Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
File:                     uBcWKHfan0Awu8uf6KwUPmqyhxs.mft (raw, json)
Hash identifier:          EDlx/8JsLPLoUP+ooQDykRpKuuKfA8N7pZkV5oUVKNM=
Subject key identifier:   7D:F6:5F:01:CA:DE:45:BD:9D:F7:D7:67:CF:B4:58:62:D2:F3:C0:F8
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Certificate issuer:       /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial:       0199C78EB6BBE9F29CDEE61A8A9C03F496B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
Manifest number:          1551
Signing time:             Thu 09 Oct 2025 06:00:42 +0000
Manifest this update:     Thu 09 Oct 2025 06:00:42 +0000
Manifest next update:     Fri 10 Oct 2025 06:00:42 +0000
Files and hashes:         1: 6fALmraPYTNzrDxh6vD4pXx9NNo.roa (hash: IR39vkYsMLt99b48+vTeA5PN8tz8iuYqmEyOAKvAc/A=)
                          2: BpIEEpORYhLtmm2kEFVbM4yVpac.roa (hash: 8uP50sMQkVgJzde0h/pFWMnj4GJWasY6iyv+/p9heSU=)
                          3: m8u-o_vicIqlceoASQ0qNaAVPIQ.roa (hash: yHtYWyIipHFt981m+Z6wuEEsFCa3G3jeZI4OXrwC65o=)
                          4: seEl6XJp9pRNsuesbnV0Wf4MSTA.roa (hash: NW4u7tixKiH/5QUKQ2Hl8N3lyjhoJwZLOZkIyWrpA8g=)
                          5: uBcWKHfan0Awu8uf6KwUPmqyhxs.crl (hash: FnPdZuPsgBMivgN6IbdYmktc1UaBEZh5ALEHGbN5gyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Oct 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c7:8e:b6:bb:e9:f2:9c:de:e6:1a:8a:9c:03:f4:96:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
        Validity
            Not Before: Oct  9 06:00:42 2025 GMT
            Not After : Oct 10 06:00:42 2025 GMT
        Subject: CN=7df65f01cade45bd9df7d767cfb45862d2f3c0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:b4:e4:bb:b7:e9:3b:ac:df:cc:3b:97:f8:
                    68:cc:02:2c:f2:2a:95:30:58:3b:df:e4:66:33:64:
                    32:01:91:e7:3c:1e:6f:45:20:bc:1d:a5:8f:b6:96:
                    85:fa:30:5c:ef:31:bc:5c:42:58:b4:7c:e4:da:d1:
                    93:b7:31:0f:1f:bf:b0:62:d4:dc:30:75:76:61:af:
                    7f:8b:81:e4:31:cc:c5:06:70:87:55:8f:28:eb:10:
                    7c:a3:d6:fa:75:e9:05:d0:b3:7d:fd:65:10:41:25:
                    91:18:3d:27:47:8f:c7:c1:be:bd:c1:5a:84:cc:83:
                    38:d0:a6:de:7b:52:e1:e0:7b:98:50:80:be:62:08:
                    04:1d:78:87:3b:c6:25:6a:5a:59:0d:3e:6d:44:15:
                    52:af:59:54:8f:ae:a1:c6:f0:0f:88:4e:e0:74:d9:
                    e9:2d:c2:1d:03:a7:68:e9:8c:1b:dd:3c:13:89:f7:
                    9e:90:71:c1:2a:ac:5f:fa:f6:ae:62:ba:8d:8e:a0:
                    86:18:3f:89:c1:eb:68:7d:69:85:91:74:4a:84:c6:
                    e6:9f:0e:81:d3:6b:28:f0:1f:31:58:52:db:46:f8:
