Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File:                     U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier:          VFXNKqHRMzMTe++mbrMpdSXTyC7m5OTYurk1itthhzE=
Subject key identifier:   21:C5:A9:A4:5B:AC:C1:BD:B8:A5:6D:D8:0D:DB:75:49:8C:D3:A5:80
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer:       /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial:       0198D66072BA2C501275B653F1F2414F376A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number:          031B
Signing time:             Sat 23 Aug 2025 10:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:41 +0000
Files and hashes:         1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
                          2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: r7/ugdpnkoZ74SFmTr2rvWKQ3wRw9MgaO4XuEVC2wIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:72:ba:2c:50:12:75:b6:53:f1:f2:41:4f:37:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
        Validity
            Not Before: Aug 23 10:01:41 2025 GMT
            Not After : Aug 24 10:01:41 2025 GMT
        Subject: CN=21c5a9a45bacc1bdb8a56dd80ddb75498cd3a580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:35:f1:74:d7:2e:c3:f5:58:5b:9d:a7:58:
                    0b:8b:6f:8d:05:99:08:d0:64:60:76:11:4d:a6:9e:
                    48:ed:cc:af:5a:fe:26:5d:b8:0e:c9:6c:83:bd:6a:
                    50:ec:2f:04:3b:64:08:ae:94:fa:b7:e0:00:78:98:
                    ef:2d:e8:0b:3f:11:ce:61:7a:8e:9a:82:1c:a4:f8:
                    59:3e:c7:05:04:fc:28:1f:d1:50:53:bc:1f:8d:0c:
                    81:41:94:8d:22:60:5a:2e:eb:81:b4:38:af:d5:f3:
                    ad:68:50:ad:13:22:a7:cf:5d:d2:ab:21:89:e5:d9:
                    98:ef:12:8d:ec:4a:b7:c8:03:35:3e:fe:2e:68:71:
                    8d:e9:03:82:6d:5d:07:b1:b6:15:78:49:6a:b1:5c:
                    44:6d:13:f6:f1:3e:8f:2c:30:66:b5:8d:e0:af:4d:
                    46:2c:eb:c9:9b:32:b6:4e:56:7e:72:b3:50:46:6f:
                    d9:03:c9:5a:5d:b1:eb:66:4c:cb:57:5f:08:98:fb:
                    d6:f2:1e:e6:d9:01:6a:6b:35:ea:03:ca:8d:35:c2:
                    c9:ae:23:e0:37:06:83:95:e1:27:c5:de:28:26:22:
                    e0:fd:e6:75:89:2e:0b:00:9b:0f:21:5b:fd:54:d9:
                    5e:c0:62:57:b9:d7:b7:42:c5:73:50:af:65:55:d3:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:A9:A4:5B:AC:C1:BD:B8:A5:6D:D8:0D:DB:75:49:8C:D3:A5:80
            X509v3 Authority Key Identifier:
                keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:c8:72:6d:a4:d1:c9:38:e6:41:86:5f:39:30:ff:11:f2:
         86:fe:52:88:41:74:c2:75:b0:85:d5:eb:a4:0c:a9:64:aa:03:
         f9:69:72:04:e8:68:e8:c3:df:16:f7:89:44:22:10:0b:92:2a:
         08:5c:2c:97:64:ee:14:0b:fc:ab:af:c4:e9:17:c8:89:b2:95:
         ec:0c:fe:cd:38:e5:6e:b1:18:6f:81:b1:0d:80:a7:02:f2:55:
         41:db:e2:fb:ee:9b:9b:76:7a:9b:17:ee:a7:1a:64:61:50:52:
         b1:be:02:63:fd:23:93:27:3b:42:12:ed:16:73:45:05:e3:dd:
         3e:c9:54:ed:4d:c7:e6:5a:e8:d3:88:cd:bf:d1:9b:58:3a:b3:
         1f:48:90:2f:b4:ab:a0:dd:70:af:ec:06:f6:c0:fb:8d:59:f0:
         ba:5c:94:91:88:15:6d:ce:34:f7:66:ba:72:cd:3e:5f:d9:bf:
         06:6e:e3:32:80:6f:1c:8b:05:8b:8d:e4:51:9b:ab:97:4b:b6:
         10:3a:2c:88:cb:37:d2:0e:aa:1c:b2:cb:fd:c0:4d:80:51:99:
         cc:e4:74:0d:4a:23:4c:f8:1e:9b:ce:25:1d:cb:f4:92:1f:60:
         43:19:fd:e2:5b:e9:8c:37:1b:bf:f5:d6:0f:69:0a:fa:c5:13:
         65:7c:11:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHK6LFASdbZT8fJBTzdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDY3NmQ2NjkzMmM3N2EyNTc2MTEzNmFjOTllYjliNzRk
ODAxYTYwHhcNMjUwODIzMTAwMTQxWhcNMjUwODI0MTAwMTQxWjAzMTEwLwYDVQQD
EygyMWM1YTlhNDViYWNjMWJkYjhhNTZkZDgwZGRiNzU0OThjZDNhNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz818XTXLsP1WFudp1gLi2+NBZkI
0GRgdhFNpp5I7cyvWv4mXbgOyWyDvWpQ7C8EO2QIrpT6t+AAeJjvLegLPxHOYXqO
moIcpPhZPscFBPwoH9FQU7wfjQyBQZSNImBaLuuBtDiv1fOtaFCtEyKnz13SqyGJ
5dmY7xKN7Eq3yAM1Pv4uaHGN6QOCbV0HsbYVeElqsVxEbRP28T6PLDBmtY3gr01G
LOvJmzK2TlZ+crNQRm/ZA8laXbHrZkzLV18ImPvW8h7m2QFqazXqA8qNNcLJriPg
NwaDleEnxd4oJiLg/eZ1iS4LAJsPIVv9VNlewGJXude3QsVzUK9lVdPzmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHFqaRbrMG9uKVt2A3bdUmM06WAMB8GA1UdIwQY
MBaAFFNGdtZpMsd6JXYRNqyZ65t02AGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQt
YTAwOTQ0ZmQ3ZDlkLzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQtYTAwOTQ0ZmQ3ZDlk
LzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQzIcm2k
0ck45kGGXzkw/xHyhv5SiEF0wnWwhdXrpAypZKoD+WlyBOho6MPfFveJRCIQC5Iq
CFwsl2TuFAv8q6/E6RfIibKV7Az+zTjlbrEYb4GxDYCnAvJVQdvi++6bm3Z6mxfu
pxpkYVBSsb4CY/0jkyc7QhLtFnNFBePdPslU7U3H5lro04jNv9GbWDqzH0iQL7Sr
oN1wr+wG9sD7jVnwulyUkYgVbc4092a6cs0+X9m/Bm7jMoBvHIsFi43kUZurl0u2
EDosiMs30g6qHLLL/cBNgFGZzOR0DUojTPgem84lHcv0kh9gQxn94lvpjDcbv/XW
D2kK+sUTZXwRDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:44 2025 by rpki-client