Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          HkGTmSuWRNacQIbr2iHmnVuuPeKLynoJEiO31J1jaSM=
Subject key identifier:   E9:DA:67:74:08:DB:AB:D6:8E:28:58:FA:E6:62:5C:FD:4C:2C:1C:DF
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       019749310A33E59625246E76CFEABED19C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          0DFF
Signing time:             Sat 07 Jun 2025 07:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:40 +0000
Files and hashes:         1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: XHeAAiXY/A7yXHq2aAZeMkwXxXoBkJY4+Zeg8i8D1l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:0a:33:e5:96:25:24:6e:76:cf:ea:be:d1:9c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Jun  7 07:00:40 2025 GMT
            Not After : Jun  8 07:00:40 2025 GMT
        Subject: CN=e9da677408dbabd68e2858fae6625cfd4c2c1cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:d3:f3:79:b4:bf:3d:89:2e:0b:95:9f:4d:
                    7d:e1:be:63:be:b4:b0:60:60:c9:7a:9f:ea:86:9a:
                    b4:50:b8:e1:53:5a:6e:fe:d2:fb:89:bd:8b:7e:68:
                    3e:7e:d9:d8:a7:d8:37:79:3e:e7:d6:f5:0d:93:1f:
                    d4:fa:73:ce:cf:f0:17:b9:5e:93:ab:3b:91:4e:b0:
                    f2:a4:ad:be:30:30:6c:55:5d:b2:b3:ea:7b:12:c0:
                    c4:2f:cd:d2:12:cb:55:f3:fd:97:07:d9:f2:5c:ba:
                    c8:92:c9:a5:ee:04:f3:1f:6d:ed:cb:70:ca:ab:35:
                    cd:55:0e:13:40:12:e9:bb:d9:50:be:d7:b3:15:55:
                    45:7f:81:bc:5b:96:9d:f5:b5:3b:60:a3:26:a0:a9:
                    30:6f:09:c3:ef:21:fd:7a:4f:2f:42:70:2a:a3:56:
                    c3:cb:86:6b:1b:61:16:0f:04:28:d3:7b:9c:a8:9b:
                    d8:ab:17:f7:44:29:22:94:8c:e7:70:17:b4:ef:08:
                    76:c4:5a:24:45:74:63:70:fa:e6:c0:dc:80:5a:fa:
                    e3:b2:81:ab:e5:14:1c:3b:a1:c7:f1:6a:98:23:93:
                    3d:1b:fc:78:36:0e:e5:f8:ab:31:3b:b2:a1:41:b6:
                    19:cf:16:57:a6:a6:82:c2:f8:ab:d1:8f:b3:0c:1b:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:67:74:08:DB:AB:D6:8E:28:58:FA:E6:62:5C:FD:4C:2C:1C:DF
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:51:23:73:14:d3:79:6b:58:1c:f7:97:17:33:95:8c:ee:8f:
         ab:4a:f3:6f:6a:1c:e7:36:e8:3c:3a:be:95:c4:4b:3e:0c:a3:
         13:40:4e:dc:97:ac:f4:3a:0b:5e:9a:c0:c1:30:c0:18:67:30:
         f2:58:d5:aa:ae:df:93:bd:3a:ba:7a:47:cc:d7:a0:53:5a:78:
         a4:d3:68:6b:3b:f5:a5:bd:c7:91:b8:e3:a0:37:a7:93:54:be:
         89:ab:a1:b8:1f:32:43:20:a7:be:2d:7c:d0:71:2c:ca:52:b0:
         9b:c2:b6:2b:68:81:7b:59:cb:b3:2e:cd:62:12:65:06:e7:a6:
         31:50:f2:8c:92:e6:82:89:b0:91:88:53:af:81:48:f9:71:5f:
         15:08:82:ef:04:8d:85:c7:04:79:c0:92:17:34:48:90:d0:72:
         52:a5:10:02:f2:58:53:cf:27:ba:48:24:c5:71:be:ec:57:80:
         67:1e:ed:9e:0a:c2:25:70:f9:9f:49:71:da:9c:c3:96:4d:22:
         5e:38:ae:b0:fd:45:c2:cd:6c:c3:74:e3:0c:cd:5f:e6:8c:c7:
         bb:ca:2d:9d:95:48:8f:d3:6e:05:44:d0:a4:1e:c4:3f:d2:b6:
         8b:ae:9b:42:1c:9b:d6:19:e6:91:7a:96:6a:c0:91:4e:b8:a0:
         b9:2a:14:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQoz5ZYlJG52z+q+0ZyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3
MmVkZGQwHhcNMjUwNjA3MDcwMDQwWhcNMjUwNjA4MDcwMDQwWjAzMTEwLwYDVQQD
EyhlOWRhNjc3NDA4ZGJhYmQ2OGUyODU4ZmFlNjYyNWNmZDRjMmMxY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiTT83m0vz2JLguVn0194b5jvrSw
YGDJep/qhpq0ULjhU1pu/tL7ib2Lfmg+ftnYp9g3eT7n1vUNkx/U+nPOz/AXuV6T
qzuRTrDypK2+MDBsVV2ys+p7EsDEL83SEstV8/2XB9nyXLrIksml7gTzH23ty3DK
qzXNVQ4TQBLpu9lQvtezFVVFf4G8W5ad9bU7YKMmoKkwbwnD7yH9ek8vQnAqo1bD
y4ZrG2EWDwQo03ucqJvYqxf3RCkilIzncBe07wh2xFokRXRjcPrmwNyAWvrjsoGr
5RQcO6HH8WqYI5M9G/x4Ng7l+KsxO7KhQbYZzxZXpqaCwvir0Y+zDBsbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnaZ3QI26vWjihY+uZiXP1MLBzfMB8GA1UdIwQY
MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct
ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5
LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVEjcxTT
eWtYHPeXFzOVjO6Pq0rzb2oc5zboPDq+lcRLPgyjE0BO3Jes9DoLXprAwTDAGGcw
8ljVqq7fk706unpHzNegU1p4pNNoazv1pb3HkbjjoDenk1S+iauhuB8yQyCnvi18
0HEsylKwm8K2K2iBe1nLsy7NYhJlBuemMVDyjJLmgomwkYhTr4FI+XFfFQiC7wSN
hccEecCSFzRIkNByUqUQAvJYU88nukgkxXG+7FeAZx7tngrCJXD5n0lx2pzDlk0i
XjiusP1Fws1sw3TjDM1f5ozHu8otnZVIj9NuBUTQpB7EP9K2i66bQhyb1hnmkXqW
asCRTriguSoUQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:56:22 2025 by rpki-client