                    88:a0:d6:dc:19:d3:10:86:d0:a5:51:b9:c6:4a:6a:
                    e9:91:40:8b:56:a0:0d:bf:2b:80:ff:2a:91:a9:e2:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:5F:01:CA:DE:45:BD:9D:F7:D7:67:CF:B4:58:62:D2:F3:C0:F8
            X509v3 Authority Key Identifier:
                keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:c8:09:9c:3d:b9:2a:31:32:b8:ef:a1:78:54:73:6c:1f:
         5e:16:9b:29:e6:fb:36:c6:74:a5:9f:6b:f2:91:6b:99:d5:15:
         ed:b7:6b:3c:7a:9a:1f:c2:5d:27:19:d8:48:8c:f5:0b:d4:7d:
         97:b7:e0:80:d3:a6:c7:c5:d3:00:fc:d6:a5:6c:b8:24:e0:0f:
         58:1b:eb:22:31:53:95:9c:67:b2:0d:c0:00:c5:29:8a:33:1c:
         84:48:0a:07:da:7d:a9:9a:39:7d:aa:ba:fa:f1:8d:4e:00:f9:
         19:48:f3:c9:56:c4:69:05:95:c2:28:97:65:a6:be:5f:84:6c:
         98:22:fc:1b:4a:62:72:15:24:66:c4:32:0e:d7:2c:34:9c:8f:
         ac:9b:4b:de:b0:6b:c8:95:b4:fe:63:a6:43:73:ca:75:26:24:
         d5:43:a4:1b:5c:d3:27:06:19:87:cb:44:74:99:1a:04:e7:09:
         8a:f7:7b:5e:96:e0:e7:0d:32:d3:67:d4:7e:88:de:ee:90:29:
         3f:46:5f:62:fa:0d:b8:8d:d1:1d:ef:42:6a:0f:30:99:4b:4e:
         81:a9:ec:33:ba:f0:bb:5a:cf:84:22:a5:03:53:bd:e2:57:2d:
         83:b0:fd:c4:56:96:5d:9a:a6:3a:27:36:f2:14:4d:f2:29:39:
         c2:59:9f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnHjra76fKc3uYaipwD9Ja1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTcxNjI4NzdkYTlmNDAzMGJiY2I5ZmU4YWMxNDNlNmFi
Mjg3MWIwHhcNMjUxMDA5MDYwMDQyWhcNMjUxMDEwMDYwMDQyWjAzMTEwLwYDVQQD
Eyg3ZGY2NWYwMWNhZGU0NWJkOWRmN2Q3NjdjZmI0NTg2MmQyZjNjMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkK05Lu36Tus38w7l/hozAIs8iqV
MFg73+RmM2QyAZHnPB5vRSC8HaWPtpaF+jBc7zG8XEJYtHzk2tGTtzEPH7+wYtTc
MHV2Ya9/i4HkMczFBnCHVY8o6xB8o9b6dekF0LN9/WUQQSWRGD0nR4/Hwb69wVqE
zIM40Kbee1Lh4HuYUIC+YggEHXiHO8YlalpZDT5tRBVSr1lUj66hxvAPiE7gdNnp
LcIdA6do6Ywb3TwTifeekHHBKqxf+vauYrqNjqCGGD+JwetofWmFkXRKhMbmnw6B
02so8B8xWFLbRviIoNbcGdMQhtClUbnGSmrpkUCLVqANvyuA/yqRqeLrVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH32XwHK3kW9nffXZ8+0WGLS88D4MB8GA1UdIwQY
MBaAFLgXFih32p9AMLvLn+isFD5qsocbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQt
YjI3Y2EyOTFiZDc3LzEvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQtYjI3Y2EyOTFiZDc3
LzEvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6HICZw9
uSoxMrjvoXhUc2wfXhabKeb7NsZ0pZ9r8pFrmdUV7bdrPHqaH8JdJxnYSIz1C9R9
l7fggNOmx8XTAPzWpWy4JOAPWBvrIjFTlZxnsg3AAMUpijMchEgKB9p9qZo5faq6
+vGNTgD5GUjzyVbEaQWVwiiXZaa+X4RsmCL8G0pichUkZsQyDtcsNJyPrJtL3rBr
yJW0/mOmQ3PKdSYk1UOkG1zTJwYZh8tEdJkaBOcJivd7Xpbg5w0y02fUfoje7pAp
P0ZfYvoNuI3RHe9Cag8wmUtOgansM7rwu1rPhCKlA1O94lctg7D9xFaWXZqmOic2
8hRN8ik5wlmfFw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 08:58:52 2025 by rpki-client