Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File:                     uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier:          fWt80N9CXJ7eHlIWOr3bwGkrnwyCk5ZB2WJRXqGAmwQ=
Subject key identifier:   86:95:CE:E6:4A:16:76:FB:79:26:7A:59:EF:C1:E2:2A:E3:66:F8:CC
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer:       /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial:       01984AAEFCE3D47C811A1DE8E19DA027F2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number:          1189
Signing time:             Sun 27 Jul 2025 07:00:38 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:38 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:38 +0000
Files and hashes:         1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=)
                          2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: WaKd9N+NlzXPfmR7WWy0rc/+DRBGBei9AoxYPAsonBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:fc:e3:d4:7c:81:1a:1d:e8:e1:9d:a0:27:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
        Validity
            Not Before: Jul 27 07:00:38 2025 GMT
            Not After : Jul 28 07:00:38 2025 GMT
        Subject: CN=8695cee64a1676fb79267a59efc1e22ae366f8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:6e:b5:d7:1e:3f:0e:b2:1e:43:ed:f9:b5:
                    02:04:86:b8:54:50:25:1d:f7:d7:f8:76:fc:e0:99:
                    23:7a:59:78:05:56:59:a0:8a:98:ae:9f:8a:21:83:
                    e4:80:84:ef:22:d0:a2:3d:04:a0:46:34:ae:e8:e6:
                    12:70:b9:ba:3f:21:48:21:39:2f:cc:bf:cb:79:80:
                    73:60:db:63:63:0e:98:ee:c1:b7:71:6d:dd:cc:58:
                    bb:aa:ec:eb:e2:2e:7d:15:83:4a:21:c9:91:a3:5a:
                    24:82:b0:8d:0e:c4:e6:77:e6:13:fa:b2:b7:08:88:
                    23:19:dc:e8:99:b7:f1:a8:84:9b:02:97:31:05:8b:
                    57:6d:f4:61:38:9a:50:d2:32:6a:59:0d:c9:98:34:
                    c2:95:f7:76:e6:d1:77:88:43:ca:5b:a0:57:0d:9a:
                    44:de:17:49:8e:00:0f:a4:61:64:62:96:ae:93:49:
                    ac:47:60:97:d7:5a:c7:d2:76:14:e6:24:c3:cb:1f:
                    dd:5d:8c:35:38:fd:0d:b6:ac:89:6c:d5:b3:14:f7:
                    27:a1:ef:86:53:bc:18:38:3f:dc:1a:c3:6f:26:e5:
                    4c:e0:04:b7:8b:d2:4e:9d:c1:bd:0e:22:1d:11:bb:
                    a9:76:6f:27:ae:99:f7:47:f3:c1:87:57:f0:81:5f:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:CE:E6:4A:16:76:FB:79:26:7A:59:EF:C1:E2:2A:E3:66:F8:CC
            X509v3 Authority Key Identifier:
                keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:5b:51:c7:bb:21:63:a0:58:54:f0:f3:2c:9c:70:de:2f:
         7e:05:ac:41:25:e8:34:a3:b1:3b:29:aa:7c:12:4c:40:69:62:
         53:76:7f:57:10:d6:a5:83:19:f9:47:51:40:95:63:05:0a:cd:
         52:3d:8b:78:1d:6f:dd:6a:53:e5:3f:3c:51:46:f1:22:cb:c4:
         f2:fa:4e:7d:d1:c0:de:4b:67:0d:3c:db:71:c3:f0:cc:01:0d:
         23:35:72:41:7c:6a:82:48:27:05:2f:70:06:6f:f5:4f:01:3e:
         82:a3:84:cb:3f:fd:1d:e5:fd:16:b5:88:f8:3b:b9:3c:c3:ee:
         8b:5c:a5:b9:2a:28:a8:b9:77:cf:7b:de:5b:99:04:9c:7e:20:
         a2:03:2a:59:66:72:c0:48:2b:3d:73:f6:03:e1:40:59:fd:cf:
         a4:fe:24:26:50:7b:d4:c0:63:4c:95:82:9c:a3:56:2b:a3:db:
         e1:4f:58:7a:3e:9a:df:9a:7f:31:ac:ef:d7:2c:8a:80:28:a9:
         a1:36:6c:5e:c4:00:08:07:c9:dc:9f:d5:60:6f:e6:61:de:75:
         1d:47:bc:e6:c2:8d:f0:ac:33:f9:9d:4d:e7:c5:67:b7:d8:01:
         16:c1:2d:af:93:cc:1c:72:32:26:e7:24:bd:89:93:8e:da:93:
         5f:a5:6d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrvzj1HyBGh3o4Z2gJ/L8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzE1ZmUxZTE5Y2I4MWNiMzQ2OWZjYWE1YzYwMjNhNmM1
YzQ1YTMwHhcNMjUwNzI3MDcwMDM4WhcNMjUwNzI4MDcwMDM4WjAzMTEwLwYDVQQD
Eyg4Njk1Y2VlNjRhMTY3NmZiNzkyNjdhNTllZmMxZTIyYWUzNjZmOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9hutdcePw6yHkPt+bUCBIa4VFAl
HffX+Hb84Jkjell4BVZZoIqYrp+KIYPkgITvItCiPQSgRjSu6OYScLm6PyFIITkv
zL/LeYBzYNtjYw6Y7sG3cW3dzFi7quzr4i59FYNKIcmRo1okgrCNDsTmd+YT+rK3
CIgjGdzombfxqISbApcxBYtXbfRhOJpQ0jJqWQ3JmDTClfd25tF3iEPKW6BXDZpE
3hdJjgAPpGFkYpauk0msR2CX11rH0nYU5iTDyx/dXYw1OP0NtqyJbNWzFPcnoe+G
U7wYOD/cGsNvJuVM4AS3i9JOncG9DiIdEbupdm8nrpn3R/PBh1fwgV+ivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaVzuZKFnb7eSZ6We/B4irjZvjMMB8GA1UdIwQY
MBaAFLjBX+HhnLgcs0afyqXGAjpsXEWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0Yzkt
ZjI1OGMxMWNlNzdlLzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83NDE5MmYtZTdmNC00OGMwLTg0YzktZjI1OGMxMWNlNzdl
LzEvdU1GZjRlR2N1Qnl6UnBfS3BjWUNPbXhjUmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK45bUce7
IWOgWFTw8yyccN4vfgWsQSXoNKOxOymqfBJMQGliU3Z/VxDWpYMZ+UdRQJVjBQrN
Uj2LeB1v3WpT5T88UUbxIsvE8vpOfdHA3ktnDTzbccPwzAENIzVyQXxqgkgnBS9w
Bm/1TwE+gqOEyz/9HeX9FrWI+Du5PMPui1yluSooqLl3z3veW5kEnH4gogMqWWZy
wEgrPXP2A+FAWf3PpP4kJlB71MBjTJWCnKNWK6Pb4U9Yej6a35p/Mazv1yyKgCip
oTZsXsQACAfJ3J/VYG/mYd51HUe85sKN8Kwz+Z1N58Vnt9gBFsEtr5PMHHIyJuck
vYmTjtqTX6Vt2A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:24 2025 by rpki-client