Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File:                     UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier:          wf2sac5WkwwqQdIFGl6GhoQ9WjGbQcEtsfixxWDBATs=
Subject key identifier:   6E:A9:1F:E6:CB:64:B2:B3:B1:E1:3C:DA:63:7C:2C:34:0F:B0:8C:2B
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       019933805F3DBB92F5C538CC147338A1A91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number:          14C0
Signing time:             Wed 10 Sep 2025 12:01:14 +0000
Manifest this update:     Wed 10 Sep 2025 12:01:14 +0000
Manifest next update:     Thu 11 Sep 2025 12:01:14 +0000
Files and hashes:         1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: nau7Wgs49BBwVcEPnlMGHe3DyQL/RW6MvetOD3niuqQ=)
                          2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:80:5f:3d:bb:92:f5:c5:38:cc:14:73:38:a1:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: Sep 10 12:01:14 2025 GMT
            Not After : Sep 11 12:01:14 2025 GMT
        Subject: CN=6ea91fe6cb64b2b3b1e13cda637c2c340fb08c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:50:d6:f5:7b:1c:aa:45:79:32:8d:17:bd:
                    d6:9c:f1:f8:78:11:1e:1d:e8:6c:e3:e1:14:b2:d7:
                    2d:f8:1d:80:e0:24:5b:5f:0f:5f:6b:97:10:24:2f:
                    58:8a:94:69:9f:e6:2b:a8:b4:51:fc:a6:37:45:80:
                    8b:d7:11:b5:f0:d6:d7:d2:3b:72:61:ef:3d:f8:aa:
                    50:e5:75:96:10:46:09:d2:9e:f2:bf:fe:0f:17:34:
                    4a:c1:b2:c3:e9:30:74:d8:cf:b8:9f:b4:a3:fe:df:
                    a5:10:2b:10:6f:58:14:ce:62:6c:fe:6e:20:a9:5a:
                    20:01:1e:0d:ed:90:07:bb:cf:c7:72:9f:39:2c:12:
                    4c:7e:a7:de:d1:43:4e:72:f2:7b:1f:b7:d7:1f:53:
                    ce:ee:df:60:ae:d3:56:66:92:35:13:f2:23:d2:10:
                    c2:35:57:ea:99:a8:9c:01:02:f7:89:16:a6:d7:43:
                    d7:28:a7:1d:3c:22:82:68:32:62:e6:7c:31:23:2a:
                    5f:e8:8b:68:9a:a9:6d:c7:81:56:dd:ec:81:92:e4:
                    91:e5:01:52:71:3f:86:cc:eb:a5:b3:de:82:62:ca:
                    bc:8d:4a:a3:29:5e:d4:45:42:36:05:33:b4:9c:06:
                    2d:51:95:d8:d3:73:2e:bf:ce:25:bb:b6:12:d6:d2:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:1F:E6:CB:64:B2:B3:B1:E1:3C:DA:63:7C:2C:34:0F:B0:8C:2B
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ef:dd:39:63:f3:a0:98:31:ce:38:27:16:34:6e:31:a9:8a:
         32:50:d3:61:4e:2d:9f:52:0b:33:ba:72:8a:ec:58:ae:0a:8d:
         76:3d:ff:77:87:83:88:69:f6:53:d0:e0:34:2a:2c:06:5e:92:
         1a:d7:e8:f0:e7:ba:80:12:1c:a3:44:47:ae:1a:71:ce:77:7e:
         c4:04:d0:ae:53:0a:7b:ec:ca:96:b8:7d:b3:77:e5:ac:ba:d2:
         5b:ff:b6:fc:16:fe:60:cf:1f:49:19:66:23:0c:56:c5:27:33:
         df:81:59:14:29:d6:47:d0:b6:1f:32:8b:f6:d1:36:07:ce:83:
         f6:03:6a:09:e3:e0:64:66:09:80:69:f2:22:a6:e2:4e:5d:bb:
         18:38:b0:c1:07:be:93:5e:7a:a9:1f:4c:ca:02:a2:97:37:db:
         18:65:9a:44:ce:5d:b3:cd:27:23:3b:e3:2e:85:cc:be:d0:7a:
         c6:00:6a:cf:cf:5e:1d:b7:00:ab:39:ca:1a:34:83:19:65:65:
         47:dd:6d:e0:bc:c4:a4:16:52:f2:a1:58:7f:2c:d9:bc:9f:cf:
         18:5f:21:41:d9:f3:b9:f2:93:80:b5:16:c0:da:2b:8a:5b:89:
         e1:13:d8:fb:56:cc:01:b4:96:d4:c7:bf:86:21:03:a4:2e:09:
         fc:c3:78:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzgF89u5L1xTjMFHM4oakcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjUwOTEwMTIwMTE0WhcNMjUwOTExMTIwMTE0WjAzMTEwLwYDVQQD
Eyg2ZWE5MWZlNmNiNjRiMmIzYjFlMTNjZGE2MzdjMmMzNDBmYjA4YzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoFQ1vV7HKpFeTKNF73WnPH4eBEe
Hehs4+EUstct+B2A4CRbXw9fa5cQJC9YipRpn+YrqLRR/KY3RYCL1xG18NbX0jty
Ye89+KpQ5XWWEEYJ0p7yv/4PFzRKwbLD6TB02M+4n7Sj/t+lECsQb1gUzmJs/m4g
qVogAR4N7ZAHu8/Hcp85LBJMfqfe0UNOcvJ7H7fXH1PO7t9grtNWZpI1E/Ij0hDC
NVfqmaicAQL3iRam10PXKKcdPCKCaDJi5nwxIypf6Itomqltx4FW3eyBkuSR5QFS
cT+GzOuls96CYsq8jUqjKV7URUI2BTO0nAYtUZXY03Muv84lu7YS1tIXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6pH+bLZLKzseE82mN8LDQPsIwrMB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+/dOWPz
oJgxzjgnFjRuMamKMlDTYU4tn1ILM7pyiuxYrgqNdj3/d4eDiGn2U9DgNCosBl6S
Gtfo8Oe6gBIco0RHrhpxznd+xATQrlMKe+zKlrh9s3flrLrSW/+2/Bb+YM8fSRlm
IwxWxScz34FZFCnWR9C2HzKL9tE2B86D9gNqCePgZGYJgGnyIqbiTl27GDiwwQe+
k156qR9MygKilzfbGGWaRM5ds80nIzvjLoXMvtB6xgBqz89eHbcAqznKGjSDGWVl
R91t4LzEpBZS8qFYfyzZvJ/PGF8hQdnzufKTgLUWwNoriluJ4RPY+1bMAbSW1Me/
hiEDpC4J/MN46w==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:19:56 2025 by rpki-client