Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File:                     uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier:          uqDBedb0x6UCKhovHgO58DqQNCzVtKPjFH9LZwyj3e0=
Subject key identifier:   BA:60:90:04:1F:4E:3D:D1:60:09:65:C6:C7:23:C8:92:96:7C:F9:DD
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer:       /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial:       0198D54DC8A72511DB80F8B1898F83304EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number:          15DD
Signing time:             Sat 23 Aug 2025 05:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:41 +0000
Files and hashes:         1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=)
                          2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: 02hcx4HeJOgrxs4ODlpbg2VqYCN1hVEkX/N6yaFWgAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c8:a7:25:11:db:80:f8:b1:89:8f:83:30:4e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
        Validity
            Not Before: Aug 23 05:01:41 2025 GMT
            Not After : Aug 24 05:01:41 2025 GMT
        Subject: CN=ba6090041f4e3dd1600965c6c723c892967cf9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:0b:cf:f7:67:88:ab:f1:13:3c:d8:87:e2:
                    b1:3c:55:2d:68:b4:ff:16:e4:f7:c8:0f:69:83:ac:
                    22:4b:39:9d:da:fc:b5:cd:d2:88:4c:31:f6:c3:3e:
                    af:09:9d:14:08:94:2c:45:b4:97:a2:ce:69:23:b2:
                    e5:ae:d5:f5:0a:a0:11:a4:e2:46:40:f9:e2:c7:29:
                    01:fa:1e:86:ea:1f:cc:8b:57:2d:e7:75:ed:94:bb:
                    23:6d:c6:a3:cd:91:6e:4d:07:fe:f7:26:b6:1a:dc:
                    87:df:fb:3d:b0:5b:50:51:f8:b5:93:32:0e:b5:de:
                    fb:6d:8b:89:4d:e9:71:5c:00:f6:2d:94:11:6a:cc:
                    f8:94:b9:5d:9a:ff:4f:9f:85:e8:1e:af:22:ba:44:
                    5a:5e:73:32:e1:6e:a5:4c:b7:70:35:49:14:4a:28:
                    6d:c0:9c:d9:0e:74:0d:a8:e4:cd:db:3e:00:16:fe:
                    46:fe:4b:38:9a:18:c0:96:7b:de:6d:69:c6:93:4e:
                    58:c4:fe:8b:58:57:8a:36:ad:d0:ee:7e:18:f4:e4:
                    49:86:01:b3:be:75:9e:cc:3c:1a:66:c6:dd:ec:c6:
                    58:87:04:0d:ab:10:b0:dc:32:ff:2e:63:91:3f:9c:
                    23:ed:f7:ec:b5:3c:29:1e:75:a8:e2:c0:aa:13:aa:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:90:04:1F:4E:3D:D1:60:09:65:C6:C7:23:C8:92:96:7C:F9:DD
            X509v3 Authority Key Identifier:
                keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:91:e2:1e:f1:fe:34:88:41:7e:01:76:f0:60:5a:a9:ea:47:
         d0:5b:94:8d:fb:46:d1:da:fc:4d:82:89:14:f4:49:93:9e:5c:
         40:c1:04:ec:46:f7:0f:86:e9:b5:57:ec:39:44:41:a4:57:b0:
         bb:e9:45:aa:04:86:f7:67:e0:0c:eb:8b:d4:e8:f3:f4:ea:9d:
         86:49:9b:00:62:7d:d3:37:8f:96:ab:9e:59:d0:1f:60:92:d6:
         35:e5:05:de:39:e5:93:c1:2e:fe:a2:d9:73:87:ac:92:3f:30:
         d3:6b:20:ae:a4:25:75:2d:bc:67:2c:ff:c9:ab:83:8c:b4:7d:
         12:40:ad:c3:db:96:c4:65:9a:9f:81:9a:0f:84:76:e5:b4:a4:
         eb:71:9f:51:13:6b:9b:13:04:78:da:f4:85:83:72:3e:b9:4f:
         c1:e3:29:29:21:e6:92:11:e2:2a:1d:d6:c7:a5:ac:ca:da:5a:
         e2:1e:29:5a:e5:8f:a5:72:fc:5e:e0:bc:62:2c:9c:9d:40:a7:
         5c:83:89:5a:b2:95:30:60:a7:b3:e1:2a:c3:72:47:a4:32:2d:
         f4:2b:30:f0:7d:c0:0d:e8:43:98:33:a7:e1:4a:06:5e:00:36:
         c8:76:3e:3f:09:72:8c:d5:6a:eb:99:5a:27:a8:c1:e7:99:63:
         a9:fc:a2:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcinJRHbgPixiY+DME7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTQzNzU0ZTkyMzQ1YThiYmFiM2RiMmJjMzZkNjE4ZTVl
Y2MwZTgwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD
EyhiYTYwOTAwNDFmNGUzZGQxNjAwOTY1YzZjNzIzYzg5Mjk2N2NmOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUELz/dniKvxEzzYh+KxPFUtaLT/
FuT3yA9pg6wiSzmd2vy1zdKITDH2wz6vCZ0UCJQsRbSXos5pI7LlrtX1CqARpOJG
QPnixykB+h6G6h/Mi1ct53XtlLsjbcajzZFuTQf+9ya2GtyH3/s9sFtQUfi1kzIO
td77bYuJTelxXAD2LZQRasz4lLldmv9Pn4XoHq8iukRaXnMy4W6lTLdwNUkUSiht
wJzZDnQNqOTN2z4AFv5G/ks4mhjAlnvebWnGk05YxP6LWFeKNq3Q7n4Y9ORJhgGz
vnWezDwaZsbd7MZYhwQNqxCw3DL/LmORP5wj7ffstTwpHnWo4sCqE6pSMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpgkAQfTj3RYAllxscjyJKWfPndMB8GA1UdIwQY
MBaAFLiUN1TpI0Wou6s9srw21hjl7MDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMt
M2U2YTE0ZGUyYzQ3LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMtM2U2YTE0ZGUyYzQ3
LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpHiHvH+
NIhBfgF28GBaqepH0FuUjftG0dr8TYKJFPRJk55cQMEE7Eb3D4bptVfsOURBpFew
u+lFqgSG92fgDOuL1Ojz9OqdhkmbAGJ90zePlqueWdAfYJLWNeUF3jnlk8Eu/qLZ
c4eskj8w02sgrqQldS28Zyz/yauDjLR9EkCtw9uWxGWan4GaD4R25bSk63GfURNr
mxMEeNr0hYNyPrlPweMpKSHmkhHiKh3Wx6Wsytpa4h4pWuWPpXL8XuC8YiycnUCn
XIOJWrKVMGCns+Eqw3JHpDIt9Csw8H3ADehDmDOn4UoGXgA2yHY+PwlyjNVq65la
J6jB55ljqfyimg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:56 2025 by rpki-client