a:
                    01:82:8e:59:a2:09:32:12:1b:9b:91:06:56:2a:72:
                    43:df:45:83:86:8c:d7:dd:3c:c0:5d:09:fe:6c:ae:
                    6d:73:b7:cd:73:a8:41:4e:4e:80:5e:14:bd:d3:2d:
                    59:09:49:ba:d3:0a:7f:eb:49:af:14:94:5a:cc:ad:
                    d1:48:06:ab:b8:d3:8f:f4:b3:f6:58:11:d5:93:24:
                    aa:65:88:0c:29:ed:40:92:35:c3:e0:e7:7f:bf:ef:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:E5:77:D6:CF:4F:3D:7D:C0:48:BE:CC:87:CB:A9:0F:5B:24:B5
            X509v3 Authority Key Identifier:
                keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:90:dd:28:e8:29:9d:60:6b:9d:dc:df:37:a7:f4:ff:7f:5e:
         54:a9:f9:95:da:02:f0:94:5a:80:be:f5:32:d2:8a:6c:6f:a7:
         44:b9:be:ca:9c:46:6a:c2:79:af:bf:f4:f2:2e:af:eb:e7:03:
         7a:14:74:d0:7b:3a:b9:7d:2e:1a:c0:eb:0e:45:a6:8d:df:ff:
         23:68:89:dd:28:d7:72:1a:76:dd:6e:5a:76:a5:9e:7a:b7:33:
         6e:74:7a:f8:02:36:af:e7:72:d7:c8:a3:c6:82:68:64:d1:d2:
         a5:61:26:3e:0b:20:79:9e:65:86:18:1d:54:2a:0e:80:88:ac:
         3d:00:aa:b0:b3:54:b3:6d:a4:d3:28:07:c9:e9:8b:9c:eb:fe:
         55:3a:a1:f2:9f:2a:0e:01:8f:c0:81:c1:ba:bc:67:3c:44:b3:
         86:0f:d7:bf:dd:6e:f7:2a:78:06:24:a9:a0:3a:56:4f:60:06:
         11:89:35:39:05:77:f4:58:a7:99:c7:fe:49:56:ba:22:6a:a5:
         26:83:fa:b2:91:f6:af:59:6c:3d:06:1c:66:c9:5b:09:28:66:
         25:9d:25:57:69:7c:43:b0:b8:bf:74:ce:42:56:46:3f:a9:72:
         36:87:f7:e7:d9:5d:fb:53:7f:65:ef:96:6d:4e:5d:35:cd:19:
         8d:88:19:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT65CBbUyuVkHwnIpX3zvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWM3MTk0NjdjNzVlZjk3MTdiYzYyYjdlZGFlOTAwYmEy
ZjQ2MjUwHhcNMjUwODIzMTkwMjM3WhcNMjUwODI0MTkwMjM3WjAzMTEwLwYDVQQD
EygzZGRlZTU3N2Q2Y2Y0ZjNkN2RjMDQ4YmVjYzg3Y2JhOTBmNWIyNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVjRjd/+7YQRXQGleQxR1Isy3ew6
183O/cuZcW48hP4aTW/61FF/cWyu9AuI/GpfNGQ2Fsu1M/LZwNfapYSjw6CXocE3
iI7sV+kMIuB1ecpQ91op7d6oxBCXIPZLt9gYuibGzPz9ocJ30K7wBsTu8Aehd69b
lp9/Aco5I+X6lBQAAPTedZj80LDsOcGTHS6HB5vtNEv00XlNlyR2DuPRv0AuKWoB
go5ZogkyEhubkQZWKnJD30WDhozX3TzAXQn+bK5tc7fNc6hBTk6AXhS90y1ZCUm6
0wp/60mvFJRazK3RSAaruNOP9LP2WBHVkySqZYgMKe1AkjXD4Od/v+8hEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3e5XfWz089fcBIvsyHy6kPWyS1MB8GA1UdIwQY
MBaAFFGccZRnx175cXvGK37a6QC6L0YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZDIwOWQtMzdkNi00NWU0LTllZTEt
ZTY3ZTc3NTlmOWEwLzEvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lZDIwOWQtMzdkNi00NWU0LTllZTEtZTY3ZTc3NTlmOWEw
LzEvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5DdKOgp
nWBrndzfN6f0/39eVKn5ldoC8JRagL71MtKKbG+nRLm+ypxGasJ5r7/08i6v6+cD
ehR00Hs6uX0uGsDrDkWmjd//I2iJ3SjXchp23W5adqWeerczbnR6+AI2r+dy18ij
xoJoZNHSpWEmPgsgeZ5lhhgdVCoOgIisPQCqsLNUs22k0ygHyemLnOv+VTqh8p8q
DgGPwIHBurxnPESzhg/Xv91u9yp4BiSpoDpWT2AGEYk1OQV39Finmcf+SVa6Imql
JoP6spH2r1lsPQYcZslbCShmJZ0lV2l8Q7C4v3TOQlZGP6lyNof359ld+1N/Ze+W
bU5dNc0ZjYgZRg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:20 2025 by rpki-client