Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
File:                     UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json)
Hash identifier:          yJnzjT/xYSN9rEY7wjkNddmJqsK9EhQwJSCuwSUcGlY=
Subject key identifier:   B1:A6:EE:9C:8F:20:67:8F:C1:7C:92:46:4E:57:F4:8E:8B:36:C8:78
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Certificate issuer:       /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial:       01983382313C5CEC8BED12AB35791A8B141F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
Manifest number:          14AF
Signing time:             Tue 22 Jul 2025 19:00:26 +0000
Manifest this update:     Tue 22 Jul 2025 19:00:26 +0000
Manifest next update:     Wed 23 Jul 2025 19:00:26 +0000
Files and hashes:         1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=)
                          2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=)
                          3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=)
                          4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=)
                          5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=)
                          6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=)
                          7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: dwEz9r+F8WbEldf7FUXP6L1n3yRzsnUpf8/IbUIjQSE=)
                          8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=)
                          9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=)
                          10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=)
                          11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=)
                          12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:82:31:3c:5c:ec:8b:ed:12:ab:35:79:1a:8b:14:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
        Validity
            Not Before: Jul 22 19:00:26 2025 GMT
            Not After : Jul 23 19:00:26 2025 GMT
        Subject: CN=b1a6ee9c8f20678fc17c92464e57f48e8b36c878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:ce:36:0e:a6:cd:40:0f:d1:82:e9:19:8b:
                    25:bc:52:cb:89:25:49:8e:f6:6e:e7:d5:f2:c9:e4:
                    e4:ca:e9:9d:2c:9c:50:80:45:57:f8:74:fb:76:46:
                    3d:2a:95:85:98:49:f9:6e:f9:ef:5c:25:91:80:87:
                    fe:5c:01:e7:e8:ad:59:d1:98:8e:37:9a:f4:95:07:
                    9c:06:d3:1d:33:d4:56:e2:c0:85:a2:03:59:9b:e2:
                    27:44:bf:67:f4:72:f0:38:93:c8:6d:0b:2a:29:ff:
                    99:56:27:12:05:00:5c:48:01:ed:ff:bf:e1:8f:33:
                    02:54:57:b4:4a:47:56:34:d1:97:54:da:a3:cf:f3:
                    3f:03:99:3c:21:39:93:ff:15:03:02:ab:95:d7:98:
                    a7:e2:2a:5a:c7:da:95:33:da:f9:2d:3f:de:6c:d5:
                    80:70:21:ab:4d:d6:53:2d:22:9b:c6:49:96:2d:6f:
                    dd:04:a7:30:42:03:09:17:f2:00:02:06:18:25:33:
                    09:64:8d:1c:13:3d:b2:55:18:42:d5:8d:c0:cf:c7:
                    34:17:c3:dd:45:ef:bf:3a:db:07:ee:78:32:b4:c0:
                    e6:d5:dc:65:af:f9:72:ba:b8:b4:97:8a:be:37:32:
                    be:5e:ea:43:2d:19:bf:75:1d:48:2c:4b:a9:70:5d:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A6:EE:9C:8F:20:67:8F:C1:7C:92:46:4E:57:F4:8E:8B:36:C8:78
            X509v3 Authority Key Identifier:
                keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:75:e7:a2:4d:40:8a:5a:3e:7c:c1:19:08:35:89:76:5d:9f:
         9c:59:65:80:87:fc:54:57:b3:b4:f6:39:b1:af:eb:ac:44:7b:
         32:96:70:1e:76:04:9a:5e:66:c8:7a:2f:36:13:d0:05:89:4c:
         25:c0:af:e7:90:b1:76:e2:b5:ec:dc:75:c9:cf:24:60:20:fa:
         76:e2:96:86:7b:99:12:fc:66:29:f4:74:c7:91:41:f0:e6:44:
         1c:24:3c:40:d0:33:97:7c:8d:e8:c3:ff:d4:fd:16:75:00:1b:
         0d:09:a6:3f:88:27:ab:8f:5c:a9:bf:be:e1:1d:7b:d9:b0:ce:
         c8:a7:fd:43:bd:95:fd:ec:75:95:4d:4d:0c:79:4d:6d:a5:17:
         23:80:12:de:7e:a1:d4:a6:51:99:7d:48:88:ae:a6:8c:c3:26:
         71:bb:bf:39:d3:24:d4:fb:3a:16:0b:d8:40:77:77:ca:75:36:
         01:c4:e3:3d:c2:1c:55:ef:b5:de:3f:36:1b:7f:7c:73:9a:56:
         3f:ce:78:ca:02:b9:d5:ca:73:05:c4:dc:34:db:cd:4e:cd:bf:
         82:9f:52:23:4a:39:ce:9b:45:b6:54:9c:e7:72:36:8a:75:d8:
         a3:86:fa:e3:a7:2a:0d:e6:25:79:38:54:45:89:7f:91:aa:03:
         62:6b:72:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzgjE8XOyL7RKrNXkaixQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4
YWJmZDIwHhcNMjUwNzIyMTkwMDI2WhcNMjUwNzIzMTkwMDI2WjAzMTEwLwYDVQQD
EyhiMWE2ZWU5YzhmMjA2NzhmYzE3YzkyNDY0ZTU3ZjQ4ZThiMzZjODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlorONg6mzUAP0YLpGYslvFLLiSVJ
jvZu59XyyeTkyumdLJxQgEVX+HT7dkY9KpWFmEn5bvnvXCWRgIf+XAHn6K1Z0ZiO
N5r0lQecBtMdM9RW4sCFogNZm+InRL9n9HLwOJPIbQsqKf+ZVicSBQBcSAHt/7/h
jzMCVFe0SkdWNNGXVNqjz/M/A5k8ITmT/xUDAquV15in4ipax9qVM9r5LT/ebNWA
cCGrTdZTLSKbxkmWLW/dBKcwQgMJF/IAAgYYJTMJZI0cEz2yVRhC1Y3Az8c0F8Pd
Re+/OtsH7ngytMDm1dxlr/lyuri0l4q+NzK+XupDLRm/dR1ILEupcF1JhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGm7pyPIGePwXySRk5X9I6LNsh4MB8GA1UdIwQY
MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt
NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm
LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInXnok1A
ilo+fMEZCDWJdl2fnFllgIf8VFeztPY5sa/rrER7MpZwHnYEml5myHovNhPQBYlM
JcCv55CxduK17Nx1yc8kYCD6duKWhnuZEvxmKfR0x5FB8OZEHCQ8QNAzl3yN6MP/
1P0WdQAbDQmmP4gnq49cqb++4R172bDOyKf9Q72V/ex1lU1NDHlNbaUXI4AS3n6h
1KZRmX1IiK6mjMMmcbu/OdMk1Ps6FgvYQHd3ynU2AcTjPcIcVe+13j82G398c5pW
P854ygK51cpzBcTcNNvNTs2/gp9SI0o5zptFtlSc53I2inXYo4b646cqDeYleThU
RYl/kaoDYmtyig==
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:40:45 2025 by rpki-client