Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File:                     UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier:          f4caWHHFmmXQ0x6kIE2WCN6tnFyusroXTk1CY7jiD9M=
Subject key identifier:   89:2C:9B:73:38:41:8A:33:50:E2:96:5B:86:C0:73:C2:84:C0:EB:9C
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer:       /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial:       01974A0CCC2AFD77E2EA197932EC921CADB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number:          0C63
Signing time:             Sat 07 Jun 2025 11:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:42 +0000
Files and hashes:         1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: we1LnMRZvxkwYcsx9VseZ8/b5xiLfhBNmz7fdtR2VrI=)
                          2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:cc:2a:fd:77:e2:ea:19:79:32:ec:92:1c:ad:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
        Validity
            Not Before: Jun  7 11:00:42 2025 GMT
            Not After : Jun  8 11:00:42 2025 GMT
        Subject: CN=892c9b7338418a3350e2965b86c073c284c0eb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8c:c3:f3:ba:0b:c6:5f:d2:61:fc:44:84:a1:
                    e7:6b:94:c8:c3:3e:5c:fa:c9:9e:62:7d:e8:ce:d4:
                    e5:30:55:3a:ac:a6:55:39:f8:b3:cb:53:6e:fe:4a:
                    7e:5b:52:6f:e0:b9:82:c9:ce:d4:cf:a3:ce:f4:da:
                    76:d0:8d:0d:21:e9:1f:ef:11:ab:27:19:15:79:db:
                    8c:7e:ed:b3:c7:52:42:a0:ad:16:fb:57:0a:89:3d:
                    c5:f4:ec:d6:b8:f9:29:8b:c0:3e:08:6a:35:93:5f:
                    96:43:36:1a:3c:62:b4:93:f1:40:47:71:c5:b3:ce:
                    d9:7b:b0:de:7b:30:d2:21:a8:cf:1e:22:26:97:31:
                    31:55:95:ad:ac:8e:5a:e2:aa:d4:29:b8:22:78:b2:
                    d4:d2:cd:0b:64:41:b1:a2:69:14:fb:86:4a:40:e2:
                    ee:67:05:4a:36:06:6b:59:21:a7:10:29:3c:45:7a:
                    c1:00:cc:0f:63:ae:42:56:a5:50:ff:63:71:8c:c2:
                    32:a0:e9:f3:5d:2a:34:b4:a1:30:64:53:44:f6:94:
                    39:59:57:61:b8:64:a2:5e:03:b5:2a:0a:5b:dd:ae:
                    00:64:12:6d:26:fd:77:b7:0d:c1:01:25:0b:da:2f:
                    10:44:5b:14:6d:47:91:2f:e8:03:4f:9b:e2:e6:8a:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2C:9B:73:38:41:8A:33:50:E2:96:5B:86:C0:73:C2:84:C0:EB:9C
            X509v3 Authority Key Identifier:
                keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:57:b6:98:43:4b:63:ba:be:77:38:eb:c0:79:38:ed:e5:1f:
         af:a9:77:bf:90:fb:7e:39:0f:c9:4d:43:f6:8d:65:14:05:99:
         49:0b:72:02:72:06:5d:95:98:15:40:2c:25:29:e5:01:b9:f6:
         2d:e2:dc:d6:bf:05:e8:ee:a9:e6:a5:e0:b8:33:86:23:eb:67:
         e2:85:f9:99:c9:ee:55:a4:12:bb:2b:70:c0:ce:10:63:24:9a:
         5f:0c:cf:c1:34:5a:3e:1d:a4:e9:85:d4:0b:bb:65:ae:31:d6:
         ad:f8:82:fa:2d:4b:d4:c5:03:5d:62:5b:02:c4:a9:c1:ea:69:
         1c:2f:ac:cc:85:e9:cb:0c:40:3d:d4:1f:e6:b0:24:2e:a9:e2:
         70:5e:48:46:d6:4b:63:4d:c8:ce:52:d3:81:dc:7a:c4:7a:cc:
         e6:71:3d:a6:76:f1:7e:89:98:16:16:e2:2a:2c:81:ce:7c:6e:
         49:4b:a0:bb:49:9c:18:89:a9:60:f2:3d:c5:53:fd:ce:e7:b7:
         ef:3f:fd:43:5e:ca:94:34:7b:b7:c5:85:aa:42:8d:2e:92:7c:
         65:e0:c1:dc:e8:7d:b5:b2:fc:88:2c:07:f5:28:da:c6:15:ad:
         fc:39:bb:4e:75:07:8d:42:69:2e:de:f2:f7:95:3f:5f:64:83:
         eb:a6:e1:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDMwq/Xfi6hl5MuySHK21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjk0MTE3MzU2NGEwOWI3Y2Y4ZWZkZDk4NzU2MTQyNjJh
N2RkNjEwHhcNMjUwNjA3MTEwMDQyWhcNMjUwNjA4MTEwMDQyWjAzMTEwLwYDVQQD
Eyg4OTJjOWI3MzM4NDE4YTMzNTBlMjk2NWI4NmMwNzNjMjg0YzBlYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IzD87oLxl/SYfxEhKHna5TIwz5c
+smeYn3oztTlMFU6rKZVOfizy1Nu/kp+W1Jv4LmCyc7Uz6PO9Np20I0NIekf7xGr
JxkVeduMfu2zx1JCoK0W+1cKiT3F9OzWuPkpi8A+CGo1k1+WQzYaPGK0k/FAR3HF
s87Ze7DeezDSIajPHiImlzExVZWtrI5a4qrUKbgieLLU0s0LZEGxomkU+4ZKQOLu
ZwVKNgZrWSGnECk8RXrBAMwPY65CVqVQ/2NxjMIyoOnzXSo0tKEwZFNE9pQ5WVdh
uGSiXgO1Kgpb3a4AZBJtJv13tw3BASUL2i8QRFsUbUeRL+gDT5vi5oqoXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIksm3M4QYozUOKWW4bAc8KEwOucMB8GA1UdIwQY
MBaAFFL5QRc1ZKCbfPjv3Zh1YUJip91hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEt
MDlkOGU0OTNjMWY5LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEtMDlkOGU0OTNjMWY5
LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFe2mENL
Y7q+dzjrwHk47eUfr6l3v5D7fjkPyU1D9o1lFAWZSQtyAnIGXZWYFUAsJSnlAbn2
LeLc1r8F6O6p5qXguDOGI+tn4oX5mcnuVaQSuytwwM4QYySaXwzPwTRaPh2k6YXU
C7tlrjHWrfiC+i1L1MUDXWJbAsSpweppHC+szIXpywxAPdQf5rAkLqnicF5IRtZL
Y03IzlLTgdx6xHrM5nE9pnbxfomYFhbiKiyBznxuSUugu0mcGImpYPI9xVP9zue3
7z/9Q17KlDR7t8WFqkKNLpJ8ZeDB3Oh9tbL8iCwH9SjaxhWt/Dm7TnUHjUJpLt7y
95U/X2SD66bhMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:21 2025 by rpki-client