Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          dHWyesNH2WorYk68vayt7JG0aKxc0DggwanxZCjSvkM=
Subject key identifier:   05:FD:14:9C:3B:5F:FE:60:3D:03:38:A1:A6:16:82:E9:86:6D:22:41
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       0198481B6F40373B08E336F2D827C90E0E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          0E83
Signing time:             Sat 26 Jul 2025 19:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:14 +0000
Files and hashes:         1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: 98EqIIz/b99SBj+CFV4E3bA2RKw5XwupJ+r2GIlwwZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:6f:40:37:3b:08:e3:36:f2:d8:27:c9:0e:0e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Jul 26 19:00:14 2025 GMT
            Not After : Jul 27 19:00:14 2025 GMT
        Subject: CN=05fd149c3b5ffe603d0338a1a61682e9866d2241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:ee:f5:41:81:a2:37:13:af:06:7e:51:ac:
                    66:3f:a1:8d:21:5f:1d:b2:8a:fa:8e:b6:e0:49:db:
                    1c:3c:cd:23:88:ed:9b:24:8c:00:f0:f8:a2:7f:21:
                    3f:7c:69:84:b2:0c:79:7c:2c:35:91:01:f7:fa:eb:
                    bc:25:3c:88:81:1a:67:c2:d4:9a:5b:81:97:dd:23:
                    63:3b:f8:d6:bd:18:6f:c1:ca:dc:6f:6b:1f:5f:34:
                    b2:0f:c1:9d:31:e6:9f:e0:2c:21:de:07:31:16:29:
                    a0:ca:10:60:ee:76:92:75:43:6f:d2:f5:bd:b3:e1:
                    a9:c5:5d:9d:61:14:5f:2e:9a:bc:0b:1f:b0:7e:1b:
                    2d:6c:27:d5:39:ce:41:ad:3c:24:20:5b:6c:95:50:
                    ce:8b:b5:75:2b:2e:c8:6f:fe:48:ac:6b:fb:fc:fc:
                    89:6e:ad:a4:e7:cd:5f:85:29:a3:03:58:61:e9:2a:
                    00:5b:16:71:09:8e:66:ec:9e:f8:aa:0c:c0:43:c1:
                    83:71:69:d5:91:a5:14:62:86:8f:94:d9:7e:0f:fd:
                    9d:8c:07:56:0d:f2:82:c9:64:71:b4:33:0b:3f:95:
                    06:85:69:35:4b:a2:f4:7f:f6:75:57:7b:80:25:53:
                    35:25:d8:d6:46:95:78:e6:3f:43:47:33:91:1c:7d:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FD:14:9C:3B:5F:FE:60:3D:03:38:A1:A6:16:82:E9:86:6D:22:41
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:33:8b:a2:b8:40:11:a3:52:de:4b:33:f4:5a:51:88:2e:
         94:01:46:48:fe:bc:55:4f:84:a3:eb:9c:a2:68:18:2b:09:d2:
         85:a4:3a:40:56:3a:23:6b:64:7c:e5:49:81:35:a0:f6:3b:44:
         fa:f8:ac:f8:61:7e:09:8e:f9:41:f5:39:ac:78:90:74:48:03:
         26:89:80:36:15:9d:8d:95:29:76:5c:86:66:4d:5e:6d:97:8a:
         e7:ad:71:5c:67:3e:27:b3:8c:4d:83:15:e1:67:d5:1c:13:4f:
         02:81:af:cd:df:1d:02:db:e6:7a:82:a7:a8:7e:2f:07:dc:40:
         ea:b9:07:1f:51:d3:92:68:36:da:17:98:09:09:27:0e:07:f8:
         52:71:ef:a2:c4:45:a9:cf:6c:f6:9b:b6:c7:a1:68:6e:7a:ac:
         ee:f4:ff:0b:63:91:1a:91:0a:73:cc:1d:90:a3:8f:11:b0:70:
         a7:37:3e:6c:fd:7a:11:a5:34:21:14:5b:8b:07:7c:64:f5:3d:
         18:47:e6:a0:a0:55:72:f7:60:76:76:f1:3b:ee:31:96:1c:cc:
         78:5b:d7:4c:c7:60:60:83:fd:71:d6:35:78:a2:b9:13:94:eb:
         d6:2c:15:13:4c:82:a4:87:9c:d8:5b:8f:db:c2:96:6b:d0:dd:
         b9:89:db:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG29ANzsI4zby2CfJDg5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3
MmVkZGQwHhcNMjUwNzI2MTkwMDE0WhcNMjUwNzI3MTkwMDE0WjAzMTEwLwYDVQQD
EygwNWZkMTQ5YzNiNWZmZTYwM2QwMzM4YTFhNjE2ODJlOTg2NmQyMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwODu9UGBojcTrwZ+UaxmP6GNIV8d
sor6jrbgSdscPM0jiO2bJIwA8PiifyE/fGmEsgx5fCw1kQH3+uu8JTyIgRpnwtSa
W4GX3SNjO/jWvRhvwcrcb2sfXzSyD8GdMeaf4Cwh3gcxFimgyhBg7naSdUNv0vW9
s+GpxV2dYRRfLpq8Cx+wfhstbCfVOc5BrTwkIFtslVDOi7V1Ky7Ib/5IrGv7/PyJ
bq2k581fhSmjA1hh6SoAWxZxCY5m7J74qgzAQ8GDcWnVkaUUYoaPlNl+D/2djAdW
DfKCyWRxtDMLP5UGhWk1S6L0f/Z1V3uAJVM1JdjWRpV45j9DRzORHH3gDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX9FJw7X/5gPQM4oaYWgumGbSJBMB8GA1UdIwQY
MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct
ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5
LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8Yzi6K4
QBGjUt5LM/RaUYgulAFGSP68VU+Eo+ucomgYKwnShaQ6QFY6I2tkfOVJgTWg9jtE
+vis+GF+CY75QfU5rHiQdEgDJomANhWdjZUpdlyGZk1ebZeK561xXGc+J7OMTYMV
4WfVHBNPAoGvzd8dAtvmeoKnqH4vB9xA6rkHH1HTkmg22heYCQknDgf4UnHvosRF
qc9s9pu2x6Fobnqs7vT/C2ORGpEKc8wdkKOPEbBwpzc+bP16EaU0IRRbiwd8ZPU9
GEfmoKBVcvdgdnbxO+4xlhzMeFvXTMdgYIP9cdY1eKK5E5Tr1iwVE0yCpIec2FuP
28KWa9DduYnbnw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:02 2025 by rpki-client