Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File:                     uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier:          JE6a2IpkjRmLn6C/+Axx1gsBgWX+VSohXKlv860qsQM=
Subject key identifier:   6B:E2:7F:34:49:FC:49:70:85:8A:EB:81:37:70:A0:98:3F:8B:5D:89
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer:       /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial:       0198D583428569CEB8D9F0B553F522BE9350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number:          1571
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: +P2eZKm7zCwdw1UaQx5CD3s4WFrKjuJMiHeXsZWMK5Y=)
                          2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:42:85:69:ce:b8:d9:f0:b5:53:f5:22:be:93:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=6be27f3449fc4970858aeb813770a0983f8b5d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:5a:68:b2:38:01:04:61:b2:ec:ed:c3:a7:
                    e7:bc:4f:95:1f:87:21:a5:ce:cc:a4:0e:51:73:a7:
                    e9:b9:35:64:04:5f:21:d7:f7:cb:77:6b:c1:b2:73:
                    14:a4:1d:78:33:cb:84:da:f4:2b:c1:ec:c8:7b:da:
                    be:36:41:65:0b:d5:7c:1a:1a:1e:27:af:84:1c:32:
                    d7:e7:d3:cf:d5:39:0e:a2:85:59:f2:67:73:8f:1c:
                    0f:b6:db:ac:58:76:41:a2:40:0c:bd:19:2c:ab:22:
                    5e:44:a0:7a:2b:6c:31:48:2a:a8:99:be:77:c4:d4:
                    a4:f2:ca:b7:dd:97:10:0f:7b:a5:95:5e:d6:f7:b6:
                    73:e1:8b:50:fe:b2:8a:ac:79:c4:ff:66:a4:85:d9:
                    df:50:18:c5:aa:fb:b7:05:ea:de:72:24:e3:d8:e6:
                    16:19:69:ee:55:b0:fd:00:08:60:b2:73:3d:35:da:
                    e0:98:02:cf:12:ec:d3:d4:42:c6:f7:eb:0e:01:8f:
                    9c:ae:7c:91:08:de:e2:99:33:f7:e2:01:6c:08:9e:
                    57:2f:52:00:93:db:79:5e:8b:41:5d:8b:c8:ac:59:
                    26:00:af:93:fa:d0:c8:c7:eb:50:07:79:4c:e6:71:
                    67:44:02:a9:20:84:e3:22:03:b0:85:1a:c6:d5:db:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:7F:34:49:FC:49:70:85:8A:EB:81:37:70:A0:98:3F:8B:5D:89
            X509v3 Authority Key Identifier:
                keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:53:ed:39:07:bf:c8:6e:37:4b:5f:3b:11:b5:fe:ee:bd:
         53:e9:4f:dd:71:99:65:58:97:9b:96:10:c3:0b:c8:1f:2a:5a:
         7b:75:ec:2d:72:78:a4:4c:d7:92:4c:24:4c:de:b6:dc:fd:24:
         72:65:5e:0b:9c:53:1f:02:22:86:08:b2:34:cc:08:51:35:6f:
         95:cc:48:90:df:7b:ce:cf:e8:bd:fb:5e:99:42:aa:fd:5a:ff:
         66:48:02:45:35:b4:3d:0a:82:2a:c1:f1:10:5f:5f:98:13:f2:
         88:ff:46:cf:a4:cb:5e:4e:0c:45:fe:18:08:49:54:78:d5:e1:
         38:04:4d:8c:c1:88:48:38:5b:e1:16:81:fe:62:9d:13:e0:4e:
         09:ca:2a:c6:cc:eb:2f:1b:dc:cb:42:f9:96:c4:a7:85:f9:51:
         0b:5b:d9:80:06:93:21:88:25:d3:06:14:e5:37:a7:d5:8d:7c:
         d0:92:89:ce:4e:00:16:13:20:ca:60:03:a3:a0:98:56:85:69:
         10:78:70:97:db:0e:ea:53:c7:42:18:47:c1:a2:1a:53:25:cc:
         a3:8f:60:31:ca:eb:cc:5a:2f:71:4b:c0:16:67:2a:dd:a7:dd:
         55:62:7e:85:5f:57:f7:89:bc:16:85:78:3e:29:21:8f:a3:ec:
         5b:d0:b6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg0KFac642fC1U/UivpNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMmNmMWVkMTA1YzVjMWRjNTI3YmNkMGYxNDlmZTk0NDll
YmQzMjYwHhcNMjUwODIzMDYwMDA1WhcNMjUwODI0MDYwMDA1WjAzMTEwLwYDVQQD
Eyg2YmUyN2YzNDQ5ZmM0OTcwODU4YWViODEzNzcwYTA5ODNmOGI1ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pRaaLI4AQRhsuztw6fnvE+VH4ch
pc7MpA5Rc6fpuTVkBF8h1/fLd2vBsnMUpB14M8uE2vQrwezIe9q+NkFlC9V8Ghoe
J6+EHDLX59PP1TkOooVZ8mdzjxwPttusWHZBokAMvRksqyJeRKB6K2wxSCqomb53
xNSk8sq33ZcQD3ullV7W97Zz4YtQ/rKKrHnE/2akhdnfUBjFqvu3BereciTj2OYW
GWnuVbD9AAhgsnM9NdrgmALPEuzT1ELG9+sOAY+crnyRCN7imTP34gFsCJ5XL1IA
k9t5XotBXYvIrFkmAK+T+tDIx+tQB3lM5nFnRAKpIITjIgOwhRrG1duUBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvifzRJ/ElwhYrrgTdwoJg/i12JMB8GA1UdIwQY
MBaAFLss8e0QXFwdxSe80PFJ/pRJ69MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMt
NzUxYzc0ZTY3ZDM4LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMtNzUxYzc0ZTY3ZDM4
LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWl9T7TkH
v8huN0tfOxG1/u69U+lP3XGZZViXm5YQwwvIHypae3XsLXJ4pEzXkkwkTN623P0k
cmVeC5xTHwIihgiyNMwIUTVvlcxIkN97zs/ovftemUKq/Vr/ZkgCRTW0PQqCKsHx
EF9fmBPyiP9Gz6TLXk4MRf4YCElUeNXhOARNjMGISDhb4RaB/mKdE+BOCcoqxszr
Lxvcy0L5lsSnhflRC1vZgAaTIYgl0wYU5Ten1Y180JKJzk4AFhMgymADo6CYVoVp
EHhwl9sO6lPHQhhHwaIaUyXMo49gMcrrzFovcUvAFmcq3afdVWJ+hV9X94m8FoV4
Pikhj6PsW9C2fQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:29 2025 by rpki-client