Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          zHKKviqbJDm1ekUb7aJtCIouYR8pl6t371timqSt4II=
Subject key identifier:   8B:C3:C3:8E:59:3C:09:64:5C:38:39:BC:7E:0C:FC:69:E3:C6:5C:D5
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       01992EC7143C9E89DAB5045CD78BC5EDD15E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          03CF
Signing time:             Tue 09 Sep 2025 14:00:22 +0000
Manifest this update:     Tue 09 Sep 2025 14:00:22 +0000
Manifest next update:     Wed 10 Sep 2025 14:00:22 +0000
Files and hashes:         1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=)
                          2: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=)
                          3: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=)
                          4: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=)
                          5: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=)
                          6: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=)
                          7: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=)
                          8: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=)
                          9: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=)
                          10: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=)
                          11: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=)
                          12: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=)
                          13: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=)
                          14: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=)
                          15: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=)
                          16: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=)
                          17: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=)
                          18: iyGn9-N4_Y-74wtv84vIggbUgGE.roa (hash: 0+sbmwNGxEETCuI+TbmtpOScQW3Ga70I+RwZkGrwt4I=)
                          19: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=)
                          20: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=)
                          21: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: EkKw78aR4Xv8wbB/BjHmHF38ZvYZkNTZv5CZ8PyEbro=)
                          22: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=)
                          23: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:c7:14:3c:9e:89:da:b5:04:5c:d7:8b:c5:ed:d1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Sep  9 14:00:22 2025 GMT
            Not After : Sep 10 14:00:22 2025 GMT
        Subject: CN=8bc3c38e593c09645c3839bc7e0cfc69e3c65cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:14:f8:e8:02:b8:d4:96:ab:12:b3:67:e7:
                    c7:05:33:fa:cb:8c:04:97:1b:62:c4:47:73:1c:55:
                    87:b6:fc:6c:91:42:a8:bf:aa:58:f4:e2:2d:ce:df:
                    6c:7f:8d:0a:9f:2e:56:2f:2c:df:25:e1:7e:d6:40:
                    89:b9:33:8a:79:0c:3d:b1:4d:05:9f:12:5a:80:d9:
                    14:2a:ae:8c:3d:be:4e:f1:44:c4:26:85:cc:0e:63:
                    26:b9:08:94:bc:99:86:7c:42:1e:12:f3:b9:fc:4b:
                    a4:5c:31:9d:48:87:4b:b3:46:f7:51:f4:66:aa:de:
                    d8:85:10:d8:a9:cc:92:e7:27:01:f8:f8:4c:24:bd:
                    d3:94:2f:4d:9e:19:b1:53:8c:a2:39:03:70:98:65:
                    04:c4:11:2d:bf:bb:eb:23:cc:6b:8f:d7:59:b6:ee:
                    56:da:9b:73:d6:be:e4:ee:44:a0:34:21:0d:c3:1d:
                    e1:56:5f:5d:f9:53:ab:23:f9:c4:52:34:bd:b5:bc:
                    07:0a:76:84:f0:00:bf:d2:80:34:02:47:36:33:22:
                    23:68:a9:51:45:65:7b:21:4d:7b:46:63:d1:e8:e2:
                    4d:b3:a2:fe:50:22:2f:6a:17:d0:b0:49:de:1a:63:
                    ff:cf:c2:69:71:ef:34:50:b4:59:47:ad:23:33:92:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C3:C3:8E:59:3C:09:64:5C:38:39:BC:7E:0C:FC:69:E3:C6:5C:D5
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:51:0e:ad:3b:9f:7e:41:fa:72:8e:0e:b0:77:b1:72:10:
         bc:af:33:fa:6f:ab:77:76:78:26:92:96:03:bc:80:7f:3d:5c:
         07:96:48:9e:f0:3d:3f:d7:37:07:1a:ef:d1:45:0d:ce:04:cc:
         c7:33:80:ca:e2:00:87:4c:6c:60:c1:df:14:6f:23:5a:52:be:
         8d:36:93:e9:5f:77:09:21:45:0e:72:5e:83:cc:70:83:c6:5c:
         7b:0f:b6:e4:53:99:d0:e3:9f:27:29:22:52:76:d2:92:a9:d2:
         85:f4:bc:07:6d:f1:04:6e:a5:10:76:c2:80:5b:ea:38:2f:aa:
         d0:8e:6d:7a:48:bf:47:ee:42:ca:b0:3b:55:da:23:34:60:4b:
         a0:1d:75:1e:5e:16:c1:5a:6a:f0:9a:17:42:fc:67:64:47:23:
         66:3b:99:e4:6e:e4:59:80:77:0c:08:4d:e2:e5:35:97:43:ac:
         f6:cb:68:f2:d6:26:d0:3c:af:c2:05:29:63:d9:28:18:7d:49:
         c7:c1:7d:88:95:ea:c6:39:5c:f2:17:e8:63:68:ce:74:1a:dc:
         00:48:03:21:24:ae:f9:cb:0c:47:a7:9f:fe:67:7e:2e:6c:97:
         ad:df:c9:3f:de:df:3d:cf:b9:65:df:30:27:5c:69:a2:22:c7:
         24:29:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:50:04 2025 by rpki-client