Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
File:                     UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json)
Hash identifier:          McBI2bLP1JVryQkuBd0pvzyLctJ+0jgEXrt7wn1jFsE=
Subject key identifier:   C7:BC:D6:9B:F6:1B:58:3F:83:DA:73:07:B3:4E:CC:89:12:AF:F2:B3
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Certificate issuer:       /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial:       0197B70F07DFC418ACEE599C1609664AF3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 15:01:44 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:44 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:44 +0000
Files and hashes:         1: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: S+wmNf/uWdjpH6SGPZ590iSL6LoID7aDfl/R5QoZCDU=)
                          2: nIsyC_RQ4fy10-S1bbHQmMFjAf4.roa (hash: HsNAyKM2xYLYihaIQPq7p3bRxHDLIVC8wZ1mzcn3eIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:07:df:c4:18:ac:ee:59:9c:16:09:66:4a:f3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
        Validity
            Not Before: Jun 28 15:01:44 2025 GMT
            Not After : Jun 29 15:01:44 2025 GMT
        Subject: CN=c7bcd69bf61b583f83da7307b34ecc8912aff2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:b6:fd:a2:a9:3f:df:66:b7:ec:07:b8:11:
                    07:99:83:3d:cb:7d:ea:49:e4:8c:e2:31:6a:6a:ae:
                    29:6b:34:23:2d:a3:7c:ee:05:3c:82:16:2a:60:d8:
                    9b:f2:ba:92:0e:82:c1:96:84:36:79:b8:cc:45:4b:
                    92:a3:d7:46:3d:16:9d:d8:94:d3:ef:18:ec:a3:04:
                    e2:c5:9f:00:1f:85:f3:71:ca:41:98:b4:d2:60:ef:
                    6c:3f:e2:d8:15:20:1c:37:75:3e:99:30:cd:18:f5:
                    3a:50:59:ba:ec:80:a4:7f:a9:15:38:c9:ad:6e:8e:
                    5f:fb:c5:56:a7:07:3f:55:42:d9:cf:e9:2a:b8:0d:
                    12:88:e3:c9:52:4c:2c:07:72:4c:91:fa:eb:e0:d5:
                    b6:9b:3b:bf:4a:39:8c:cf:fd:dd:c8:fd:c3:14:d1:
                    06:ec:b3:dd:36:1e:2b:ca:25:8e:cd:ef:26:4b:ef:
                    69:87:61:cb:f2:d9:8a:05:a6:4f:ac:aa:d8:01:73:
                    6e:5f:16:45:83:f9:96:58:8a:cc:32:71:1b:5a:e5:
                    ba:87:60:23:88:a9:c5:d8:0a:11:70:8a:c3:15:08:
                    4d:28:ce:7a:3e:a9:18:64:39:6a:22:8f:36:a9:97:
                    c7:ab:45:e8:72:ce:0a:fd:a4:93:fe:f0:f1:5d:95:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:D6:9B:F6:1B:58:3F:83:DA:73:07:B3:4E:CC:89:12:AF:F2:B3
            X509v3 Authority Key Identifier:
                keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:23:ea:f7:dc:82:54:4d:07:c6:d2:51:1e:7a:96:f6:15:dc:
         f8:b6:83:f7:81:c6:00:ec:2d:bf:2a:c6:21:58:65:cf:65:cc:
         4a:75:71:c4:99:8b:62:af:66:3d:e7:ac:75:6a:f7:f7:77:75:
         74:bc:78:68:5a:50:08:50:82:ea:22:18:d6:d1:21:65:4f:a7:
         e6:3d:d8:9f:be:a6:31:e3:da:8f:70:1b:b4:34:20:1f:9c:86:
         d7:9e:8a:79:32:c1:08:39:c1:f9:d3:04:21:95:f9:e0:d1:42:
         b7:02:db:b7:f2:66:ee:07:9d:cf:5f:7b:a8:70:47:e2:0c:bf:
         0c:f4:97:e9:8d:d8:db:ba:76:cf:a2:90:e9:d2:81:4b:a8:bc:
         4a:e0:2b:98:2f:a5:b2:04:ef:7f:3a:3b:11:b9:33:68:49:79:
         f0:b5:1d:ae:85:85:91:3c:db:99:b0:62:4c:da:8d:b4:10:b8:
         4f:46:ab:a3:11:fb:1a:0f:f1:92:76:70:0e:a8:6f:20:f1:e6:
         78:f8:4a:3c:28:89:c6:04:91:56:c7:75:3d:e7:42:cd:90:dc:
         cb:6c:19:9a:c2:8a:10:b3:18:df:0f:39:8a:b7:39:39:d9:aa:
         5e:cb:f0:02:00:70:2d:83:f4:1c:af:93:7a:07:69:e6:23:19:
         a3:4a:a5:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwffxBis7lmcFglmSvPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzJmMjk3Nzg5YTE5NGE4YjUwNzgwNWYzNWQ0MmVlNzhj
MGQ0YzMwHhcNMjUwNjI4MTUwMTQ0WhcNMjUwNjI5MTUwMTQ0WjAzMTEwLwYDVQQD
EyhjN2JjZDY5YmY2MWI1ODNmODNkYTczMDdiMzRlY2M4OTEyYWZmMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l+2/aKpP99mt+wHuBEHmYM9y33q
SeSM4jFqaq4pazQjLaN87gU8ghYqYNib8rqSDoLBloQ2ebjMRUuSo9dGPRad2JTT
7xjsowTixZ8AH4XzccpBmLTSYO9sP+LYFSAcN3U+mTDNGPU6UFm67ICkf6kVOMmt
bo5f+8VWpwc/VULZz+kquA0SiOPJUkwsB3JMkfrr4NW2mzu/SjmMz/3dyP3DFNEG
7LPdNh4ryiWOze8mS+9ph2HL8tmKBaZPrKrYAXNuXxZFg/mWWIrMMnEbWuW6h2Aj
iKnF2AoRcIrDFQhNKM56PqkYZDlqIo82qZfHq0Xocs4K/aST/vDxXZWDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe81pv2G1g/g9pzB7NOzIkSr/KzMB8GA1UdIwQY
MBaAFFAy8pd4mhlKi1B4BfNdQu54wNTDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt
YzZiZGIxODMwNjk0LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0
LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSPq99yC
VE0HxtJRHnqW9hXc+LaD94HGAOwtvyrGIVhlz2XMSnVxxJmLYq9mPeesdWr393d1
dLx4aFpQCFCC6iIY1tEhZU+n5j3Yn76mMePaj3AbtDQgH5yG156KeTLBCDnB+dME
IZX54NFCtwLbt/Jm7gedz197qHBH4gy/DPSX6Y3Y27p2z6KQ6dKBS6i8SuArmC+l
sgTvfzo7EbkzaEl58LUdroWFkTzbmbBiTNqNtBC4T0aroxH7Gg/xknZwDqhvIPHm
ePhKPCiJxgSRVsd1PedCzZDcy2wZmsKKELMY3w85irc5OdmqXsvwAgBwLYP0HK+T
egdp5iMZo0qlTg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:54 2025 by rpki-client