Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File:                     UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier:          1jc++vvfo1zlcLP3yyuX5iEVjBMADaZEh3cy2PkRHhI=
Subject key identifier:   E9:65:F9:C0:9C:ED:CA:F5:AB:96:F4:1E:24:06:32:2E:2F:EC:AE:B2
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       0199FCFD9242CAC270591DB4334376D397BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number:          0B4F
Signing time:             Sun 19 Oct 2025 15:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:40 +0000
Files and hashes:         1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: lToCtLIcTMmq8s6RewoSYgLhrovDbX+T2SeIUAGlHqg=)
                          2: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (hash: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=)
                          3: g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (hash: OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=)
                          4: tqTqorxuukrl9uDDia_5nmx2f7s.roa (hash: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:92:42:ca:c2:70:59:1d:b4:33:43:76:d3:97:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Oct 19 15:01:40 2025 GMT
            Not After : Oct 20 15:01:40 2025 GMT
        Subject: CN=e965f9c09cedcaf5ab96f41e2406322e2fecaeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:8f:78:d5:e3:8d:a5:c0:5c:ac:35:e8:47:
                    36:bd:0d:f4:6c:8b:78:09:b6:49:9f:9f:5a:31:0e:
                    b0:c3:d2:c6:97:59:e9:ef:2f:83:62:77:51:26:ec:
                    1b:ed:3c:04:79:af:05:57:b8:c5:6c:cd:fa:8d:0b:
                    37:a4:f1:ea:28:48:fa:4d:f1:8b:1b:d9:fb:7c:6c:
                    6f:e3:24:34:35:10:c3:33:f7:ea:62:d3:9f:cb:81:
                    4e:b6:79:2b:45:53:56:6f:19:9f:80:50:fe:85:55:
                    0f:9f:4f:bd:49:c4:2f:2e:ec:84:4a:46:a8:4c:36:
                    00:f1:14:8b:88:d9:3b:f1:10:41:80:57:15:26:8e:
                    5f:0b:00:c7:25:58:5a:7c:2b:87:29:a1:d8:fe:c7:
                    6e:5a:ea:cf:b7:bc:9e:79:3d:8a:3d:a8:59:de:ff:
                    5f:27:56:ce:35:17:38:44:2c:93:19:b5:8d:0a:e2:
                    f0:48:e0:4e:a1:ff:8d:79:57:cb:0d:ac:bc:41:53:
                    e9:fb:03:ec:90:0f:ae:4a:7b:b7:64:e1:7a:22:53:
                    cf:56:07:96:a7:7b:71:20:17:84:61:ff:50:fd:12:
                    3b:00:18:00:af:39:7c:93:d3:47:01:eb:cd:a6:92:
                    c7:65:c6:59:e5:6e:14:19:e7:f9:0a:12:32:59:80:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:65:F9:C0:9C:ED:CA:F5:AB:96:F4:1E:24:06:32:2E:2F:EC:AE:B2
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:50:0b:cd:63:56:3f:29:28:90:b7:04:39:57:08:e1:16:d9:
         a7:87:b6:f5:b9:fc:95:f2:7d:cd:50:ed:85:67:cd:ed:03:52:
         a8:4f:55:d5:c8:8f:10:b1:40:69:e4:fa:d5:c7:31:4d:04:81:
         57:5b:4a:60:f6:f1:6a:52:ef:88:9d:bc:48:48:dd:84:64:5e:
         e2:41:11:87:89:df:33:6e:db:c6:de:32:00:2d:27:0a:c4:d6:
         5b:1c:e4:81:63:f4:0e:9e:91:70:0e:52:71:9b:f5:dc:6d:1f:
         8b:bd:dd:65:30:3e:d3:54:18:b2:4d:44:bd:5d:64:e5:3a:76:
         d5:19:0a:17:90:ff:7c:2c:a0:f5:c5:ff:87:62:30:79:fd:f1:
         fd:42:91:b3:e8:be:a7:64:b3:d8:56:8c:d7:7d:68:ce:36:48:
         9b:81:3b:b5:c1:9f:99:4e:96:44:e4:e2:28:d7:21:5e:64:88:
         c9:1e:d7:ed:a0:73:7a:dd:78:70:be:b0:ac:81:57:ee:73:e4:
         d6:73:fa:8a:bb:27:fa:fe:ca:4a:b6:f3:60:48:79:68:71:4a:
         9f:0f:29:bb:7e:1c:1e:a3:3f:d4:f7:b0:6b:49:eb:cf:55:ec:
         6f:22:a7:c9:5f:be:8f:07:e2:29:36:71:ae:5d:71:42:87:17:
         86:26:dc:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/ZJCysJwWR20M0N205e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh
YjYwMjYwHhcNMjUxMDE5MTUwMTQwWhcNMjUxMDIwMTUwMTQwWjAzMTEwLwYDVQQD
EyhlOTY1ZjljMDljZWRjYWY1YWI5NmY0MWUyNDA2MzIyZTJmZWNhZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDuPeNXjjaXAXKw16Ec2vQ30bIt4
CbZJn59aMQ6ww9LGl1np7y+DYndRJuwb7TwEea8FV7jFbM36jQs3pPHqKEj6TfGL
G9n7fGxv4yQ0NRDDM/fqYtOfy4FOtnkrRVNWbxmfgFD+hVUPn0+9ScQvLuyESkao
TDYA8RSLiNk78RBBgFcVJo5fCwDHJVhafCuHKaHY/sduWurPt7yeeT2KPahZ3v9f
J1bONRc4RCyTGbWNCuLwSOBOof+NeVfLDay8QVPp+wPskA+uSnu3ZOF6IlPPVgeW
p3txIBeEYf9Q/RI7ABgArzl8k9NHAevNppLHZcZZ5W4UGef5ChIyWYAyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOll+cCc7cr1q5b0HiQGMi4v7K6yMB8GA1UdIwQY
MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt
NDNjMWM2MWQwMmViLzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi
LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFALzWNW
PykokLcEOVcI4RbZp4e29bn8lfJ9zVDthWfN7QNSqE9V1ciPELFAaeT61ccxTQSB
V1tKYPbxalLviJ28SEjdhGRe4kERh4nfM27bxt4yAC0nCsTWWxzkgWP0Dp6RcA5S
cZv13G0fi73dZTA+01QYsk1EvV1k5Tp21RkKF5D/fCyg9cX/h2Iwef3x/UKRs+i+
p2Sz2FaM131ozjZIm4E7tcGfmU6WROTiKNchXmSIyR7X7aBzet14cL6wrIFX7nPk
1nP6irsn+v7KSrbzYEh5aHFKnw8pu34cHqM/1Pewa0nrz1XsbyKnyV++jwfiKTZx
rl1xQocXhibcLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:55 2025 by rpki-client