Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File:                     UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier:          OJT+kKrQpDUVA1tRBmBqVguCMW0FU1Y1uFrISoU7/5k=
Subject key identifier:   A7:62:93:0B:90:A6:9F:CF:8A:F4:0C:7F:2D:CA:39:0C:AF:EE:50:C4
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer:       /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial:       019827EC0C8CC826870B573B68FA9998A41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number:          45
Signing time:             Sun 20 Jul 2025 13:00:37 +0000
Manifest this update:     Sun 20 Jul 2025 13:00:37 +0000
Manifest next update:     Mon 21 Jul 2025 13:00:37 +0000
Files and hashes:         1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: yALGa45LFUeXa1dolWCYeXPAn5WCi6fyFlrQCXmd5es=)
                          2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:ec:0c:8c:c8:26:87:0b:57:3b:68:fa:99:98:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
        Validity
            Not Before: Jul 20 13:00:37 2025 GMT
            Not After : Jul 21 13:00:37 2025 GMT
        Subject: CN=a762930b90a69fcf8af40c7f2dca390cafee50c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:42:db:98:0f:4f:42:dd:c1:6c:01:16:c5:
                    f0:e4:b8:0e:0a:2f:8e:22:b9:dd:04:a3:4c:55:04:
                    77:78:6f:1f:8d:9b:08:85:bb:3f:fc:69:f8:e5:d0:
                    74:c1:8d:ed:ba:08:eb:93:c2:7d:71:e4:77:6c:d9:
                    8f:e5:52:f8:fa:dd:5e:e8:d4:04:1b:cc:9c:63:c2:
                    7b:4d:34:f7:87:92:e8:00:33:8f:c8:51:71:4c:9d:
                    57:f5:38:38:a7:34:1e:f7:e9:b4:e5:31:72:fa:32:
                    65:f1:f0:fe:87:94:bb:01:33:78:fd:4b:db:66:16:
                    4f:30:a1:58:13:22:ef:57:87:46:92:19:6a:62:7b:
                    d9:d1:07:66:bf:8d:6f:71:aa:4c:d7:b3:53:fd:f0:
                    11:11:c5:db:7d:d4:0d:75:88:dd:a0:b2:52:e4:73:
                    63:b9:de:2f:b4:c1:ac:03:7f:dc:f4:19:d1:9e:0a:
                    29:fa:65:cc:83:e9:d2:9c:57:b8:4d:1e:9a:42:1b:
                    23:8d:e2:df:ee:d5:08:70:b0:7b:33:7e:a8:fa:93:
                    26:5d:19:b5:6e:c4:96:fe:da:f1:f3:f1:3a:3d:fa:
                    85:77:08:80:d1:cc:86:55:22:6e:84:20:84:61:14:
                    28:e8:fd:66:7f:a0:05:eb:95:f8:43:b7:f3:d0:b3:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:93:0B:90:A6:9F:CF:8A:F4:0C:7F:2D:CA:39:0C:AF:EE:50:C4
            X509v3 Authority Key Identifier:
                keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:00:58:08:ad:ec:46:e9:e6:8e:c5:95:c4:26:43:a2:be:32:
         bc:52:7b:03:38:a3:e3:39:69:2f:8c:8c:b9:b4:54:fd:35:40:
         00:e1:09:5d:37:44:71:a9:a7:b1:75:b0:9e:00:a6:f0:4a:2d:
         d0:33:54:c6:cd:9d:a4:13:49:15:99:aa:81:9f:b2:94:9f:1e:
         da:37:2b:94:85:e8:ab:ba:b2:95:77:99:3a:bf:42:ec:d2:ac:
         b3:67:d3:d8:af:00:63:ec:f3:be:ae:ec:ba:c4:70:66:06:d3:
         e5:bc:6b:8e:fe:d7:09:29:90:32:b3:58:23:dd:2b:28:0b:37:
         92:04:e2:21:bf:53:d6:95:e6:29:26:84:e6:51:52:31:df:b7:
         6c:23:3f:0b:cd:90:60:c9:33:41:fe:d7:98:f8:fb:1f:2a:ee:
         95:44:de:6f:c0:d3:a1:0f:76:e7:b5:16:17:7e:6c:12:f0:3b:
         24:44:68:f5:33:d9:91:d0:44:5b:24:8d:68:0e:39:65:39:2c:
         34:51:25:7c:13:c8:d0:70:4b:d1:13:d7:51:9f:a1:ec:63:59:
         70:97:7e:cf:54:03:99:18:2d:cf:58:59:bf:d8:db:b8:86:a2:
         4f:55:55:1f:f4:3e:7b:97:ae:3e:fe:9f:38:e6:49:49:eb:46:
         ad:0f:98:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7AyMyCaHC1c7aPqZmKQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDAwNDYzMjBiZDJiMzEzNzQyOGI5OWNjYzM0YjE4NGEw
NmFjYWEwHhcNMjUwNzIwMTMwMDM3WhcNMjUwNzIxMTMwMDM3WjAzMTEwLwYDVQQD
EyhhNzYyOTMwYjkwYTY5ZmNmOGFmNDBjN2YyZGNhMzkwY2FmZWU1MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVRC25gPT0LdwWwBFsXw5LgOCi+O
IrndBKNMVQR3eG8fjZsIhbs//Gn45dB0wY3tugjrk8J9ceR3bNmP5VL4+t1e6NQE
G8ycY8J7TTT3h5LoADOPyFFxTJ1X9Tg4pzQe9+m05TFy+jJl8fD+h5S7ATN4/Uvb
ZhZPMKFYEyLvV4dGkhlqYnvZ0Qdmv41vcapM17NT/fAREcXbfdQNdYjdoLJS5HNj
ud4vtMGsA3/c9BnRngop+mXMg+nSnFe4TR6aQhsjjeLf7tUIcLB7M36o+pMmXRm1
bsSW/trx8/E6PfqFdwiA0cyGVSJuhCCEYRQo6P1mf6AF65X4Q7fz0LPutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdikwuQpp/PivQMfy3KOQyv7lDEMB8GA1UdIwQY
MBaAFFLQBGMgvSsxN0KLmczDSxhKBqyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgt
MzBkNGM1NzI5MTQ2LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgtMzBkNGM1NzI5MTQ2
LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggBYCK3s
RunmjsWVxCZDor4yvFJ7Azij4zlpL4yMubRU/TVAAOEJXTdEcamnsXWwngCm8Eot
0DNUxs2dpBNJFZmqgZ+ylJ8e2jcrlIXoq7qylXeZOr9C7NKss2fT2K8AY+zzvq7s
usRwZgbT5bxrjv7XCSmQMrNYI90rKAs3kgTiIb9T1pXmKSaE5lFSMd+3bCM/C82Q
YMkzQf7XmPj7HyrulUTeb8DToQ9257UWF35sEvA7JERo9TPZkdBEWySNaA45ZTks
NFElfBPI0HBL0RPXUZ+h7GNZcJd+z1QDmRgtz1hZv9jbuIaiT1VVH/Q+e5euPv6f
OOZJSetGrQ+Yqw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:50 2025 by rpki-client