Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          wqUX3DzLW7v0GPjGxGvk06EiFjRD5y/daC6Qv7Vgs6U=
Subject key identifier:   F6:54:13:3F:0D:DC:C7:A9:C2:49:1D:8C:0E:89:5B:BC:52:5C:C5:27
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       0197B70EE1112AF2E4EE9ED7887ED40B170C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          15C2
Signing time:             Sat 28 Jun 2025 15:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:34 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: Sk6oS2TUOqtZ7cQgqw+hNCl5ozrL9VI9sSRn4sbRlyQ=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:e1:11:2a:f2:e4:ee:9e:d7:88:7e:d4:0b:17:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Jun 28 15:01:34 2025 GMT
            Not After : Jun 29 15:01:34 2025 GMT
        Subject: CN=f654133f0ddcc7a9c2491d8c0e895bbc525cc527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:ed:8c:9a:e7:fb:04:15:84:7b:7b:52:e6:
                    bd:72:cf:4b:ea:a6:da:54:c2:d7:e0:4c:b4:56:4e:
                    1a:92:83:00:c3:f6:46:24:da:a8:32:38:2e:6f:58:
                    b4:8c:1a:e0:50:6b:e7:b5:ea:eb:ec:6a:19:9a:d9:
                    c0:5e:22:cc:02:79:29:c7:cd:14:c4:ad:82:bd:42:
                    ef:64:9b:5a:21:36:1c:76:a4:7a:e9:d8:79:01:9b:
                    c4:f2:8c:3c:0c:02:8b:90:6d:b0:55:f5:50:de:aa:
                    9a:0f:4b:0e:aa:66:90:72:52:60:dc:bd:65:c2:de:
                    4e:7a:90:a3:b7:cd:ea:f2:6f:ce:43:ad:e5:7f:d1:
                    7a:c6:ae:06:6b:30:b0:f8:fa:04:93:5a:71:f4:bf:
                    22:a6:a1:d2:22:57:18:b7:cb:ee:b6:95:77:f9:12:
                    19:f3:6d:e2:68:69:b9:71:31:2a:ea:f6:05:a0:05:
                    ff:1b:e9:fd:13:86:20:f4:be:54:e7:5c:3f:f1:98:
                    06:72:0f:eb:89:a5:8e:d8:f7:fb:40:a1:08:3c:c6:
                    0f:b3:4b:70:5c:f7:af:dc:16:c2:6f:33:91:04:7e:
                    82:10:c8:91:67:35:7d:8c:ce:5e:45:eb:0d:bc:7b:
                    10:ef:e1:95:8a:91:bc:e4:2d:30:1c:2a:24:4a:51:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:13:3F:0D:DC:C7:A9:C2:49:1D:8C:0E:89:5B:BC:52:5C:C5:27
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:0b:22:2f:6a:8a:26:39:1b:a3:03:5b:e9:4f:97:34:cd:
         f3:6b:8c:6d:78:b3:64:8a:2c:02:11:d8:52:61:54:5b:e3:79:
         43:8f:00:48:a0:21:89:09:98:70:cd:4d:5b:78:e1:fb:73:35:
         0f:82:09:99:47:0a:e3:ae:fb:a6:73:2b:c0:01:1a:12:98:9e:
         dc:55:00:ff:76:92:d2:61:3a:4c:72:bb:22:b6:4b:d1:52:16:
         9d:80:42:bf:96:bf:ff:7e:c2:64:9a:df:e6:8c:ec:e8:97:81:
         42:05:71:4b:0e:25:29:98:9a:1c:36:78:a8:61:1b:1b:5c:39:
         c5:88:01:37:6d:03:fd:1b:1c:72:31:e9:9f:a3:8b:8d:d4:df:
         f7:c4:a7:58:93:c7:d5:16:4d:96:e3:a4:73:03:88:37:ac:28:
         2e:9b:28:cf:ee:08:86:82:7b:c9:25:8d:51:30:46:16:7c:ca:
         16:0f:12:ed:bd:0d:82:d8:bd:0d:f6:16:fd:79:9d:d4:7c:eb:
         07:b0:62:6d:76:13:84:4a:34:e6:6a:1a:66:f5:29:9e:b3:0b:
         6f:d6:c1:fe:ad:cc:16:14:a5:b2:e9:82:f6:ca:e4:c5:95:da:
         05:b8:1f:5a:fc:16:1d:a1:e9:d9:b4:19:e9:30:f0:14:74:cd:
         bf:7b:8c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuERKvLk7p7XiH7UCxcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjUwNjI4MTUwMTM0WhcNMjUwNjI5MTUwMTM0WjAzMTEwLwYDVQQD
EyhmNjU0MTMzZjBkZGNjN2E5YzI0OTFkOGMwZTg5NWJiYzUyNWNjNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKntjJrn+wQVhHt7Uua9cs9L6qba
VMLX4Ey0Vk4akoMAw/ZGJNqoMjgub1i0jBrgUGvnterr7GoZmtnAXiLMAnkpx80U
xK2CvULvZJtaITYcdqR66dh5AZvE8ow8DAKLkG2wVfVQ3qqaD0sOqmaQclJg3L1l
wt5OepCjt83q8m/OQ63lf9F6xq4GazCw+PoEk1px9L8ipqHSIlcYt8vutpV3+RIZ
823iaGm5cTEq6vYFoAX/G+n9E4Yg9L5U51w/8ZgGcg/riaWO2Pf7QKEIPMYPs0tw
XPev3BbCbzORBH6CEMiRZzV9jM5eResNvHsQ7+GVipG85C0wHCokSlEl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZUEz8N3MepwkkdjA6JW7xSXMUnMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbMLIi9q
iiY5G6MDW+lPlzTN82uMbXizZIosAhHYUmFUW+N5Q48ASKAhiQmYcM1NW3jh+3M1
D4IJmUcK4677pnMrwAEaEpie3FUA/3aS0mE6THK7IrZL0VIWnYBCv5a//37CZJrf
5ozs6JeBQgVxSw4lKZiaHDZ4qGEbG1w5xYgBN20D/RsccjHpn6OLjdTf98SnWJPH
1RZNluOkcwOIN6woLpsoz+4IhoJ7ySWNUTBGFnzKFg8S7b0Ngti9DfYW/Xmd1Hzr
B7BibXYThEo05moaZvUpnrMLb9bB/q3MFhSlsumC9srkxZXaBbgfWvwWHaHp2bQZ
6TDwFHTNv3uMzw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:02:38 2025 by rpki-client