Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          5+KL5EJkP5uduyZ14atxh2DZJ23pQIPbwLNS/va7kaM=
Subject key identifier:   D1:D0:A1:39:33:2B:D2:7F:F5:C0:FF:EA:84:4D:65:03:E3:3E:D0:34
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       019933134D61730C4952715EB6E2D820CC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          0FA4
Signing time:             Wed 10 Sep 2025 10:02:06 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:06 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:06 +0000
Files and hashes:         1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: tuu2IScbTu9UdA5FCxELOlj3MCFkUcChl97nqVvxLko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:13:4d:61:73:0c:49:52:71:5e:b6:e2:d8:20:cc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Sep 10 10:02:06 2025 GMT
            Not After : Sep 11 10:02:06 2025 GMT
        Subject: CN=d1d0a139332bd27ff5c0ffea844d6503e33ed034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:05:b1:d7:c2:58:b7:79:b9:b3:0b:91:41:
                    30:4e:ec:fd:d7:49:14:7b:f9:2a:f6:39:46:ec:6e:
                    3c:12:6f:db:5c:a0:e3:ab:13:9a:da:15:e0:b9:72:
                    52:47:69:68:f6:f6:59:01:12:0d:17:fd:2c:45:2d:
                    2d:f2:a7:3f:5b:54:0a:f5:1c:87:f1:11:3a:ad:eb:
                    18:0d:31:63:87:a3:cc:40:48:ae:5c:d4:81:42:34:
                    3b:1e:01:f6:40:f9:c1:ef:39:5c:87:55:0c:de:54:
                    0a:39:73:21:f2:4f:31:54:aa:e8:d5:dd:4c:3c:b2:
                    69:d9:05:cc:5c:e3:95:4d:4d:74:56:34:df:c0:39:
                    93:fb:97:72:c8:0a:02:58:87:6d:06:47:dc:f1:3b:
                    c3:64:e5:87:e7:b3:5a:51:19:18:e9:27:a3:a4:1b:
                    29:41:93:e9:f9:4d:93:cf:bf:c4:92:cd:d2:73:c4:
                    d7:e1:f5:88:1b:d3:df:94:61:eb:dc:b6:85:36:3f:
                    67:50:54:07:7f:e3:70:d4:40:f3:61:5b:ef:3b:11:
                    d4:d9:c2:cc:7c:46:44:1f:55:c5:eb:12:95:d1:6a:
                    66:ff:77:7e:6c:32:d5:a4:79:e7:5b:2f:9a:a0:c6:
                    1c:d0:05:b3:d4:21:09:a9:cd:42:ab:84:79:27:a0:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D0:A1:39:33:2B:D2:7F:F5:C0:FF:EA:84:4D:65:03:E3:3E:D0:34
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:fe:de:26:d0:5a:ba:25:68:61:c3:a2:2a:6f:31:fd:16:
         d7:53:54:9c:70:00:ea:77:aa:0b:9c:51:7b:85:27:36:35:66:
         c0:ab:0f:82:fe:40:1c:cb:43:be:98:b2:f1:68:78:1b:80:ca:
         cb:bf:3c:a8:be:b8:da:07:54:4b:3f:b6:65:50:4c:b2:24:60:
         64:24:14:2b:41:8c:79:4f:45:a2:96:5e:2a:68:25:8e:62:6d:
         e9:bb:1c:e4:00:b2:22:8e:35:66:69:ec:8d:a5:a8:c9:d2:fa:
         2a:21:16:9e:5b:e4:c8:10:8f:03:dc:94:c6:ab:d5:be:d1:2b:
         90:81:df:57:83:e6:b4:ac:9d:d3:8c:07:9c:ea:08:84:ed:0e:
         7f:6b:76:42:b5:23:23:44:ff:60:b1:b0:c0:19:3a:28:89:0a:
         ae:1e:b8:3f:ef:95:cb:fc:c5:83:bf:67:5f:1e:93:f7:2f:95:
         8d:ed:02:67:49:61:da:52:6b:49:cd:93:8a:07:90:e9:a9:4d:
         01:5c:58:3c:54:a1:b7:9a:d1:d6:55:78:cf:42:07:fd:57:b4:
         ae:cd:49:93:7b:d6:74:4a:9a:87:e2:1f:00:a7:1a:a7:d0:a8:
         cd:3c:7f:87:dc:e0:5a:d4:01:c9:c9:8e:62:2f:6c:bc:65:64:
         1d:20:4c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzE01hcwxJUnFetuLYIMyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDU5NmNlNjA3M2U4ZWRlZGM1MTA1ZjgxNGVjOTcxOTFi
NWUxZDUwHhcNMjUwOTEwMTAwMjA2WhcNMjUwOTExMTAwMjA2WjAzMTEwLwYDVQQD
EyhkMWQwYTEzOTMzMmJkMjdmZjVjMGZmZWE4NDRkNjUwM2UzM2VkMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6wFsdfCWLd5ubMLkUEwTuz910kU
e/kq9jlG7G48Em/bXKDjqxOa2hXguXJSR2lo9vZZARINF/0sRS0t8qc/W1QK9RyH
8RE6resYDTFjh6PMQEiuXNSBQjQ7HgH2QPnB7zlch1UM3lQKOXMh8k8xVKro1d1M
PLJp2QXMXOOVTU10VjTfwDmT+5dyyAoCWIdtBkfc8TvDZOWH57NaURkY6SejpBsp
QZPp+U2Tz7/Eks3Sc8TX4fWIG9PflGHr3LaFNj9nUFQHf+Nw1EDzYVvvOxHU2cLM
fEZEH1XF6xKV0Wpm/3d+bDLVpHnnWy+aoMYc0AWz1CEJqc1Cq4R5J6DV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHQoTkzK9J/9cD/6oRNZQPjPtA0MB8GA1UdIwQY
MBaAFFAFls5gc+jt7cUQX4FOyXGRteHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUt
MWUxNjdmYTExM2IyLzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUtMWUxNjdmYTExM2Iy
LzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh/+3ibQ
WrolaGHDoipvMf0W11NUnHAA6neqC5xRe4UnNjVmwKsPgv5AHMtDvpiy8Wh4G4DK
y788qL642gdUSz+2ZVBMsiRgZCQUK0GMeU9FopZeKmgljmJt6bsc5ACyIo41Zmns
jaWoydL6KiEWnlvkyBCPA9yUxqvVvtErkIHfV4PmtKyd04wHnOoIhO0Of2t2QrUj
I0T/YLGwwBk6KIkKrh64P++Vy/zFg79nXx6T9y+Vje0CZ0lh2lJrSc2TigeQ6alN
AVxYPFSht5rR1lV4z0IH/Ve0rs1Jk3vWdEqah+IfAKcap9CozTx/h9zgWtQBycmO
Yi9svGVkHSBMgA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:15:17 2025 by rpki-client