Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          r2qXxrJ2IYWEUWJuhz1dPbgnQlQCssjetQDJehM7zec=
Subject key identifier:   EA:71:BA:00:B5:D7:93:18:55:20:76:21:BD:3C:DD:77:44:C6:04:37
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       01984A40E800820BC6F7298AA39A6F8AC441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          12D8
Signing time:             Sun 27 Jul 2025 05:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:24 +0000
Files and hashes:         1: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (hash: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=)
                          2: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: g8FmQnQ8pQ2oYd2njI2sX1x8LMNaUvukps2kaRj7xbY=)
                          3: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (hash: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=)
                          4: elKWmf6BGTWMt5DvOkJSmfgI6Qc.roa (hash: XewDawQR0+tbCE/3KxBoInLYooxTPbPPCM6MSvyHwQE=)
                          5: foa891AnmG5IItmg1Wf-_lEJLDs.roa (hash: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=)
                          6: ro7x5tBi5pz3qKIPLgpN5cezxqA.roa (hash: 5qgWdLvv6h/u7ssCLQ9odiZwNdNNYlXCXXprQdKkz2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:e8:00:82:0b:c6:f7:29:8a:a3:9a:6f:8a:c4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Jul 27 05:00:24 2025 GMT
            Not After : Jul 28 05:00:24 2025 GMT
        Subject: CN=ea71ba00b5d7931855207621bd3cdd7744c60437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:9f:1c:c4:1a:a6:e4:00:5e:54:ff:74:0a:
                    3b:b2:41:58:43:bf:e1:4d:b9:b3:24:61:5b:e9:f3:
                    16:17:a9:5d:14:5c:5b:cf:14:2f:76:6a:26:72:f0:
                    28:c8:29:7f:8c:5f:3b:85:30:54:8f:5f:d1:76:0c:
                    d5:0e:e8:92:45:5c:bc:c4:27:0e:65:9d:0a:cb:9f:
                    39:61:b0:b0:14:16:fd:81:e4:ab:3c:1f:a9:4f:31:
                    31:58:55:8c:29:5e:b3:08:22:ee:ae:7a:38:e1:76:
                    20:91:f4:34:3c:d3:d4:73:c5:d2:a9:fa:4e:3e:dd:
                    48:f2:78:5c:0e:bc:6d:ad:91:eb:e1:b3:4e:bf:96:
                    11:f9:a2:51:4d:6f:73:fa:3f:7b:8e:1a:c7:d8:5b:
                    d2:5a:59:6e:87:7f:81:ec:a8:6b:1b:78:33:f3:0c:
                    a8:75:da:3e:33:3b:22:3e:08:7c:bf:ac:84:8c:69:
                    81:19:75:49:e1:b5:f2:23:6d:77:d6:c6:42:a5:48:
                    df:8f:e6:e4:49:19:ce:b4:67:56:23:aa:a6:02:06:
                    15:69:86:21:35:45:22:8a:1c:36:2a:95:12:e7:64:
                    50:6c:3d:7d:26:fb:62:57:0f:18:88:88:f8:97:5b:
                    b3:d4:40:4e:b9:b8:9e:2f:80:3c:61:1b:b3:a3:c4:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:BA:00:B5:D7:93:18:55:20:76:21:BD:3C:DD:77:44:C6:04:37
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:60:6b:a9:9e:f4:25:4f:e2:6f:7a:2e:56:d2:8b:cc:52:e8:
         d3:9d:c5:c1:d3:86:0f:64:77:af:90:37:63:b4:14:68:b1:e4:
         ce:ff:15:63:a5:eb:32:b9:1c:db:84:46:ee:b6:e8:ed:46:b0:
         74:a3:1d:44:d8:5f:95:49:43:63:c6:7d:a1:f8:43:cd:a2:6b:
         fa:b9:3d:79:06:55:37:cc:d2:8d:4d:ac:ef:70:00:cc:c9:ff:
         8f:fe:f6:4f:bf:73:a7:c9:fc:9d:fa:8c:ee:20:d4:bd:22:87:
         b7:1a:26:86:bd:38:34:c9:b3:ed:c3:f6:99:6e:87:6b:74:38:
         13:4b:83:78:27:fa:e8:b1:5e:85:f0:c3:41:63:52:cb:08:aa:
         ae:37:e6:5c:73:74:94:e1:60:82:64:d0:6b:7f:49:61:33:2b:
         33:54:2a:05:b2:4e:5f:f6:eb:6d:38:d8:9a:52:38:65:53:1b:
         ff:d2:82:58:bb:43:98:39:cb:79:0a:b9:7b:3e:4f:b2:3f:f3:
         b2:ea:f8:29:44:86:7b:99:b7:1b:86:f3:3e:94:da:22:48:51:
         f4:38:98:14:3c:77:72:45:10:b0:54:4d:3a:1e:eb:a7:ec:68:
         72:8c:b5:84:00:a1:34:6c:9d:2d:bb:5c:72:57:03:ff:04:7d:
         97:01:52:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQOgAggvG9ymKo5pvisRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm
ZGQ1MGIwHhcNMjUwNzI3MDUwMDI0WhcNMjUwNzI4MDUwMDI0WjAzMTEwLwYDVQQD
EyhlYTcxYmEwMGI1ZDc5MzE4NTUyMDc2MjFiZDNjZGQ3NzQ0YzYwNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAqfHMQapuQAXlT/dAo7skFYQ7/h
TbmzJGFb6fMWF6ldFFxbzxQvdmomcvAoyCl/jF87hTBUj1/RdgzVDuiSRVy8xCcO
ZZ0Ky585YbCwFBb9geSrPB+pTzExWFWMKV6zCCLurno44XYgkfQ0PNPUc8XSqfpO
Pt1I8nhcDrxtrZHr4bNOv5YR+aJRTW9z+j97jhrH2FvSWlluh3+B7KhrG3gz8wyo
ddo+MzsiPgh8v6yEjGmBGXVJ4bXyI2131sZCpUjfj+bkSRnOtGdWI6qmAgYVaYYh
NUUiihw2KpUS52RQbD19JvtiVw8YiIj4l1uz1EBOubieL4A8YRuzo8TzwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpxugC115MYVSB2Ib083XdExgQ3MB8GA1UdIwQY
MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt
ZGUwNWM1NDA0NWJiLzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi
LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGBrqZ70
JU/ib3ouVtKLzFLo053FwdOGD2R3r5A3Y7QUaLHkzv8VY6XrMrkc24RG7rbo7Uaw
dKMdRNhflUlDY8Z9ofhDzaJr+rk9eQZVN8zSjU2s73AAzMn/j/72T79zp8n8nfqM
7iDUvSKHtxomhr04NMmz7cP2mW6Ha3Q4E0uDeCf66LFehfDDQWNSywiqrjfmXHN0
lOFggmTQa39JYTMrM1QqBbJOX/brbTjYmlI4ZVMb/9KCWLtDmDnLeQq5ez5Psj/z
sur4KUSGe5m3G4bzPpTaIkhR9DiYFDx3ckUQsFRNOh7rp+xocoy1hAChNGydLbtc
clcD/wR9lwFSHg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:54 2025 by rpki-client