Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          OzwW0Pyc5w383p8k4MQOzhvAMm103zWim9qavNugHrQ=
Subject key identifier:   19:B4:84:60:31:3F:54:FF:13:CD:7D:C3:FF:3D:CB:E3:BE:EC:27:08
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       0199FBEBB86A15FCE9558393376D16BFD5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          14CB
Signing time:             Sun 19 Oct 2025 10:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:33 +0000
Files and hashes:         1: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: Sv92P3vgJfYIAQOjLta0nT9/XLLcL/RHmFASy/Aaalc=)
                          2: Xbs_--8RTj7NVNdnHjguAeVIjoo.roa (hash: wMCRs2Eg0y2oiiX2U9OgxEoMnX9Jd9Ptutf57Q4oqbI=)
                          3: dnwf0B7ghFQhubHpkV_b6aRmfaU.roa (hash: /ZpiVEXwKVsBxeMoy/4YPuoiF3m8c7Z0eTdmKuo2JTI=)
                          4: hhpnOw16P4QOaI6Yj27PCQwfLVA.roa (hash: ig3aG6IluBzRhUfWEo3gM6opkDOech5g/k8SP7esT2A=)
                          5: t5-UWdTdiMSI20SfoWThGHmUmkI.roa (hash: u89CpCdmqr7rKA71HZJcUjE6g736IrSgJ+2hOF705ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b8:6a:15:fc:e9:55:83:93:37:6d:16:bf:d5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Oct 19 10:02:33 2025 GMT
            Not After : Oct 20 10:02:33 2025 GMT
        Subject: CN=19b48460313f54ff13cd7dc3ff3dcbe3beec2708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:3b:42:ae:c9:bb:3e:61:88:0a:7d:fb:83:
                    3e:7e:50:2c:ed:91:3f:89:69:13:31:f6:f4:a5:df:
                    41:ee:44:0d:a4:c2:b1:ab:49:3d:3a:50:c4:07:77:
                    cd:04:7b:27:dc:65:fd:72:f0:b9:12:7e:e7:1b:02:
                    5a:fe:00:4b:67:8c:33:bd:d3:08:2f:3b:ee:24:73:
                    2a:f3:57:bc:21:82:ee:67:92:f0:28:9f:28:60:ce:
                    d6:aa:59:f8:5f:6d:ae:d9:cf:fa:5f:f6:18:4f:ff:
                    0e:6e:e6:af:45:65:45:9e:d8:5b:10:16:67:54:91:
                    af:1a:9f:cd:6c:b5:62:96:a7:b5:74:de:75:b9:a7:
                    b4:b7:dd:d8:70:bd:e8:df:de:49:55:34:86:39:e4:
                    45:64:39:5a:8f:5e:81:f3:11:d4:17:ab:35:d7:13:
                    11:04:d8:0b:8e:8a:e2:62:e6:8e:c9:a9:9e:fd:0f:
                    a7:49:9b:b2:17:b1:2b:93:81:54:c9:43:37:f3:b8:
                    41:53:95:62:70:3a:f6:7a:49:9c:28:4f:83:b3:0a:
                    d4:b6:ab:9b:93:0c:ad:c9:b4:70:d8:1b:36:33:71:
                    c1:77:7a:69:06:1d:fb:e2:03:ff:b3:87:26:5c:a0:
                    39:e5:0d:c4:7e:46:b5:03:52:e7:7b:e4:c6:55:53:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B4:84:60:31:3F:54:FF:13:CD:7D:C3:FF:3D:CB:E3:BE:EC:27:08
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:ad:44:99:10:48:c7:72:cc:74:52:5d:7f:b6:48:4f:95:74:
         d9:be:73:c6:2a:05:61:7e:ba:3a:5d:50:b2:a1:d6:fc:38:d3:
         1b:0d:55:b7:85:93:77:1e:d2:fb:f5:6a:7c:f8:b9:2d:9e:ef:
         f8:fa:a7:7e:dd:27:61:b7:9f:3d:02:20:86:9f:8d:f8:7b:bc:
         a8:65:b8:97:1d:17:17:3f:e2:99:93:4b:c4:19:f6:db:1d:95:
         22:2e:7c:2e:42:90:90:2b:b7:14:d9:f9:34:11:20:86:74:a8:
         91:6f:9f:50:cb:ea:8c:5a:d5:33:53:62:46:b1:4c:23:a4:15:
         d3:b3:93:7f:8b:6b:6f:12:66:aa:21:16:11:d9:24:eb:ff:06:
         45:ac:49:c2:d0:b0:bf:5d:27:78:52:33:b7:1d:b2:5b:bd:ca:
         a7:52:a4:ab:73:20:2b:90:e8:ea:9e:a5:6b:f0:78:f6:95:b8:
         58:93:eb:0a:3c:09:71:db:5f:09:20:e8:3d:a7:05:32:d8:94:
         99:51:1a:f0:e8:71:a2:98:1d:24:e5:ea:be:77:d9:18:2f:d0:
         f9:86:33:aa:51:23:e1:70:6c:d1:bd:87:5e:47:da:e3:d9:2d:
         b9:35:8d:ed:c3:b6:53:65:aa:76:bf:e8:e8:53:c1:29:22:d8:
         85:93:a5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767hqFfzpVYOTN20Wv9XJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1
MjJjNzYwHhcNMjUxMDE5MTAwMjMzWhcNMjUxMDIwMTAwMjMzWjAzMTEwLwYDVQQD
EygxOWI0ODQ2MDMxM2Y1NGZmMTNjZDdkYzNmZjNkY2JlM2JlZWMyNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vE7Qq7Juz5hiAp9+4M+flAs7ZE/
iWkTMfb0pd9B7kQNpMKxq0k9OlDEB3fNBHsn3GX9cvC5En7nGwJa/gBLZ4wzvdMI
LzvuJHMq81e8IYLuZ5LwKJ8oYM7Wqln4X22u2c/6X/YYT/8ObuavRWVFnthbEBZn
VJGvGp/NbLVilqe1dN51uae0t93YcL3o395JVTSGOeRFZDlaj16B8xHUF6s11xMR
BNgLjoriYuaOyame/Q+nSZuyF7Erk4FUyUM387hBU5VicDr2ekmcKE+DswrUtqub
kwytybRw2Bs2M3HBd3ppBh374gP/s4cmXKA55Q3Efka1A1Lne+TGVVMk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm0hGAxP1T/E819w/89y+O+7CcIMB8GA1UdIwQY
MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It
MmY1MWVjZDFhYTBlLzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl
LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAya1EmRBI
x3LMdFJdf7ZIT5V02b5zxioFYX66Ol1QsqHW/DjTGw1Vt4WTdx7S+/VqfPi5LZ7v
+Pqnft0nYbefPQIghp+N+Hu8qGW4lx0XFz/imZNLxBn22x2VIi58LkKQkCu3FNn5
NBEghnSokW+fUMvqjFrVM1NiRrFMI6QV07OTf4trbxJmqiEWEdkk6/8GRaxJwtCw
v10neFIztx2yW73Kp1Kkq3MgK5Do6p6la/B49pW4WJPrCjwJcdtfCSDoPacFMtiU
mVEa8OhxopgdJOXqvnfZGC/Q+YYzqlEj4XBs0b2HXkfa49ktuTWN7cO2U2Wqdr/o
6FPBKSLYhZOlOg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:22 2025 by rpki-client