Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
File:                     UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft (raw, json)
Hash identifier:          DCOljscopip5n/90PZ44nny071dP1xyGZ8ggfOMxLIE=
Subject key identifier:   87:46:A9:C4:CE:C0:2F:E6:95:34:4E:66:24:2B:06:0F:A0:BF:96:42
Authority key identifier: 51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE
Certificate issuer:       /CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
Certificate serial:       0198D6298065E3A20A9F9A734532D92C8F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
Manifest number:          07
Signing time:             Sat 23 Aug 2025 09:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:40 +0000
Files and hashes:         1: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl (hash: FAfhtEg1LVtFYVi6n5k5l9Z9Kq5/B1FIg3ZTzpZ2W0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:80:65:e3:a2:0a:9f:9a:73:45:32:d9:2c:8f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae
        Validity
            Not Before: Aug 23 09:01:40 2025 GMT
            Not After : Aug 24 09:01:40 2025 GMT
        Subject: CN=8746a9c4cec02fe695344e66242b060fa0bf9642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:49:8c:c2:2a:2a:20:97:ea:e6:0e:bd:ae:
                    2e:4d:cb:89:bd:84:19:ba:31:54:ea:8d:5e:bd:3d:
                    e1:ba:a0:42:2b:66:e4:15:96:b4:cc:10:be:37:e7:
                    35:35:6d:59:a2:d4:ce:1d:46:09:34:08:9f:00:37:
                    2b:51:7d:88:1f:b6:ba:6d:96:73:6a:f7:3c:bf:1c:
                    3f:38:a6:fe:0f:9a:56:e0:f6:cd:4c:c9:03:ae:cf:
                    a8:a7:0c:17:c5:50:78:1d:07:18:04:45:07:59:48:
                    ee:3d:a4:1c:b4:50:bd:3c:ff:0c:5e:0c:fd:cb:9d:
                    49:7b:58:d9:24:0e:eb:10:af:59:ab:52:51:84:7d:
                    cb:9d:bc:93:cd:d8:78:ce:88:ca:6b:4b:7a:49:c7:
                    87:51:46:ba:1b:de:37:a0:44:60:f8:d5:b1:43:89:
                    f0:03:28:11:49:3e:6e:6e:88:1b:eb:47:16:81:f4:
                    36:af:72:0c:58:44:e8:7c:94:9f:98:46:67:a1:6d:
                    b0:29:2e:a5:76:44:4f:4e:ec:13:26:72:30:27:1e:
                    e8:36:b0:f4:62:71:c0:35:08:47:74:57:40:f9:aa:
                    2e:1b:04:bf:f2:cb:c6:94:05:aa:bb:54:73:89:05:
                    bc:25:c0:97:80:c9:bd:5d:c4:d2:cf:c0:dd:a6:02:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:46:A9:C4:CE:C0:2F:E6:95:34:4E:66:24:2B:06:0F:A0:BF:96:42
            X509v3 Authority Key Identifier:
                keyid:51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:0f:b2:af:9a:f4:b3:d0:44:4d:09:ff:18:10:b9:04:29:
         89:9e:bf:93:a0:b0:cb:60:15:1f:40:6e:1b:f1:22:8e:3f:67:
         8f:4b:4c:43:d6:02:4d:e5:b6:0d:b4:62:c3:05:7e:94:de:d7:
         07:e5:df:ee:7d:a0:23:4c:b1:ad:96:bb:9b:a4:22:68:44:e7:
         c5:18:9e:5b:72:c2:b6:de:88:4e:81:1b:7b:ec:36:63:52:61:
         f6:30:7f:0d:ab:b2:b2:5f:f2:80:37:fd:51:c3:43:94:73:6d:
         79:2e:a8:06:aa:6a:af:90:fc:52:e3:09:8d:96:2b:dd:77:ec:
         a4:29:54:79:af:f8:1a:09:24:2e:ad:5e:e0:5e:ae:e3:5a:8e:
         dd:cb:dd:a5:d1:92:86:59:11:84:d4:4d:a0:f8:27:50:6c:68:
         c9:cb:9d:ce:b9:60:fe:87:69:7a:69:04:83:e6:2e:2b:26:26:
         c1:35:6b:8f:f7:4e:51:d8:de:7e:1d:30:f7:d4:8a:17:1d:3b:
         35:93:d7:dd:34:e5:97:7e:8c:e8:16:f2:94:09:87:1c:22:a1:
         0a:60:98:0e:75:78:2c:02:4b:9e:51:7f:29:d1:74:8b:3b:54:
         d6:af:95:02:5b:36:1f:1c:51:a9:78:dd:b5:3f:66:07:d6:94:
         d9:0b:3e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYBl46IKn5pzRTLZLI87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjFkNjI4MGJkMjBkN2JjZGZkNjUyNTEwOWE0M2UyZWEz
YzYyYWUwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD
Eyg4NzQ2YTljNGNlYzAyZmU2OTUzNDRlNjYyNDJiMDYwZmEwYmY5NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5xJjMIqKiCX6uYOva4uTcuJvYQZ
ujFU6o1evT3huqBCK2bkFZa0zBC+N+c1NW1ZotTOHUYJNAifADcrUX2IH7a6bZZz
avc8vxw/OKb+D5pW4PbNTMkDrs+opwwXxVB4HQcYBEUHWUjuPaQctFC9PP8MXgz9
y51Je1jZJA7rEK9Zq1JRhH3LnbyTzdh4zojKa0t6SceHUUa6G943oERg+NWxQ4nw
AygRST5ubogb60cWgfQ2r3IMWETofJSfmEZnoW2wKS6ldkRPTuwTJnIwJx7oNrD0
YnHANQhHdFdA+aouGwS/8svGlAWqu1RziQW8JcCXgMm9XcTSz8DdpgKMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdGqcTOwC/mlTROZiQrBg+gv5ZCMB8GA1UdIwQY
MBaAFFFh1igL0g17zf1lJRCaQ+LqPGKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjkt
YTBhMTBlY2I0MmE5LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjktYTBhMTBlY2I0MmE5
LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO4Psq+a
9LPQRE0J/xgQuQQpiZ6/k6Cwy2AVH0BuG/Eijj9nj0tMQ9YCTeW2DbRiwwV+lN7X
B+Xf7n2gI0yxrZa7m6QiaETnxRieW3LCtt6IToEbe+w2Y1Jh9jB/Dauysl/ygDf9
UcNDlHNteS6oBqpqr5D8UuMJjZYr3XfspClUea/4GgkkLq1e4F6u41qO3cvdpdGS
hlkRhNRNoPgnUGxoycudzrlg/odpemkEg+YuKyYmwTVrj/dOUdjefh0w99SKFx07
NZPX3TTll36M6BbylAmHHCKhCmCYDnV4LAJLnlF/KdF0iztU1q+VAls2HxxRqXjd
tT9mB9aU2Qs+oA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:28 2025 by rpki-client