Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
File:                     ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json)
Hash identifier:          KpykEg6bEjfV7l5RnbxpF6JRCMyormoDW9r98FONx1o=
Subject key identifier:   22:C6:BD:61:F1:B8:1B:C5:7B:45:06:BF:6D:48:FC:FA:CE:E4:88:A0
Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
Certificate issuer:       /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Certificate serial:       0197B6A0C261B67B42A54A1A8C268CA2EBE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
Manifest number:          0193
Signing time:             Sat 28 Jun 2025 13:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:17 +0000
Files and hashes:         1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: LlWjp1wh90ojLfaVLdrvIWWI4CouSo+sdoHk6aRbas8=)
                          2: ZnDO_rePAntHP4QbrCH1ZMUFU88.roa (hash: 1CLa3f+zgWechWD7s3i+GnMCuHYkW66e1IkcJJq2REw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:c2:61:b6:7b:42:a5:4a:1a:8c:26:8c:a2:eb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
        Validity
            Not Before: Jun 28 13:01:17 2025 GMT
            Not After : Jun 29 13:01:17 2025 GMT
        Subject: CN=22c6bd61f1b81bc57b4506bf6d48fcfacee488a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9b:a2:e4:3c:4d:af:ce:3f:c2:9a:65:3c:30:
                    85:2b:8e:03:ba:68:3f:e8:33:13:e9:5b:14:96:01:
                    82:e6:d4:a7:fb:b5:ea:4d:a0:92:6e:da:a3:b8:bc:
                    fb:4f:99:58:f8:b8:07:f6:8a:46:63:f7:39:24:d5:
                    ec:2d:d3:20:b0:c4:ab:61:1e:01:f7:b6:09:fb:d8:
                    93:a3:ec:69:88:ba:a3:a9:e4:db:9b:b0:7c:81:65:
                    43:f0:e3:fd:8d:e1:c4:8e:82:4a:de:4e:a1:1d:04:
                    d7:89:d7:22:d6:4e:de:9a:25:ca:4c:f8:92:fe:13:
                    a6:6c:32:fe:06:4b:28:b9:0b:df:ab:8a:1b:3c:6e:
                    d5:df:c0:30:8b:f8:af:b9:bb:25:43:9c:ef:10:c4:
                    22:78:cb:27:30:02:dd:02:d0:32:7b:b1:21:2a:61:
                    d1:9a:89:f6:c6:47:91:c7:8a:70:5c:4b:55:a7:6e:
                    d4:56:40:a9:0f:0b:e4:de:ab:11:6d:f9:00:a8:8b:
                    7f:f9:5e:91:8c:60:ea:7d:97:25:fa:c5:a4:30:6b:
                    ba:a5:3d:97:43:eb:cb:bf:38:2e:90:d1:ec:64:d7:
                    6a:46:62:7e:69:bb:13:6f:75:07:31:d0:01:56:ab:
                    80:b1:d2:1b:25:c3:c6:13:09:d1:fb:5b:9b:ae:5d:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C6:BD:61:F1:B8:1B:C5:7B:45:06:BF:6D:48:FC:FA:CE:E4:88:A0
            X509v3 Authority Key Identifier:
                keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:33:f8:04:79:9c:b1:34:7e:cf:0c:c6:93:b1:f2:2f:a3:b2:
         1c:84:84:29:fd:b7:85:26:33:c3:4a:79:81:d6:d1:d4:a7:40:
         39:87:59:60:f3:56:f0:bc:b4:a5:e8:73:e4:52:31:32:93:ee:
         1b:f9:b2:ef:7d:11:a2:ac:f3:40:77:02:87:54:0d:6d:f2:40:
         8d:14:1e:c4:5a:3b:53:a9:ff:98:14:2c:4c:f3:f9:9c:e1:ae:
         80:86:b4:8d:ae:d0:cf:76:f9:94:f4:21:ba:12:60:53:b3:82:
         82:e7:47:6b:c3:af:00:f5:ab:42:3b:86:b2:17:11:57:db:4c:
         a4:d1:1a:6c:ea:b5:5b:d9:0f:b4:ca:3d:94:d9:6b:f1:46:40:
         01:aa:98:74:b5:b3:8f:ba:ce:62:2d:0e:bf:2e:f1:4d:11:99:
         8a:2d:d7:76:dd:36:9b:51:10:b2:4e:12:be:5f:ae:37:a4:f0:
         6c:9c:23:27:04:d1:01:63:c8:e4:3e:11:2a:60:97:7c:86:ff:
         ef:28:2b:6e:48:69:ea:f0:50:e4:fc:8c:c5:8b:53:ff:65:02:
         3b:56:22:63:5d:bc:13:ab:82:82:d2:b1:aa:8c:01:e9:ce:b9:
         9f:48:fe:f9:ea:db:a4:7d:15:e7:a6:d8:35:0f:c3:3d:9f:94:
         a7:79:1f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMJhtntCpUoajCaMouvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYjZmZWUwZTdhMTRjN2UxZDM4NjA5ZDliYzNjMmVmY2Nh
ZjMzYWMwHhcNMjUwNjI4MTMwMTE3WhcNMjUwNjI5MTMwMTE3WjAzMTEwLwYDVQQD
EygyMmM2YmQ2MWYxYjgxYmM1N2I0NTA2YmY2ZDQ4ZmNmYWNlZTQ4OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zui5DxNr84/wpplPDCFK44Dumg/
6DMT6VsUlgGC5tSn+7XqTaCSbtqjuLz7T5lY+LgH9opGY/c5JNXsLdMgsMSrYR4B
97YJ+9iTo+xpiLqjqeTbm7B8gWVD8OP9jeHEjoJK3k6hHQTXidci1k7emiXKTPiS
/hOmbDL+BksouQvfq4obPG7V38Awi/ivubslQ5zvEMQieMsnMALdAtAye7EhKmHR
mon2xkeRx4pwXEtVp27UVkCpDwvk3qsRbfkAqIt/+V6RjGDqfZcl+sWkMGu6pT2X
Q+vLvzgukNHsZNdqRmJ+absTb3UHMdABVquAsdIbJcPGEwnR+1ubrl3QaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLGvWHxuBvFe0UGv21I/PrO5IigMB8GA1UdIwQY
MBaAFFC2/uDnoUx+HThgnZvDwu/MrzOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2Qt
ZmQ2NjRmMDMyOTgwLzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2QtZmQ2NjRmMDMyOTgw
LzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjP4BHmc
sTR+zwzGk7HyL6OyHISEKf23hSYzw0p5gdbR1KdAOYdZYPNW8Ly0pehz5FIxMpPu
G/my730RoqzzQHcCh1QNbfJAjRQexFo7U6n/mBQsTPP5nOGugIa0ja7Qz3b5lPQh
uhJgU7OCgudHa8OvAPWrQjuGshcRV9tMpNEabOq1W9kPtMo9lNlr8UZAAaqYdLWz
j7rOYi0Ovy7xTRGZii3Xdt02m1EQsk4Svl+uN6TwbJwjJwTRAWPI5D4RKmCXfIb/
7ygrbkhp6vBQ5PyMxYtT/2UCO1YiY128E6uCgtKxqowB6c65n0j++erbpH0V56bY
NQ/DPZ+Up3kfhg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:51 2025 by rpki-client