Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
File:                     UiOZwnibGlUE-BZxz_IgwE6vWfE.mft (raw, json)
Hash identifier:          8HqgNbIEW6Gccxid8FSxs3aKpA+9jzzAicZ6I5ssldY=
Subject key identifier:   34:63:15:65:91:E7:78:65:EA:EA:A2:39:AC:7D:01:2C:E9:90:A1:0B
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       0197B7B3881F3E761368B0A789FE9D6161F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
Manifest number:          03CA
Signing time:             Sat 28 Jun 2025 18:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:25 +0000
Files and hashes:         1: 3wonzEuv12MMdqoQbAGhDT3YzPc.roa (hash: dajuIMLWo+SZXmFUF060/f20zcAO9itEEMxKmJRUhMM=)
                          2: Fu6U86lHSXot6auCvOJjkcO_3lU.roa (hash: 81J22UZIBjq2zoACe1x9LIbFai428I4/vjRJ8Aat6TI=)
                          3: SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa (hash: R2OQhDOkjCw4D4/knxrU8/GjfDnxF4+KIOHcbLgJk/0=)
                          4: U_ILU5oPE2-q5-3kf6Hi6fdungg.roa (hash: DMhgoBAGxtdMHwCNE+yJXSK5/lKBz1bY2a8Z9IrOZZs=)
                          5: UiOZwnibGlUE-BZxz_IgwE6vWfE.crl (hash: yxWmmPk4csJhjEZ986ji9vwYkWyxDCIPYqLyEaEoDKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:88:1f:3e:76:13:68:b0:a7:89:fe:9d:61:61:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: Jun 28 18:01:25 2025 GMT
            Not After : Jun 29 18:01:25 2025 GMT
        Subject: CN=3463156591e77865eaeaa239ac7d012ce990a10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:a8:e8:3c:ab:80:7f:1c:75:cd:5a:69:f5:
                    0b:fe:ce:f0:52:b6:3f:f4:60:75:8b:23:14:af:c7:
                    e1:52:a0:b9:eb:31:e5:36:89:31:46:1f:3e:4a:de:
                    9a:29:dc:42:f4:e4:48:60:ae:56:16:8b:f0:0c:10:
                    eb:21:4d:7c:c4:5e:e6:5b:41:4a:0f:67:6f:ab:9e:
                    f0:5a:09:f9:df:8e:dd:0a:8c:ec:53:c5:ec:67:dd:
                    b2:6b:f4:e8:04:01:6f:d7:39:49:06:9b:00:06:f5:
                    26:f8:d1:46:7a:49:d8:4d:28:e6:0d:f3:9c:11:01:
                    e3:8b:c2:b2:7e:95:11:af:08:5d:14:d0:74:fc:19:
                    ee:cf:5d:60:db:8d:c0:56:fb:21:03:4e:5a:52:ce:
                    8f:1a:a8:0b:f1:d2:d0:d8:c8:5a:c8:fe:35:a9:4e:
                    74:48:f1:fc:c3:0e:7a:3a:7b:f5:a7:88:9b:a4:84:
                    8f:6d:85:a0:ec:a2:fc:71:f8:9d:85:14:fe:e8:e2:
                    03:f1:ba:61:d6:2f:92:27:aa:82:e6:98:55:95:94:
                    a7:d9:d9:98:56:5f:f0:b4:b3:46:f0:d4:5b:ab:41:
                    f0:d9:a6:57:a5:2c:3a:14:57:65:59:b3:b9:26:1f:
