Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          dqspZ31M+PIkHc6OC54uurHzEdE6E8Ri5GKctolEHjg=
Subject key identifier:   A0:EB:A0:E3:E3:91:29:C7:29:2E:87:57:82:F4:21:14:21:81:1A:56
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       01984AAF1C7A826046DADE34C8B9074D84CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          07D1
Signing time:             Sun 27 Jul 2025 07:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:46 +0000
Files and hashes:         1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
                          2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
                          3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
                          4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
                          5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: QoZa5SgsSNPZAqXiWHGU6Efltc33f4rfm0857R+zx/U=)
                          7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:1c:7a:82:60:46:da:de:34:c8:b9:07:4d:84:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Jul 27 07:00:46 2025 GMT
            Not After : Jul 28 07:00:46 2025 GMT
        Subject: CN=a0eba0e3e39129c7292e875782f4211421811a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:02:5a:b9:8f:1d:25:f4:e8:6e:89:8a:0e:
                    d8:39:14:c3:5e:32:f7:a4:7a:5d:73:99:ed:73:9d:
                    72:63:a8:3b:54:c3:58:7a:2b:15:a1:99:27:31:84:
                    3a:13:34:be:95:36:e2:d5:c4:79:4d:43:b2:e1:98:
                    78:4f:49:ed:19:cc:4c:06:33:8a:44:c7:aa:54:de:
                    df:6f:0a:6a:f6:05:f5:e7:a0:12:f8:fe:4f:45:4d:
                    8c:a0:16:54:91:06:9b:bd:12:a7:5d:64:e9:1c:21:
                    6f:26:f5:0a:69:4f:18:d0:c3:93:7b:24:3f:09:b2:
                    85:99:cc:96:52:01:94:1e:57:4d:87:7b:f8:04:89:
                    0a:58:ee:d7:91:29:82:3e:76:0a:21:d7:b7:8b:f2:
                    71:19:58:c5:80:f4:f5:2f:ce:d2:6d:54:bc:de:ab:
                    53:3c:53:b4:c0:41:df:66:86:0b:55:f6:39:21:95:
                    3c:6a:23:79:7c:58:03:8d:c4:62:0a:f0:d3:04:37:
                    fe:53:e2:93:ec:3d:18:e1:b5:ff:4a:fe:f0:90:ad:
                    2b:38:0d:49:99:47:08:b5:d5:75:31:37:43:59:5b:
                    76:2d:30:2e:6a:fd:88:40:67:a8:59:c5:4d:a7:ac:
                    70:91:16:01:23:7f:8e:f1:86:2c:22:e3:a5:2a:b6:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EB:A0:E3:E3:91:29:C7:29:2E:87:57:82:F4:21:14:21:81:1A:56
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6d:66:b0:37:08:c5:7b:a4:f9:0e:04:16:13:29:b0:c0:01:
         d0:ef:a1:64:22:39:5a:9f:0a:3b:b1:10:4e:e9:b9:c1:cc:7e:
         61:17:50:db:84:62:de:9e:1b:3a:a2:d7:fe:9e:53:cc:eb:35:
         f9:34:95:62:98:77:91:d5:14:69:00:a9:e6:bd:4a:d9:bc:59:
         15:29:9b:aa:cb:83:d8:a4:79:f6:2b:a3:d7:1f:44:b1:22:76:
         03:ae:eb:f9:3e:1f:a0:62:61:b5:7e:15:f9:0e:a0:37:e9:7b:
         e3:17:21:1b:86:bb:6a:16:9c:7e:e5:dd:33:d9:0b:83:48:de:
         45:88:f7:a8:72:85:f6:69:e4:94:9e:2e:de:c6:b1:7b:d9:7d:
         e7:ed:39:ed:16:a2:75:bd:57:a1:9e:11:b5:94:2e:c0:e2:71:
         70:60:f3:0b:f6:61:44:1b:d7:cc:d8:b5:27:26:6d:1b:ca:87:
         64:72:38:2e:9d:63:08:11:71:02:c1:01:69:c7:46:90:03:d9:
         3d:c1:d8:9a:11:42:6e:5c:b9:0d:4a:2e:6e:ef:19:48:99:fe:
         69:72:f4:97:77:56:2e:90:0d:9e:19:7d:18:2a:85:da:2a:17:
         78:d5:2b:b2:c5:87:09:ab:cd:e8:5f:ee:0b:c8:19:1c:3d:2e:
         06:97:43:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrxx6gmBG2t40yLkHTYTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0
N2RiMGIwHhcNMjUwNzI3MDcwMDQ2WhcNMjUwNzI4MDcwMDQ2WjAzMTEwLwYDVQQD
EyhhMGViYTBlM2UzOTEyOWM3MjkyZTg3NTc4MmY0MjExNDIxODExYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2sCWrmPHSX06G6Jig7YORTDXjL3
pHpdc5ntc51yY6g7VMNYeisVoZknMYQ6EzS+lTbi1cR5TUOy4Zh4T0ntGcxMBjOK
RMeqVN7fbwpq9gX156AS+P5PRU2MoBZUkQabvRKnXWTpHCFvJvUKaU8Y0MOTeyQ/
CbKFmcyWUgGUHldNh3v4BIkKWO7XkSmCPnYKIde3i/JxGVjFgPT1L87SbVS83qtT
PFO0wEHfZoYLVfY5IZU8aiN5fFgDjcRiCvDTBDf+U+KT7D0Y4bX/Sv7wkK0rOA1J
mUcItdV1MTdDWVt2LTAuav2IQGeoWcVNp6xwkRYBI3+O8YYsIuOlKrZa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDroOPjkSnHKS6HV4L0IRQhgRpWMB8GA1UdIwQY
MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt
ZDE5NmY5MjkxNzMyLzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy
LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAim1msDcI
xXuk+Q4EFhMpsMAB0O+hZCI5Wp8KO7EQTum5wcx+YRdQ24Ri3p4bOqLX/p5TzOs1
+TSVYph3kdUUaQCp5r1K2bxZFSmbqsuD2KR59iuj1x9EsSJ2A67r+T4foGJhtX4V
+Q6gN+l74xchG4a7ahacfuXdM9kLg0jeRYj3qHKF9mnklJ4u3saxe9l95+057Rai
db1XoZ4RtZQuwOJxcGDzC/ZhRBvXzNi1JyZtG8qHZHI4Lp1jCBFxAsEBacdGkAPZ
PcHYmhFCbly5DUoubu8ZSJn+aXL0l3dWLpANnhl9GCqF2ioXeNUrssWHCavN6F/u
C8gZHD0uBpdDcg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:26:59 2025 by rpki-client