Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File:                     uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier:          yEvTJFtmxbTTToaGe8RJ5a80Oqzb1wz5e+k13MxUFe8=
Subject key identifier:   70:15:17:E9:B8:6B:0B:85:D8:78:37:6D:BE:C6:09:1D:C8:7C:6F:A5
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer:       /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial:       0199FCFD3E0C1B1A0355B9F93979F57BCADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number:          061A
Signing time:             Sun 19 Oct 2025 15:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:18 +0000
Files and hashes:         1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: GcuoPLNIf+lJy1V3bgQ4v0ygvYT2kPv0x0Qh9BnJMLA=)
                          2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:3e:0c:1b:1a:03:55:b9:f9:39:79:f5:7b:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
        Validity
            Not Before: Oct 19 15:01:18 2025 GMT
            Not After : Oct 20 15:01:18 2025 GMT
        Subject: CN=701517e9b86b0b85d878376dbec6091dc87c6fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:51:ef:32:90:db:1b:34:42:9e:0c:d4:ba:
                    86:9e:2b:86:ca:77:53:ba:e5:99:16:cb:50:fd:40:
                    47:c6:5a:5a:7f:e1:09:42:db:5b:c1:fb:57:ac:92:
                    4b:11:34:7b:b8:1c:1c:b1:42:17:76:4b:32:24:6f:
                    0f:18:ea:24:7a:58:0b:b3:aa:e0:96:cc:9b:ce:2f:
                    b5:8f:57:40:cc:34:dd:66:7b:60:5b:30:e8:25:41:
                    91:9e:8b:5b:0c:f6:00:0d:cc:3b:ea:6c:f7:ee:23:
                    04:9e:30:8c:a0:97:e0:ca:a5:81:79:c9:a1:b1:cd:
                    64:a0:97:10:c1:f8:67:35:49:0e:9c:37:0f:25:f4:
                    eb:0c:50:e7:78:25:9a:66:bb:2d:1d:53:8e:34:f5:
                    01:25:5e:64:a8:18:b5:6f:e6:06:86:8e:4f:ac:77:
                    5f:76:24:de:16:ac:8a:0a:09:10:b9:60:7a:34:e4:
                    7a:a4:d0:e1:79:ca:d7:c7:ca:90:a3:e2:9f:68:6d:
                    8f:00:98:10:d9:5f:02:de:f4:62:c1:9b:e0:62:61:
                    f8:eb:a1:d0:b4:12:00:d2:57:1e:bb:24:85:e6:df:
                    c9:87:c5:49:f9:bd:fa:20:1f:5c:24:e6:cf:8c:ae:
                    76:6f:d1:6a:4a:c4:43:e8:03:a4:e8:fc:90:b7:a7:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:15:17:E9:B8:6B:0B:85:D8:78:37:6D:BE:C6:09:1D:C8:7C:6F:A5
            X509v3 Authority Key Identifier:
                keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:78:54:b7:ee:0c:5b:88:68:67:34:79:61:87:44:1d:11:59:
         c5:8a:0c:bb:4f:ba:ec:bb:6f:e4:c3:04:0b:33:82:6a:a1:63:
         88:f1:ee:36:57:06:b3:19:84:95:51:d1:51:6a:8f:9e:82:3f:
         fa:29:db:af:01:f7:3d:d3:74:9d:f8:60:b9:ed:ec:ae:ec:27:
         d1:b6:70:3a:53:f7:af:75:9f:68:7c:89:6f:01:33:ad:17:fd:
         69:2d:b4:0b:dd:ac:91:1b:5f:12:ea:5c:b0:9c:b5:96:01:3f:
         c2:3a:6f:4d:ab:1d:c0:1b:d5:12:a3:e0:f5:03:28:e8:f5:56:
         62:00:ed:64:88:f3:0f:c1:c2:b4:c8:0f:fb:cd:79:33:43:3f:
         90:66:09:15:70:89:6f:cf:28:9d:71:00:eb:05:4b:3c:04:8f:
         7c:68:62:fa:c0:2a:bc:6b:0e:91:05:b9:8d:d5:8a:e1:a1:6f:
         02:d1:0e:8c:38:f4:95:61:55:19:7c:a9:27:84:b0:cf:4d:07:
         b5:a6:2a:d1:08:d4:98:be:54:fc:58:23:48:8d:95:79:ca:ba:
         cf:e5:f0:f6:5e:53:b9:b4:bc:93:7d:c0:49:4d:dd:dd:02:99:
         72:80:cf:96:ee:e1:a2:33:74:60:79:6e:93:0c:1d:79:39:c3:
         17:fb:ad:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/T4MGxoDVbn5OXn1e8rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjQzMTFjMWVjMDY3M2M1MDQ5NzkyNGMyMDJhMTNkMjEy
NjU5YjYwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMDIwMTUwMTE4WjAzMTEwLwYDVQQD
Eyg3MDE1MTdlOWI4NmIwYjg1ZDg3ODM3NmRiZWM2MDkxZGM4N2M2ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi5R7zKQ2xs0Qp4M1LqGniuGyndT
uuWZFstQ/UBHxlpaf+EJQttbwftXrJJLETR7uBwcsUIXdksyJG8PGOokelgLs6rg
lsybzi+1j1dAzDTdZntgWzDoJUGRnotbDPYADcw76mz37iMEnjCMoJfgyqWBecmh
sc1koJcQwfhnNUkOnDcPJfTrDFDneCWaZrstHVOONPUBJV5kqBi1b+YGho5PrHdf
diTeFqyKCgkQuWB6NOR6pNDhecrXx8qQo+KfaG2PAJgQ2V8C3vRiwZvgYmH466HQ
tBIA0lceuySF5t/Jh8VJ+b36IB9cJObPjK52b9FqSsRD6AOk6PyQt6dS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAVF+m4awuF2Hg3bb7GCR3IfG+lMB8GA1UdIwQY
MBaAFLskMRwewGc8UEl5JMICoT0hJlm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzct
MGE3ZjZjY2E2YmVhLzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzctMGE3ZjZjY2E2YmVh
LzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3hUt+4M
W4hoZzR5YYdEHRFZxYoMu0+67Ltv5MMECzOCaqFjiPHuNlcGsxmElVHRUWqPnoI/
+inbrwH3PdN0nfhgue3sruwn0bZwOlP3r3WfaHyJbwEzrRf9aS20C92skRtfEupc
sJy1lgE/wjpvTasdwBvVEqPg9QMo6PVWYgDtZIjzD8HCtMgP+815M0M/kGYJFXCJ
b88onXEA6wVLPASPfGhi+sAqvGsOkQW5jdWK4aFvAtEOjDj0lWFVGXypJ4Swz00H
taYq0QjUmL5U/FgjSI2Vecq6z+Xw9l5TubS8k33ASU3d3QKZcoDPlu7hojN0YHlu
kwwdeTnDF/utRw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:28 2025 by rpki-client