Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
File:                     UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json)
Hash identifier:          mSgMh+yUq6aTZImnHcieDnuVLdbZW7IXOiVHVMMTDqY=
Subject key identifier:   63:46:DD:0F:46:68:13:BC:9A:1C:E4:C2:63:9A:3B:80:65:97:9E:1C
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       01975490490CFD3F3E583645BE011565A2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
Manifest number:          1659
Signing time:             Mon 09 Jun 2025 12:00:31 +0000
Manifest this update:     Mon 09 Jun 2025 12:00:31 +0000
Manifest next update:     Tue 10 Jun 2025 12:00:31 +0000
Files and hashes:         1: 2D8GskUOctsT18ewUQERiVKSyqY.roa (hash: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=)
                          2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=)
                          3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=)
                          4: CJvoWnaR2bDBM3uwknntcn2bVMA.roa (hash: Fb5QqnBE+SmiT0K9fxFnS2c5V8bamOheKNBY72WLunI=)
                          5: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=)
                          6: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=)
                          7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=)
                          8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: dO0x9RYvKeDAK/YubSE/lAd254f3U0OBoh6uKmuUnqE=)
                          9: cxtIOH2HTPQcljUlQ6T5b93OmjU.roa (hash: tH/NOyxHGmX11Frc+sHrlIOBqxLQMBd4oHjCtOuJpSU=)
                          10: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=)
                          11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:90:49:0c:fd:3f:3e:58:36:45:be:01:15:65:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Jun  9 12:00:31 2025 GMT
            Not After : Jun 10 12:00:31 2025 GMT
        Subject: CN=6346dd0f466813bc9a1ce4c2639a3b8065979e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:65:1f:fb:26:b7:92:c3:9d:e7:fc:9c:0f:
                    90:cf:62:49:6e:34:54:71:f5:db:32:f7:1d:33:99:
                    7d:54:83:dd:32:e6:36:c9:13:b1:28:00:27:bc:78:
                    b3:48:80:5c:2b:a7:03:b2:b3:df:47:1c:a3:48:ae:
                    86:fa:5c:82:01:c1:d4:dc:24:69:a1:29:be:81:f1:
                    af:75:fd:9c:93:ef:72:62:25:e5:df:2e:b5:21:a9:
                    12:3b:96:10:26:8d:30:ff:9a:00:cb:d4:84:6a:87:
                    34:75:90:8f:ce:a6:34:77:9b:ff:a5:f6:38:90:03:
                    99:1e:fe:e1:15:85:c9:6c:31:02:6e:41:97:63:55:
                    86:6f:fb:6b:e0:0f:8e:fb:a2:0a:5a:81:33:50:ad:
                    68:38:08:2f:0c:ee:a5:73:fc:45:23:1b:7b:e5:96:
                    45:dc:32:98:08:36:65:5b:ea:bd:cc:f5:13:c9:e6:
                    4d:4c:6d:cf:48:85:2d:66:d8:c3:91:9e:7d:bd:69:
                    56:76:64:79:11:3e:6b:bc:cd:8d:68:6a:38:3c:e1:
                    05:ae:af:40:b8:4e:64:3a:0d:14:5e:8c:c1:53:4f:
                    a6:95:82:23:15:df:10:73:dd:9e:6e:99:89:96:32:
                    6e:81:77:c7:c2:80:c9:73:c5:95:d7:92:b1:61:47:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:DD:0F:46:68:13:BC:9A:1C:E4:C2:63:9A:3B:80:65:97:9E:1C
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:03:04:7b:a4:8f:15:2d:5f:35:de:de:a2:00:bd:71:b0:
         91:d3:68:f2:a9:a7:4c:b8:d9:65:d2:28:d0:e2:ca:cf:32:e4:
         c5:2f:44:ec:c7:71:ef:73:2d:00:d2:a6:9c:b0:cb:dc:3b:36:
         9c:88:66:5a:37:ed:7e:29:da:19:50:cf:df:f3:08:47:08:f5:
         c1:cb:c7:2e:d2:3c:37:73:a7:be:16:00:d6:e5:55:fe:7e:12:
         e4:16:42:a3:29:ff:d6:fa:13:8a:bc:de:60:56:d5:21:cf:e5:
         af:6f:62:3f:35:0e:ad:5a:3d:22:8c:11:61:b2:fe:33:64:90:
         e9:60:93:cd:7c:55:3a:22:af:66:28:fc:3c:38:22:07:ce:4d:
         77:24:8b:62:ca:17:fc:bd:37:a7:30:a1:03:c2:a1:2a:09:4f:
         b2:57:dd:26:ed:bc:84:1d:fb:6c:d3:9c:73:38:08:5f:c0:37:
         85:f9:94:07:54:57:cb:c2:07:4c:69:9a:1c:c6:54:cd:37:76:
         4f:e5:3e:68:b7:a8:d4:b6:67:02:2b:23:bf:2f:96:e6:c8:90:
         d1:97:15:1b:34:9c:56:24:f1:e7:3b:ec:64:f7:46:f9:7a:7c:
         cf:4d:cc:eb:2e:5f:06:ed:cd:f1:1b:0d:a2:97:69:4d:b7:b1:
         6b:c8:fb:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkEkM/T8+WDZFvgEVZaLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjUwNjA5MTIwMDMxWhcNMjUwNjEwMTIwMDMxWjAzMTEwLwYDVQQD
Eyg2MzQ2ZGQwZjQ2NjgxM2JjOWExY2U0YzI2MzlhM2I4MDY1OTc5ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv9lH/smt5LDnef8nA+Qz2JJbjRU
cfXbMvcdM5l9VIPdMuY2yROxKAAnvHizSIBcK6cDsrPfRxyjSK6G+lyCAcHU3CRp
oSm+gfGvdf2ck+9yYiXl3y61IakSO5YQJo0w/5oAy9SEaoc0dZCPzqY0d5v/pfY4
kAOZHv7hFYXJbDECbkGXY1WGb/tr4A+O+6IKWoEzUK1oOAgvDO6lc/xFIxt75ZZF
3DKYCDZlW+q9zPUTyeZNTG3PSIUtZtjDkZ59vWlWdmR5ET5rvM2NaGo4POEFrq9A
uE5kOg0UXozBU0+mlYIjFd8Qc92ebpmJljJugXfHwoDJc8WV15KxYUeAoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNG3Q9GaBO8mhzkwmOaO4Bll54cMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNIDBHuk
jxUtXzXe3qIAvXGwkdNo8qmnTLjZZdIo0OLKzzLkxS9E7Mdx73MtANKmnLDL3Ds2
nIhmWjftfinaGVDP3/MIRwj1wcvHLtI8N3OnvhYA1uVV/n4S5BZCoyn/1voTirze
YFbVIc/lr29iPzUOrVo9IowRYbL+M2SQ6WCTzXxVOiKvZij8PDgiB85NdySLYsoX
/L03pzChA8KhKglPslfdJu28hB37bNOcczgIX8A3hfmUB1RXy8IHTGmaHMZUzTd2
T+U+aLeo1LZnAisjvy+W5siQ0ZcVGzScViTx5zvsZPdG+Xp8z03M6y5fBu3N8RsN
opdpTbexa8j7Cg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:06:49 2025 by rpki-client