Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          V1AlKzybQfKPVTAE82qD2eO+a+L/QrRK/chmUiu+p7Q=
Subject key identifier:   B9:4F:F6:59:93:13:98:1A:BA:9D:2E:5B:E9:64:EF:32:F5:20:9B:92
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       0198D5BC4064BB4D6B75208C28318922A1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0D30
Signing time:             Sat 23 Aug 2025 07:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:20 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: WisTRbv2XDMlzvyLi1+0Ky4f3Q05SftntQt1Yzc0q8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:40:64:bb:4d:6b:75:20:8c:28:31:89:22:a1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Aug 23 07:02:20 2025 GMT
            Not After : Aug 24 07:02:20 2025 GMT
        Subject: CN=b94ff6599313981aba9d2e5be964ef32f5209b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:26:91:c9:09:6b:d6:2f:e8:f8:05:14:e4:
                    82:9c:52:4d:01:24:9f:34:39:76:5b:ae:2c:05:67:
                    13:57:58:fb:65:74:23:f1:d4:19:11:8c:71:d1:09:
                    98:62:2d:57:0c:67:5b:6c:0d:60:8e:f3:70:95:97:
                    bd:bd:8b:39:45:38:36:e0:7d:74:29:b8:0a:05:3b:
                    4f:1e:db:5f:39:06:fc:9d:93:fd:c5:04:be:f7:ed:
                    5f:79:89:77:92:e9:50:5d:01:f3:81:0d:1b:54:89:
                    3d:39:a3:ae:61:a7:0a:0b:8d:55:4e:5d:42:48:36:
                    13:5c:98:ee:52:7f:eb:84:7f:eb:f3:8a:16:16:f9:
                    3d:49:bc:d8:13:69:3c:6b:6e:11:0a:2a:04:8d:b3:
                    df:cd:3f:58:80:dd:1c:2d:55:4c:87:0a:f2:58:19:
                    43:46:30:61:bc:c7:9d:da:af:bb:57:c5:5a:f6:33:
                    a0:09:de:ca:8f:88:8e:33:48:a4:d8:53:ec:9e:f6:
                    13:d1:26:d2:26:7b:98:c2:68:c2:eb:e4:17:c3:63:
                    35:7a:e5:e3:f5:2b:64:88:c0:44:5d:b7:24:d0:8b:
                    81:42:ce:98:dc:7b:bc:de:e6:31:17:89:dd:69:92:
                    ca:3e:92:08:d3:1e:23:97:0c:3c:2b:16:a4:7a:3d:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4F:F6:59:93:13:98:1A:BA:9D:2E:5B:E9:64:EF:32:F5:20:9B:92
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:84:ca:3c:5e:6a:fb:d9:8a:79:75:ce:07:f9:26:91:b1:8e:
         d1:47:67:f2:2a:f6:dc:a8:a7:17:4c:d9:3f:bb:72:a8:77:0e:
         01:51:44:87:d0:ec:7e:af:17:fa:41:86:ae:00:00:60:14:d2:
         bc:35:fb:6e:35:31:ec:b8:03:8e:99:65:b8:7d:7b:1c:5a:0c:
         02:3b:41:f5:6b:53:28:43:b4:6c:be:0d:69:df:d1:9d:2f:9e:
         66:66:cf:92:8a:95:e3:aa:66:ec:11:64:d7:5d:b4:7f:60:14:
         85:3c:fa:2c:0e:7d:05:a4:d4:4c:d9:03:0a:18:38:05:5f:11:
         6c:ee:54:9e:df:a0:f1:22:1e:ba:0e:fe:61:bd:4d:a8:d1:28:
         1f:54:a4:d1:12:c2:ef:7c:01:e5:e5:1b:f4:ee:09:e6:3f:18:
         69:b6:fc:01:1c:03:21:31:83:23:ed:12:77:bb:fb:29:55:d2:
         80:d3:7c:fa:fb:26:1d:e6:a6:9e:16:05:f7:b0:51:1e:40:fc:
         7a:d5:ca:32:51:da:fd:e9:48:e3:78:1e:b0:f8:4d:6a:0e:41:
         3e:b3:3e:00:e7:00:90:21:da:c1:fc:83:db:c9:1d:1d:5b:3f:
         98:72:7c:a2:22:16:49:75:05:99:e5:fc:58:11:7e:d3:33:c7:
         c0:66:0d:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvEBku01rdSCMKDGJIqGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTJmMzhiNTViZmMxMzdiYjllZDAyNmZhMDAzM2VlZjhm
YTdkNTAwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD
EyhiOTRmZjY1OTkzMTM5ODFhYmE5ZDJlNWJlOTY0ZWYzMmY1MjA5YjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVcmkckJa9Yv6PgFFOSCnFJNASSf
NDl2W64sBWcTV1j7ZXQj8dQZEYxx0QmYYi1XDGdbbA1gjvNwlZe9vYs5RTg24H10
KbgKBTtPHttfOQb8nZP9xQS+9+1feYl3kulQXQHzgQ0bVIk9OaOuYacKC41VTl1C
SDYTXJjuUn/rhH/r84oWFvk9SbzYE2k8a24RCioEjbPfzT9YgN0cLVVMhwryWBlD
RjBhvMed2q+7V8Va9jOgCd7Kj4iOM0ik2FPsnvYT0SbSJnuYwmjC6+QXw2M1euXj
9StkiMBEXbck0IuBQs6Y3Hu83uYxF4ndaZLKPpII0x4jlww8Kxakej1TiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlP9lmTE5gaup0uW+lk7zL1IJuSMB8GA1UdIwQY
MBaAFLmS84tVv8E3u57QJvoAM+74+n1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQt
OWJjM2U1NmY3YWY3LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQtOWJjM2U1NmY3YWY3
LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4TKPF5q
+9mKeXXOB/kmkbGO0Udn8ir23KinF0zZP7tyqHcOAVFEh9Dsfq8X+kGGrgAAYBTS
vDX7bjUx7LgDjplluH17HFoMAjtB9WtTKEO0bL4Nad/RnS+eZmbPkoqV46pm7BFk
1120f2AUhTz6LA59BaTUTNkDChg4BV8RbO5Unt+g8SIeug7+Yb1NqNEoH1Sk0RLC
73wB5eUb9O4J5j8Yabb8ARwDITGDI+0Sd7v7KVXSgNN8+vsmHeamnhYF97BRHkD8
etXKMlHa/elI43gesPhNag5BPrM+AOcAkCHawfyD28kdHVs/mHJ8oiIWSXUFmeX8
WBF+0zPHwGYNJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:12 2025 by rpki-client