Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          XSsH3/9wgV3fPDH+t6ZPYrTEwXo1+BhlR2NNr50sFY8=
Subject key identifier:   3F:4B:D7:5B:14:5D:D0:9F:D7:0B:1A:CE:39:A4:48:04:09:5D:7D:9A
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       0198D6297E7990BA5F6F03180396963AD8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          1397
Signing time:             Sat 23 Aug 2025 09:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:40 +0000
Files and hashes:         1: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (hash: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=)
                          2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: MIxGGjrkoMD65XLA3/rN6TWe8Rtuf4TjRsZs9kpaqEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:7e:79:90:ba:5f:6f:03:18:03:96:96:3a:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: Aug 23 09:01:40 2025 GMT
            Not After : Aug 24 09:01:40 2025 GMT
        Subject: CN=3f4bd75b145dd09fd70b1ace39a44804095d7d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:bf:94:fc:38:c1:d6:90:77:e8:80:89:f9:
                    96:1c:14:5e:45:51:f2:ff:47:94:f3:e3:92:82:68:
                    8c:c7:d0:0c:9c:be:c6:56:77:b5:db:8c:fb:c6:24:
                    53:28:cf:58:06:4e:23:a9:a1:2b:9c:e3:2b:60:cb:
                    22:27:0c:93:6b:1e:cd:af:f2:93:5f:1f:4e:78:a0:
                    10:4a:f7:d6:42:24:f1:f8:93:da:3a:dd:28:7a:fa:
                    35:8c:9f:30:2d:15:d5:33:c1:87:bd:a1:5b:34:cb:
                    3c:46:6c:f6:57:01:ec:ca:c1:4d:80:0b:2c:4b:89:
                    69:53:65:80:78:3d:2d:7b:7a:72:71:aa:53:f0:74:
                    72:df:0d:e1:aa:f5:dd:59:65:1b:d3:f7:b3:9b:d6:
                    ae:89:83:02:d9:74:21:2a:09:0f:23:94:73:ed:ab:
                    b6:56:43:5f:81:52:a7:15:49:f3:fb:ae:e5:ce:17:
                    2b:31:56:aa:96:bc:86:f8:2b:b5:cc:a3:c2:a0:9a:
                    6d:a5:40:f2:ce:d6:dc:ab:be:ad:84:38:8b:02:11:
                    b9:9e:e1:e7:be:4c:e3:28:87:d4:56:83:7b:19:7b:
                    7f:0f:c3:a0:26:bc:26:d8:08:83:89:d6:18:08:b4:
                    0a:dd:b9:47:1d:05:c6:1f:d5:21:08:3a:80:1a:54:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4B:D7:5B:14:5D:D0:9F:D7:0B:1A:CE:39:A4:48:04:09:5D:7D:9A
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:f7:c1:d2:93:5e:d2:dc:0b:e5:ed:af:7f:a5:ab:68:cd:
         a4:b1:00:cc:d9:17:84:13:49:b0:57:fc:fc:9a:3d:08:13:2c:
         8d:05:11:74:b1:2d:0d:85:f3:03:4d:de:85:78:64:78:c5:18:
         94:24:e2:9b:61:b0:c3:cf:3a:c6:8d:9c:56:45:a6:f2:1d:32:
         0b:3e:52:cf:4d:b6:2f:2c:4f:da:33:89:53:54:90:cc:12:fb:
         05:52:d7:60:3f:3c:cf:60:84:05:d5:05:89:5d:83:2c:56:75:
         bd:21:0e:43:10:7b:12:98:1f:cf:45:f2:31:c9:97:c9:ec:87:
         2c:6b:5c:a1:45:c3:d2:ad:c9:1a:ec:10:a2:61:a1:e0:53:2d:
         95:17:cf:25:7e:ab:90:c9:1e:ed:35:9b:37:2c:c4:ee:bf:44:
         96:01:48:dd:f5:d3:fa:70:7f:3c:91:97:48:b5:50:8a:50:b7:
         67:7f:95:0a:81:39:a2:2d:b3:64:84:27:24:6c:d7:49:e9:71:
         05:64:0c:49:15:26:e0:4f:d6:c5:f9:f0:75:2a:7f:5b:0f:9c:
         5e:2d:e2:0d:44:67:13:c8:3c:8b:f6:62:a4:00:af:d1:26:1d:
         d0:4f:cb:d1:02:0e:fa:24:f2:36:fb:db:63:55:52:cb:e1:e9:
         ce:b2:cf:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKX55kLpfbwMYA5aWOtjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjhiNGNlYTk0Yzg2N2QzNGMyYmZmOWFjZTc2NDBiZmY1
MWQwNmIwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD
EygzZjRiZDc1YjE0NWRkMDlmZDcwYjFhY2UzOWE0NDgwNDA5NWQ3ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtie/lPw4wdaQd+iAifmWHBReRVHy
/0eU8+OSgmiMx9AMnL7GVne124z7xiRTKM9YBk4jqaErnOMrYMsiJwyTax7Nr/KT
Xx9OeKAQSvfWQiTx+JPaOt0oevo1jJ8wLRXVM8GHvaFbNMs8Rmz2VwHsysFNgAss
S4lpU2WAeD0te3pycapT8HRy3w3hqvXdWWUb0/ezm9auiYMC2XQhKgkPI5Rz7au2
VkNfgVKnFUnz+67lzhcrMVaqlryG+Cu1zKPCoJptpUDyztbcq76thDiLAhG5nuHn
vkzjKIfUVoN7GXt/D8OgJrwm2AiDidYYCLQK3blHHQXGH9UhCDqAGlQ+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9L11sUXdCf1wsazjmkSAQJXX2aMB8GA1UdIwQY
MBaAFFO4tM6pTIZ9NMK/+aznZAv/UdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQt
OTY1ZjE3NjM3ODJjLzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQtOTY1ZjE3NjM3ODJj
LzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmP3wdKT
XtLcC+Xtr3+lq2jNpLEAzNkXhBNJsFf8/Jo9CBMsjQURdLEtDYXzA03ehXhkeMUY
lCTim2Gww886xo2cVkWm8h0yCz5Sz022LyxP2jOJU1SQzBL7BVLXYD88z2CEBdUF
iV2DLFZ1vSEOQxB7Epgfz0XyMcmXyeyHLGtcoUXD0q3JGuwQomGh4FMtlRfPJX6r
kMke7TWbNyzE7r9ElgFI3fXT+nB/PJGXSLVQilC3Z3+VCoE5oi2zZIQnJGzXSelx
BWQMSRUm4E/WxfnwdSp/Ww+cXi3iDURnE8g8i/ZipACv0SYd0E/L0QIO+iTyNvvb
Y1VSy+HpzrLPjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:16 2025 by rpki-client