                    92:a2:82:c8:11:a5:fd:19:b5:a5:ef:dc:a0:ed:9e:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:63:15:65:91:E7:78:65:EA:EA:A2:39:AC:7D:01:2C:E9:90:A1:0B
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:08:02:ba:81:2e:f1:59:ed:12:b0:48:7c:e6:65:40:33:
         4a:18:96:e8:58:4d:85:db:df:dd:57:b0:fa:f7:f5:aa:b4:58:
         2b:b8:b1:42:b5:03:eb:82:ba:4c:b8:0c:cb:cb:88:d3:e2:09:
         a3:a7:23:f1:f0:2b:89:7f:b1:c0:c6:3a:40:16:31:69:a1:32:
         a3:e8:f3:c6:21:92:d4:0f:79:5d:c9:47:29:71:a4:64:d1:65:
         e1:6a:5f:b7:a1:8e:1a:5b:ff:f5:73:df:3d:17:6a:56:50:55:
         8b:7f:ab:44:29:ed:23:86:7e:19:be:50:f5:32:f5:f0:cf:a3:
         38:e0:dd:a9:b6:09:7e:d9:6d:39:8d:bd:5d:a6:5f:34:8d:80:
         9b:44:85:e1:eb:89:b3:b0:92:bd:85:fe:47:b1:cb:81:5a:99:
         c1:8c:99:00:b1:9d:2e:7a:5b:6c:ba:10:68:31:1b:36:80:da:
         f1:70:8b:1d:18:39:91:42:1a:98:90:a2:37:f0:4f:cf:f6:bb:
         28:78:b4:4e:bb:df:d9:c6:2d:0f:d9:53:c0:ed:20:f4:eb:2e:
         7e:07:ea:6c:d8:ea:2e:89:d0:5c:97:22:3a:e5:13:dc:fc:f1:
         12:34:cc:e2:09:21:b0:03:3e:fb:0e:93:fd:d8:89:89:cf:f2:
         e6:38:9c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s4gfPnYTaLCnif6dYWH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjM5OWMyNzg5YjFhNTUwNGY4MTY3MWNmZjIyMGMwNGVh
ZjU5ZjEwHhcNMjUwNjI4MTgwMTI1WhcNMjUwNjI5MTgwMTI1WjAzMTEwLwYDVQQD
EygzNDYzMTU2NTkxZTc3ODY1ZWFlYWEyMzlhYzdkMDEyY2U5OTBhMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukio6DyrgH8cdc1aafUL/s7wUrY/
9GB1iyMUr8fhUqC56zHlNokxRh8+St6aKdxC9ORIYK5WFovwDBDrIU18xF7mW0FK
D2dvq57wWgn5347dCozsU8XsZ92ya/ToBAFv1zlJBpsABvUm+NFGeknYTSjmDfOc
EQHji8KyfpURrwhdFNB0/Bnuz11g243AVvshA05aUs6PGqgL8dLQ2MhayP41qU50
SPH8ww56Onv1p4ibpISPbYWg7KL8cfidhRT+6OID8bph1i+SJ6qC5phVlZSn2dmY
Vl/wtLNG8NRbq0Hw2aZXpSw6FFdlWbO5Jh+SooLIEaX9GbWl79yg7Z6+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRjFWWR53hl6uqiOax9ASzpkKELMB8GA1UdIwQY
MBaAFFIjmcJ4mxpVBPgWcc/yIMBOr1nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAt
ZDVkNTFkMzc5NDlkLzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAtZDVkNTFkMzc5NDlk
LzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqMIArqB
LvFZ7RKwSHzmZUAzShiW6FhNhdvf3Vew+vf1qrRYK7ixQrUD64K6TLgMy8uI0+IJ
o6cj8fAriX+xwMY6QBYxaaEyo+jzxiGS1A95XclHKXGkZNFl4Wpft6GOGlv/9XPf
PRdqVlBVi3+rRCntI4Z+Gb5Q9TL18M+jOODdqbYJftltOY29XaZfNI2Am0SF4euJ
s7CSvYX+R7HLgVqZwYyZALGdLnpbbLoQaDEbNoDa8XCLHRg5kUIamJCiN/BPz/a7
KHi0Trvf2cYtD9lTwO0g9OsufgfqbNjqLonQXJciOuUT3PzxEjTM4gkhsAM++w6T
/diJic/y5jicgw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:36 2025 by rpki-client