Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File:                     BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier:          hWy3c0c5HdWbBUG7YQc0ISfLbRem6pB6YROBK5F/hwM=
Subject key identifier:   79:5A:D6:22:F2:1D:6D:80:81:CE:7A:2F:45:22:58:46:E7:AB:5F:5F
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer:       /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial:       01984475FC8B900CB539DA38F74D3118507A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number:          079A
Signing time:             Sat 26 Jul 2025 02:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 02:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 02:00:39 +0000
Files and hashes:         1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: 6qyx2NIzb1kp9SExYnFByGYHc6eSDPlQG+1hkFUcvaE=)
                          2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:75:fc:8b:90:0c:b5:39:da:38:f7:4d:31:18:50:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
        Validity
            Not Before: Jul 26 02:00:39 2025 GMT
            Not After : Jul 27 02:00:39 2025 GMT
        Subject: CN=795ad622f21d6d8081ce7a2f45225846e7ab5f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:96:37:3b:15:f4:6e:ff:68:8a:62:04:c6:
                    4a:77:b6:fa:4d:08:48:7a:25:bf:af:1c:83:a6:a3:
                    ba:f8:94:65:34:69:ba:d9:94:74:81:75:f7:94:02:
                    df:d1:ea:67:cc:9a:e5:3b:1c:e8:cd:bb:9a:12:6a:
                    4f:de:c0:d5:77:a3:56:9d:cf:c1:9e:c1:82:38:ed:
                    f6:68:8f:68:57:6d:08:5b:58:cc:1b:31:7b:39:02:
                    d0:cb:b8:a9:04:b1:92:12:08:01:44:21:0c:3a:7e:
                    c4:36:f1:6c:fd:aa:30:80:01:03:1a:60:7c:e9:3a:
                    d9:83:6e:35:43:9c:e0:b7:d5:90:d6:03:3c:56:9e:
                    6f:e2:37:2b:bc:c0:4d:4e:ca:fa:5d:0a:b6:54:28:
                    2d:38:4f:05:af:b6:d2:b2:48:4a:8c:30:81:2e:c9:
                    a4:51:e1:67:78:f4:d7:4c:f3:b5:17:0d:68:c8:a9:
                    91:a8:d7:4b:25:db:64:66:f2:48:ae:d1:49:f7:38:
                    1c:b9:ce:61:97:53:e0:bd:f8:b3:f6:4e:b3:6e:bd:
                    c0:29:dc:ae:5f:f8:b0:f7:e1:c4:ac:f2:0c:37:f4:
                    7f:f1:63:0c:28:4d:da:74:21:f1:63:2d:47:19:50:
                    3f:4a:f9:3c:cd:56:a6:f6:b5:c7:6b:4a:6d:bf:a6:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:D6:22:F2:1D:6D:80:81:CE:7A:2F:45:22:58:46:E7:AB:5F:5F
            X509v3 Authority Key Identifier:
                keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:df:2f:b2:40:ea:c0:3a:2a:69:09:2d:69:8a:25:ac:1b:70:
         72:e2:7e:08:f8:81:3e:a3:96:43:ce:37:aa:c5:90:66:c0:9f:
         59:ae:89:58:ee:5b:a9:88:30:f3:b8:72:9c:40:13:06:9d:e3:
         7b:d3:81:8e:b6:77:67:cb:6c:52:b5:1c:6d:70:bd:34:f8:2d:
         e3:ef:bd:42:93:68:ae:4f:96:d1:ca:f6:0b:30:b0:66:a0:92:
         db:a9:8c:a8:ff:00:c1:e2:5b:cd:1c:e2:8a:f1:21:ca:e8:68:
         d9:bf:c9:df:a1:a6:25:c7:fa:d5:e8:fe:b0:10:65:20:9d:c0:
         5c:ce:af:01:61:86:1b:6c:7d:ef:b8:bc:14:d3:01:6e:b1:fb:
         24:1f:d4:35:52:59:b2:97:8c:ac:7c:fb:be:52:44:d2:f2:88:
         fd:e8:94:dc:17:73:fb:83:f2:3a:da:73:7f:78:b8:3b:1c:b9:
         e4:0a:9f:f3:d7:63:5b:e3:25:32:cf:b0:1f:67:b9:92:7d:c7:
         8b:8b:bf:cb:a6:35:fc:93:1a:ac:75:40:cd:37:56:20:25:2f:
         32:c7:6a:ef:18:1a:fb:59:56:60:d8:8d:1f:b8:62:68:9d:bc:
         b5:5f:8c:94:2b:29:cb:b3:47:c4:08:2d:8c:45:27:44:20:86:
         79:95:44:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdfyLkAy1Odo4900xGFB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj
MzBmZTQwHhcNMjUwNzI2MDIwMDM5WhcNMjUwNzI3MDIwMDM5WjAzMTEwLwYDVQQD
Eyg3OTVhZDYyMmYyMWQ2ZDgwODFjZTdhMmY0NTIyNTg0NmU3YWI1ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS2WNzsV9G7/aIpiBMZKd7b6TQhI
eiW/rxyDpqO6+JRlNGm62ZR0gXX3lALf0epnzJrlOxzozbuaEmpP3sDVd6NWnc/B
nsGCOO32aI9oV20IW1jMGzF7OQLQy7ipBLGSEggBRCEMOn7ENvFs/aowgAEDGmB8
6TrZg241Q5zgt9WQ1gM8Vp5v4jcrvMBNTsr6XQq2VCgtOE8Fr7bSskhKjDCBLsmk
UeFnePTXTPO1Fw1oyKmRqNdLJdtkZvJIrtFJ9zgcuc5hl1Pgvfiz9k6zbr3AKdyu
X/iw9+HErPIMN/R/8WMMKE3adCHxYy1HGVA/Svk8zVam9rXHa0ptv6Y2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHla1iLyHW2Agc56L0UiWEbnq19fMB8GA1UdIwQY
MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt
OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw
LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt8vskDq
wDoqaQktaYolrBtwcuJ+CPiBPqOWQ843qsWQZsCfWa6JWO5bqYgw87hynEATBp3j
e9OBjrZ3Z8tsUrUcbXC9NPgt4++9QpNork+W0cr2CzCwZqCS26mMqP8AweJbzRzi
ivEhyuho2b/J36GmJcf61ej+sBBlIJ3AXM6vAWGGG2x977i8FNMBbrH7JB/UNVJZ
speMrHz7vlJE0vKI/eiU3Bdz+4PyOtpzf3i4Oxy55Aqf89djW+MlMs+wH2e5kn3H
i4u/y6Y1/JMarHVAzTdWICUvMsdq7xga+1lWYNiNH7hiaJ28tV+MlCspy7NHxAgt
jEUnRCCGeZVETw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:21 2025 by rpki-client