Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File:                     uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier:          xbri+HU2zrPX5blm9loZ/Z0M6DQFtCebEXmYqKiQYu8=
Subject key identifier:   68:97:24:DE:9E:FF:84:0F:68:3E:BA:C1:B8:98:EB:5B:2F:93:32:1F
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer:       /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial:       0197488C221D53C3D6A75346D419132CBCE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number:          1198
Signing time:             Sat 07 Jun 2025 04:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:32 +0000
Files and hashes:         1: dKpw_-0HjSGrVaWJaUDvP77eqyY.roa (hash: QqA/x8rzftDJLWW2k4Vuop1woZfiPckz4TMZl5sc2Xs=)
                          2: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: YxI3cc56vZV6VOtGhfB9gPYIHQInKVE4q//mgxAbcOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:22:1d:53:c3:d6:a7:53:46:d4:19:13:2c:bc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
        Validity
            Not Before: Jun  7 04:00:32 2025 GMT
            Not After : Jun  8 04:00:32 2025 GMT
        Subject: CN=689724de9eff840f683ebac1b898eb5b2f93321f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:14:7b:11:db:b6:44:57:6a:b6:a2:65:ea:
                    82:61:b5:39:94:de:05:26:26:89:2e:a5:35:3a:21:
                    3d:d6:22:27:a0:24:ef:ea:fe:64:c8:e6:ef:cb:e5:
                    76:fb:0e:bb:8b:5e:6d:cb:8d:7b:c0:02:87:f8:d8:
                    a5:a8:73:5f:a2:eb:0d:4f:da:72:a7:56:0b:2d:cb:
                    a7:b8:57:eb:f4:28:94:9c:9c:0a:8c:44:d5:25:14:
                    47:30:e6:27:51:5e:21:32:14:e3:a6:95:54:01:ae:
                    22:87:38:5f:6f:87:c1:4a:f5:f2:fd:79:4e:08:0e:
                    94:13:fe:5a:e5:77:fc:12:92:23:13:f6:66:af:a7:
                    eb:59:14:82:15:bf:07:2d:e5:f4:42:61:0d:7f:0d:
                    d9:3e:d8:1c:ea:ec:13:34:3c:54:b9:3f:dc:14:63:
                    71:d0:d1:59:d1:a2:57:48:72:a8:d7:31:d8:c0:c3:
                    6f:d7:0f:d4:0c:58:92:51:f7:7f:ae:92:ec:31:b6:
                    46:ae:24:33:5b:b2:20:63:2d:41:81:b4:94:fe:b4:
                    7a:12:ca:52:a7:fb:69:a5:d4:b9:ec:41:22:27:e1:
                    30:60:eb:62:69:b2:92:5d:a0:8d:3c:dc:eb:26:0f:
                    6e:4c:40:9f:b2:5a:d2:24:4e:b6:a8:72:74:af:78:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:24:DE:9E:FF:84:0F:68:3E:BA:C1:B8:98:EB:5B:2F:93:32:1F
            X509v3 Authority Key Identifier:
                keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:84:9e:a1:a7:19:39:54:e5:ef:5e:40:78:09:2d:70:9a:a0:
         3d:86:5a:0e:57:bc:3d:c4:86:76:5d:cb:1f:c8:0e:74:11:1a:
         e6:e4:db:d7:6a:ec:27:20:8f:13:e2:af:9f:c2:08:f3:ed:ea:
         1e:95:cc:66:e4:df:1c:c5:24:39:d2:bb:58:36:64:e6:69:5e:
         0a:c9:5a:4f:a8:6a:78:35:3a:15:04:fc:d1:16:a5:b5:eb:27:
         8d:c5:61:f5:b0:56:bd:7b:4b:ec:ca:d0:cb:c3:4d:97:60:1d:
         60:02:9b:52:4a:e6:b5:1d:bb:10:c7:37:8d:7d:fa:22:5b:99:
         1a:94:b6:38:ca:8e:28:b8:76:19:4a:27:5d:81:37:3c:e1:46:
         fa:ab:a0:44:70:68:18:a5:e4:5e:3d:2d:4f:cf:c1:6b:0d:25:
         a8:08:36:7b:47:a0:c1:a4:51:fb:5d:a2:3f:e0:d0:23:b8:04:
         39:26:7d:26:ca:50:38:6d:06:86:44:66:21:65:e7:b6:f3:28:
         3c:1d:1f:fc:7b:30:3a:42:e7:a8:24:83:91:8c:b4:91:0d:6f:
         9a:04:ad:a3:38:87:51:4d:c6:2d:19:32:7a:10:46:23:02:25:
         bc:1e:85:b0:12:03:16:5d:66:c8:3b:15:12:14:94:f2:21:16:
         7b:91:4c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjCIdU8PWp1NG1BkTLLzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0
OGM3Y2QwHhcNMjUwNjA3MDQwMDMyWhcNMjUwNjA4MDQwMDMyWjAzMTEwLwYDVQQD
Eyg2ODk3MjRkZTllZmY4NDBmNjgzZWJhYzFiODk4ZWI1YjJmOTMzMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP4UexHbtkRXaraiZeqCYbU5lN4F
JiaJLqU1OiE91iInoCTv6v5kyObvy+V2+w67i15ty417wAKH+NilqHNfousNT9py
p1YLLcunuFfr9CiUnJwKjETVJRRHMOYnUV4hMhTjppVUAa4ihzhfb4fBSvXy/XlO
CA6UE/5a5Xf8EpIjE/Zmr6frWRSCFb8HLeX0QmENfw3ZPtgc6uwTNDxUuT/cFGNx
0NFZ0aJXSHKo1zHYwMNv1w/UDFiSUfd/rpLsMbZGriQzW7IgYy1BgbSU/rR6EspS
p/tppdS57EEiJ+EwYOtiabKSXaCNPNzrJg9uTECfslrSJE62qHJ0r3jwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiXJN6e/4QPaD66wbiY61svkzIfMB8GA1UdIwQY
MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt
NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3
LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdISeoacZ
OVTl715AeAktcJqgPYZaDle8PcSGdl3LH8gOdBEa5uTb12rsJyCPE+Kvn8II8+3q
HpXMZuTfHMUkOdK7WDZk5mleCslaT6hqeDU6FQT80RaltesnjcVh9bBWvXtL7MrQ
y8NNl2AdYAKbUkrmtR27EMc3jX36IluZGpS2OMqOKLh2GUonXYE3POFG+qugRHBo
GKXkXj0tT8/Baw0lqAg2e0egwaRR+12iP+DQI7gEOSZ9JspQOG0GhkRmIWXntvMo
PB0f/HswOkLnqCSDkYy0kQ1vmgStoziHUU3GLRkyehBGIwIlvB6FsBIDFl1myDsV
EhSU8iEWe5FMdA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:29 2025 by rpki-client