Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
File:                     uqs_CIW1VmubFTPSCW32jlSf7D4.mft (raw, json)
Hash identifier:          I/eO3bYvKV0RV4UgJqhVjqGRLdU3jwDTriUJDfwx/Jg=
Subject key identifier:   90:2F:B5:4E:00:44:8A:17:57:B0:92:81:DC:5A:2B:78:57:EA:A1:2D
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Certificate issuer:       /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial:       0198462D12B544DC04676CEAB43752D2AA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
Manifest number:          1340
Signing time:             Sat 26 Jul 2025 10:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:15 +0000
Files and hashes:         1: UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa (hash: nd0xk/LBWR8Y1uHlUTNuhLFMAeJyMBYmIcQoIT0cSck=)
                          2: uqs_CIW1VmubFTPSCW32jlSf7D4.crl (hash: iSQICougq5QyFcHvgWHCWDwk16Z2/gxQJtsQMKHgvL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:12:b5:44:dc:04:67:6c:ea:b4:37:52:d2:aa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
        Validity
            Not Before: Jul 26 10:00:15 2025 GMT
            Not After : Jul 27 10:00:15 2025 GMT
        Subject: CN=902fb54e00448a1757b09281dc5a2b7857eaa12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:4c:6d:ed:c6:2d:5e:d3:6f:1a:d8:80:5b:b0:
                    9c:c7:9c:bc:86:52:c9:0c:8d:36:7c:22:f4:75:7e:
                    62:00:a1:e4:20:59:d0:e8:08:c2:71:30:5c:c7:8f:
                    df:5f:f9:5f:e0:6b:d2:63:54:31:d3:2c:ea:22:ed:
                    b4:57:55:77:be:94:b8:08:27:8e:bf:e1:21:63:f9:
                    7c:e9:3c:55:4b:fb:81:92:c9:c0:47:9e:ae:3b:1c:
                    bb:d8:5d:20:18:9d:f5:0a:7e:80:a2:9c:30:50:c6:
                    e6:9d:79:3a:9e:a0:4b:32:f1:6d:fe:ea:b4:00:e6:
                    0f:9c:72:c4:d7:05:2f:17:07:d2:5a:72:27:84:ca:
                    a0:5b:ab:e8:89:9f:30:86:3d:2a:ec:0e:3f:ec:38:
                    30:f2:0c:72:a7:90:e3:7c:e2:40:5a:ff:f0:03:cd:
                    92:76:13:cd:c4:26:5d:8f:7e:3f:22:e3:a0:f6:fd:
                    d5:63:b5:e6:1a:ed:86:63:06:42:5e:8a:0b:3e:05:
                    e0:b1:3b:ff:6f:90:75:66:4c:5c:76:d1:04:ee:73:
                    a3:aa:bd:ec:e6:05:97:98:96:eb:01:64:cf:2a:c3:
                    a4:fa:f3:ac:3e:58:6e:fa:eb:b7:85:24:51:af:29:
                    a8:35:4d:5a:b5:bd:46:99:af:72:e3:51:13:73:52:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:B5:4E:00:44:8A:17:57:B0:92:81:DC:5A:2B:78:57:EA:A1:2D
            X509v3 Authority Key Identifier:
                keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:ed:ff:ff:d3:a8:c4:9d:83:b8:25:a8:43:8e:97:9e:34:
         8d:78:2a:cc:47:5b:cb:fa:0e:79:bb:5d:64:50:b4:67:78:d7:
         3a:49:e0:a0:26:c6:55:b3:74:59:4a:c8:dc:09:1f:cc:3f:2e:
         50:65:35:4e:ff:55:af:b6:4a:e9:7f:d7:b0:77:48:ff:8e:fe:
         86:62:bc:e0:8e:2f:6a:c2:83:77:61:20:51:68:ed:4a:66:8d:
         5c:6d:07:e9:8c:c4:0f:01:18:2c:6e:20:9a:68:88:81:18:8c:
         53:56:24:f0:b3:08:16:ce:82:36:67:9e:f0:77:68:48:6b:ff:
         b7:aa:bb:98:fd:1f:e3:62:ba:a2:8c:9c:28:d3:9e:e0:aa:f4:
         ba:30:6e:45:93:11:dd:0c:65:87:32:27:ce:59:fd:2a:80:9f:
         7b:d4:9c:07:30:9b:fe:8b:96:2d:72:cf:c2:c8:3e:1b:70:58:
         ef:a3:53:61:48:c1:f5:61:ca:97:8d:f4:e2:54:03:d0:46:fb:
         fc:2e:f7:3f:4a:18:73:f8:79:98:9b:af:61:2a:1b:f2:86:31:
         6e:6f:d6:2e:be:35:12:8b:ca:14:b3:30:d0:9d:a9:37:a8:b6:
         3c:06:20:30:e2:22:e8:b8:bd:97:3d:f7:23:3d:75:93:bb:63:
         f8:01:aa:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLRK1RNwEZ2zqtDdS0qpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWIzZjA4ODViNTU2NmI5YjE1MzNkMjA5NmRmNjhlNTQ5
ZmVjM2UwHhcNMjUwNzI2MTAwMDE1WhcNMjUwNzI3MTAwMDE1WjAzMTEwLwYDVQQD
Eyg5MDJmYjU0ZTAwNDQ4YTE3NTdiMDkyODFkYzVhMmI3ODU3ZWFhMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0xt7cYtXtNvGtiAW7Ccx5y8hlLJ
DI02fCL0dX5iAKHkIFnQ6AjCcTBcx4/fX/lf4GvSY1Qx0yzqIu20V1V3vpS4CCeO
v+EhY/l86TxVS/uBksnAR56uOxy72F0gGJ31Cn6AopwwUMbmnXk6nqBLMvFt/uq0
AOYPnHLE1wUvFwfSWnInhMqgW6voiZ8whj0q7A4/7Dgw8gxyp5DjfOJAWv/wA82S
dhPNxCZdj34/IuOg9v3VY7XmGu2GYwZCXooLPgXgsTv/b5B1ZkxcdtEE7nOjqr3s
5gWXmJbrAWTPKsOk+vOsPlhu+uu3hSRRrymoNU1atb1Gma9y41ETc1IxEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAvtU4ARIoXV7CSgdxaK3hX6qEtMB8GA1UdIwQY
MBaAFLqrPwiFtVZrmxUz0glt9o5Un+w+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYt
OWFmMTNmODM2ODc5LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYtOWFmMTNmODM2ODc5
LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7ft///T
qMSdg7glqEOOl540jXgqzEdby/oOebtdZFC0Z3jXOkngoCbGVbN0WUrI3AkfzD8u
UGU1Tv9Vr7ZK6X/XsHdI/47+hmK84I4vasKDd2EgUWjtSmaNXG0H6YzEDwEYLG4g
mmiIgRiMU1Yk8LMIFs6CNmee8HdoSGv/t6q7mP0f42K6ooycKNOe4Kr0ujBuRZMR
3QxlhzInzln9KoCfe9ScBzCb/ouWLXLPwsg+G3BY76NTYUjB9WHKl4304lQD0Eb7
/C73P0oYc/h5mJuvYSob8oYxbm/WLr41EovKFLMw0J2pN6i2PAYgMOIi6Li9lz33
Iz11k7tj+AGqCA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:10 2025 by rpki-client