Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          Qqm3y6XRNv4Qj65zcO03Yx6afCqwGOCookYcNHctKpw=
Subject key identifier:   3C:E6:52:A3:15:AB:1B:55:1C:37:98:FD:B9:3F:C9:92:CE:74:10:EB
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019833B9A524423E2593618FFB07B42C8120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          034D
Signing time:             Tue 22 Jul 2025 20:01:01 +0000
Manifest this update:     Tue 22 Jul 2025 20:01:01 +0000
Manifest next update:     Wed 23 Jul 2025 20:01:01 +0000
Files and hashes:         1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=)
                          2: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=)
                          3: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=)
                          4: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=)
                          5: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=)
                          6: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=)
                          7: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=)
                          8: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=)
                          9: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=)
                          10: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=)
                          11: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=)
                          12: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=)
                          13: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=)
                          14: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=)
                          15: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=)
                          16: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=)
                          17: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=)
                          18: iyGn9-N4_Y-74wtv84vIggbUgGE.roa (hash: 0+sbmwNGxEETCuI+TbmtpOScQW3Ga70I+RwZkGrwt4I=)
                          19: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=)
                          20: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=)
                          21: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: Zs6ZIrxoTu9bGpCGthvCUEvJr7qb55X5FhMcy0EDJ5s=)
                          22: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=)
                          23: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:b9:a5:24:42:3e:25:93:61:8f:fb:07:b4:2c:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jul 22 20:01:01 2025 GMT
            Not After : Jul 23 20:01:01 2025 GMT
        Subject: CN=3ce652a315ab1b551c3798fdb93fc992ce7410eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:1e:58:47:1f:2d:ab:84:9f:7c:12:a6:f0:
                    02:a4:8d:b0:a1:8d:71:65:ed:bd:8c:9a:6e:9c:b8:
                    b2:6a:a8:bd:42:f3:f5:05:0e:90:88:30:b8:9c:29:
                    6f:ee:2d:f1:f1:59:6e:56:2c:5e:b4:85:63:f6:2d:
                    a1:97:14:44:69:3f:ad:6a:d5:66:54:06:89:9f:75:
                    e8:b9:82:32:71:f3:81:8a:91:e8:01:84:78:eb:2f:
                    82:51:ac:f9:01:4b:18:c1:1b:29:b7:d2:42:74:c7:
                    4c:fe:ef:10:5d:45:fa:76:56:1b:7f:d6:63:11:0a:
                    b5:2c:96:01:72:cd:a3:5d:1f:46:ca:00:15:c5:07:
                    d1:50:92:7f:23:c1:31:8c:86:91:25:70:32:ef:9c:
                    b3:d3:fa:07:63:bf:19:3c:10:f3:18:b7:8c:83:14:
                    2d:eb:f1:b0:1d:25:3e:8c:9d:25:fb:20:bb:0a:7a:
                    ca:50:c8:6a:1b:12:1e:19:94:f8:41:e1:29:2a:ba:
                    c5:b8:2a:ba:6b:bd:b8:2a:8d:ac:9d:32:00:dc:36:
                    92:56:0f:fd:05:08:f6:28:36:64:11:4b:ce:63:49:
                    bd:1e:d8:cb:0a:ef:40:d1:49:9f:d1:f0:91:05:5b:
                    1e:36:78:fc:58:dd:39:96:e5:95:43:d0:d9:61:65:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:52:A3:15:AB:1B:55:1C:37:98:FD:B9:3F:C9:92:CE:74:10:EB
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8b:1a:c1:78:4d:00:21:e8:3f:4e:58:82:8d:a1:a6:fe:13:
         59:6d:ce:ea:dc:8c:05:ca:61:fa:73:6e:88:3d:d7:35:6f:73:
         aa:3b:32:34:af:5f:04:32:24:70:2b:a6:0b:d0:f6:91:2a:b0:
         2c:2d:87:80:1f:44:e5:30:11:dd:3e:4d:d5:fc:b9:39:99:31:
         ff:38:05:ff:2d:09:87:1c:49:85:b3:c7:2e:ea:2e:f8:42:1d:
         40:05:16:b8:a6:6b:ef:5a:59:5d:19:d1:53:72:8d:86:af:94:
         86:82:c3:7e:d3:e9:16:be:b6:b0:4c:86:4e:6c:11:4c:05:d6:
         b4:f2:8b:11:5d:63:69:be:d9:94:5b:d2:20:3e:b6:84:58:5d:
         84:3a:44:43:53:70:f6:96:d3:8e:f0:8b:1c:be:dd:81:d3:d7:
         54:d6:e2:40:f7:20:3d:0c:b1:c2:57:65:15:36:d1:8d:2b:71:
         cc:28:4e:37:6a:32:ce:3e:84:73:1d:df:b6:9d:de:95:a0:68:
         fb:42:37:25:d0:db:2d:d5:c1:c6:b9:40:42:85:42:a0:28:8d:
         74:f0:63:54:5c:a7:3b:fb:a5:ef:e5:54:9e:71:18:41:78:e6:
         58:0b:7c:e5:64:c9:44:93:2c:01:e9:2f:4e:a5:27:67:82:2d:
         98:22:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:57:33 2025 by rpki-client