Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          Mtln7mgfAgsvo7ARN6zunSXjy10PDTHXsBoLx7/4+3M=
Subject key identifier:   EE:9A:37:8D:4E:D3:E6:FE:3E:D0:C4:8C:88:CB:59:18:89:3E:3D:50
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       01984965C85E7DF5AE70634D4FA543111836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          0F2B
Signing time:             Sun 27 Jul 2025 01:01:03 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:03 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:03 +0000
Files and hashes:         1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: YQVDlE45DNNX71fVWgDUZbd/ZJdeA8BUYCCBqyIVvpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:c8:5e:7d:f5:ae:70:63:4d:4f:a5:43:11:18:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Jul 27 01:01:03 2025 GMT
            Not After : Jul 28 01:01:03 2025 GMT
        Subject: CN=ee9a378d4ed3e6fe3ed0c48c88cb5918893e3d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:ba:f5:ed:19:51:42:bf:8d:d8:99:f3:32:
                    2c:7b:9c:fc:1c:f4:68:1a:0e:80:28:87:cf:f7:6d:
                    d5:c1:37:3a:5f:54:2c:aa:51:1c:6b:ac:77:6f:93:
                    55:76:b0:cf:ed:7e:ed:23:fb:2d:37:a5:4a:00:01:
                    86:bf:93:b1:31:b6:38:1a:4b:82:6e:63:21:be:65:
                    b3:18:66:82:11:ef:c8:e6:2f:87:cf:70:85:ed:90:
                    88:ce:b1:1f:a6:7f:04:d5:f8:7a:db:40:55:9d:2c:
                    a3:da:0a:7a:3f:5a:49:98:cf:4b:35:5a:06:18:03:
                    65:4d:4a:6d:e1:23:25:c7:71:3c:26:a8:c1:09:45:
                    37:11:30:92:b7:46:1d:3d:1d:28:f0:c8:89:5a:42:
                    f5:47:c8:72:12:83:24:15:64:fd:21:bd:01:44:be:
                    95:0d:f0:ef:85:44:ce:7f:b5:19:26:b6:4a:d2:3b:
                    c3:a8:4b:43:51:6d:b6:97:c5:00:c7:4a:f8:90:c8:
                    8a:e8:ce:58:d2:22:38:f4:4c:99:8e:e3:32:3d:d1:
                    4e:c8:df:2e:db:68:60:da:bd:18:14:7a:74:17:43:
                    03:72:6f:53:45:df:24:34:9d:f0:c5:3f:f6:c7:b0:
                    a4:1b:f6:51:7c:1d:49:8d:0e:6a:37:40:d2:b7:a5:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:37:8D:4E:D3:E6:FE:3E:D0:C4:8C:88:CB:59:18:89:3E:3D:50
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:88:b7:e1:88:f5:93:dd:44:6e:e5:17:90:39:15:7a:20:35:
         c8:03:9d:20:11:e1:db:ae:fa:68:82:65:92:2f:6e:44:7d:20:
         cd:c8:62:a8:d7:25:4a:7c:7d:08:d7:bd:ab:f2:bb:47:12:57:
         09:6d:5c:93:0c:02:ea:9a:a1:1a:fe:55:ce:6e:69:a7:c2:12:
         9d:0f:61:2c:a3:c5:19:4a:25:1c:e7:06:0a:c0:bd:f1:94:9a:
         81:13:8a:47:d8:54:b8:1c:7a:af:48:8a:b1:a1:df:05:07:b1:
         f9:0e:2b:bf:ad:70:16:17:80:b3:65:e1:26:37:5f:f2:95:0c:
         de:37:29:5c:81:cb:cb:80:6c:93:cf:c0:06:a3:85:33:d1:82:
         dc:15:dc:2a:56:0a:60:51:f4:a4:5c:df:f9:4e:41:d8:70:8d:
         90:c0:30:36:29:d1:5c:7e:e7:f4:16:36:68:35:78:99:d5:5c:
         c0:49:f9:1d:74:a0:a2:b4:79:7d:59:f3:75:9a:48:55:cf:21:
         62:fc:e7:61:ba:6b:aa:81:e9:c4:17:b7:a3:de:b7:6f:d7:11:
         69:97:e1:21:27:08:89:6f:15:77:e5:ff:b9:36:14:1e:e4:7a:
         92:c8:c8:04:28:c2:f4:cf:b1:51:d4:81:51:27:4b:e9:8c:e0:
         0e:90:e8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZcheffWucGNNT6VDERg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDU5NmNlNjA3M2U4ZWRlZGM1MTA1ZjgxNGVjOTcxOTFi
NWUxZDUwHhcNMjUwNzI3MDEwMTAzWhcNMjUwNzI4MDEwMTAzWjAzMTEwLwYDVQQD
EyhlZTlhMzc4ZDRlZDNlNmZlM2VkMGM0OGM4OGNiNTkxODg5M2UzZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNO69e0ZUUK/jdiZ8zIse5z8HPRo
Gg6AKIfP923VwTc6X1QsqlEca6x3b5NVdrDP7X7tI/stN6VKAAGGv5OxMbY4GkuC
bmMhvmWzGGaCEe/I5i+Hz3CF7ZCIzrEfpn8E1fh620BVnSyj2gp6P1pJmM9LNVoG
GANlTUpt4SMlx3E8JqjBCUU3ETCSt0YdPR0o8MiJWkL1R8hyEoMkFWT9Ib0BRL6V
DfDvhUTOf7UZJrZK0jvDqEtDUW22l8UAx0r4kMiK6M5Y0iI49EyZjuMyPdFOyN8u
22hg2r0YFHp0F0MDcm9TRd8kNJ3wxT/2x7CkG/ZRfB1JjQ5qN0DSt6XFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6aN41O0+b+PtDEjIjLWRiJPj1QMB8GA1UdIwQY
MBaAFFAFls5gc+jt7cUQX4FOyXGRteHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUt
MWUxNjdmYTExM2IyLzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUtMWUxNjdmYTExM2Iy
LzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoi34Yj1
k91EbuUXkDkVeiA1yAOdIBHh2676aIJlki9uRH0gzchiqNclSnx9CNe9q/K7RxJX
CW1ckwwC6pqhGv5Vzm5pp8ISnQ9hLKPFGUolHOcGCsC98ZSagROKR9hUuBx6r0iK
saHfBQex+Q4rv61wFheAs2XhJjdf8pUM3jcpXIHLy4Bsk8/ABqOFM9GC3BXcKlYK
YFH0pFzf+U5B2HCNkMAwNinRXH7n9BY2aDV4mdVcwEn5HXSgorR5fVnzdZpIVc8h
YvznYbprqoHpxBe3o963b9cRaZfhIScIiW8Vd+X/uTYUHuR6ksjIBCjC9M+xUdSB
USdL6YzgDpDoBg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:30 2025 by rpki-client