Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File:                     UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier:          idBU2tLmQk1YHwa2KFtM513rBXVJwZ/V7aSOpQismnI=
Subject key identifier:   AF:BA:D5:13:BE:E2:2C:B2:5F:37:C1:32:8C:6E:69:27:A9:D1:E2:BA
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer:       /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial:       019922C3A5C6D1477773E16E4CE62D48E7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number:          89
Signing time:             Sun 07 Sep 2025 06:01:11 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:11 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:11 +0000
Files and hashes:         1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: X8cywSx4BOtnZ8ranTVdNKGoJmOx5cWiJmIH3CU2Wb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:a5:c6:d1:47:77:73:e1:6e:4c:e6:2d:48:e7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
        Validity
            Not Before: Sep  7 06:01:11 2025 GMT
            Not After : Sep  8 06:01:11 2025 GMT
        Subject: CN=afbad513bee22cb25f37c1328c6e6927a9d1e2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:d3:3a:81:47:b3:ab:1d:3f:48:c5:09:7f:
                    83:cd:ec:9d:9d:57:31:0a:1b:26:f6:ca:54:67:15:
                    93:85:fe:37:e5:70:21:a1:36:fe:4b:77:1d:4e:db:
                    82:ff:86:59:c7:e0:95:bb:9a:99:8c:ba:ba:78:bc:
                    bf:66:17:e1:3c:ef:a5:bc:47:b7:e8:25:ef:bd:b0:
                    41:1c:1a:bd:ba:b4:7c:2e:b8:d0:55:7f:1a:00:35:
                    fa:d5:34:0d:8a:6b:13:43:5b:33:ff:2c:23:f8:30:
                    e9:95:59:17:64:ff:2e:1e:e9:5e:f8:89:48:6d:b1:
                    15:a1:49:9a:88:1e:55:f8:ba:14:d3:0b:b8:3e:08:
                    5c:12:75:70:97:43:14:f9:d1:22:30:90:cc:90:30:
                    a7:cf:60:1f:8a:0a:a5:5e:af:3f:7b:2d:40:51:0e:
                    83:68:90:0a:c4:1b:03:cd:5d:57:bc:9e:da:37:2e:
                    52:7f:90:68:c9:39:5c:b2:ce:96:12:a4:b2:47:a4:
                    52:95:31:3d:0b:ea:85:21:aa:c3:d3:f3:25:74:df:
                    ea:49:7b:2c:1e:fd:6c:01:f5:14:73:c3:d6:91:db:
                    eb:d1:f8:9f:1d:d7:ea:a3:b2:24:0d:6f:28:b6:2a:
                    b9:7a:ea:0b:69:a7:a4:72:1d:1f:ca:e0:87:02:05:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BA:D5:13:BE:E2:2C:B2:5F:37:C1:32:8C:6E:69:27:A9:D1:E2:BA
            X509v3 Authority Key Identifier:
                keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:73:84:51:37:0a:87:0e:e2:cc:c0:b1:fb:f4:48:56:40:04:
         64:e6:e1:c1:55:37:8a:70:67:70:f8:76:54:6d:9e:8b:52:61:
         c3:d5:ef:a2:f9:93:82:f1:38:1d:f9:a6:9c:17:a6:2d:29:aa:
         cc:69:a7:9b:51:31:75:b3:b1:76:6c:15:18:37:4f:fc:23:38:
         ae:08:82:0b:8d:39:5e:55:7e:7f:3e:0e:3c:c1:e7:9a:75:59:
         3a:89:ac:55:ce:1b:4f:fd:39:06:a5:ee:81:f1:86:a5:39:d7:
         fe:10:44:3a:fe:0c:e7:ce:93:67:1e:91:98:7e:53:84:9f:a2:
         1a:a8:f5:03:cc:57:85:64:de:0f:e1:c7:8b:ac:4a:74:ff:b2:
         11:e4:30:75:8d:50:1f:6a:fa:f2:bb:b6:a0:4f:8e:8c:f9:aa:
         d3:c6:ca:f1:8a:8d:7d:3c:38:d1:90:90:ed:1d:74:00:30:46:
         10:2f:8b:e1:fd:6a:b5:e6:41:72:fa:9d:06:cd:0b:1c:ea:3c:
         60:5d:df:a0:d0:87:47:d9:06:3a:c1:a5:d7:d2:e8:56:60:de:
         b1:ef:39:48:d3:6b:f9:fa:6c:8b:4b:f6:7f:fd:e9:21:37:c7:
         07:bc:0c:b7:7f:fb:46:fb:57:4d:f8:43:b8:78:ca:c7:c4:06:
         83:f7:d3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6XG0Ud3c+FuTOYtSOfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTQ4NGQwZGUwMzlmNjY1ZTFmOTJjYWIzMTFjZmViYzU5
MmI3YTcwHhcNMjUwOTA3MDYwMTExWhcNMjUwOTA4MDYwMTExWjAzMTEwLwYDVQQD
EyhhZmJhZDUxM2JlZTIyY2IyNWYzN2MxMzI4YzZlNjkyN2E5ZDFlMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY3TOoFHs6sdP0jFCX+DzeydnVcx
Chsm9spUZxWThf435XAhoTb+S3cdTtuC/4ZZx+CVu5qZjLq6eLy/ZhfhPO+lvEe3
6CXvvbBBHBq9urR8LrjQVX8aADX61TQNimsTQ1sz/ywj+DDplVkXZP8uHule+IlI
bbEVoUmaiB5V+LoU0wu4PghcEnVwl0MU+dEiMJDMkDCnz2AfigqlXq8/ey1AUQ6D
aJAKxBsDzV1XvJ7aNy5Sf5BoyTlcss6WEqSyR6RSlTE9C+qFIarD0/MldN/qSXss
Hv1sAfUUc8PWkdvr0fifHdfqo7IkDW8otiq5euoLaaekch0fyuCHAgVupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+61RO+4iyyXzfBMoxuaSep0eK6MB8GA1UdIwQY
MBaAFFMUhNDeA59mXh+SyrMRz+vFkrenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGIt
OTNhZjI1NzMwMjJhLzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGItOTNhZjI1NzMwMjJh
LzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnOEUTcK
hw7izMCx+/RIVkAEZObhwVU3inBncPh2VG2ei1Jhw9XvovmTgvE4HfmmnBemLSmq
zGmnm1ExdbOxdmwVGDdP/CM4rgiCC405XlV+fz4OPMHnmnVZOomsVc4bT/05BqXu
gfGGpTnX/hBEOv4M586TZx6RmH5ThJ+iGqj1A8xXhWTeD+HHi6xKdP+yEeQwdY1Q
H2r68ru2oE+OjPmq08bK8YqNfTw40ZCQ7R10ADBGEC+L4f1qteZBcvqdBs0LHOo8
YF3foNCHR9kGOsGl19LoVmDese85SNNr+fpsi0v2f/3pITfHB7wMt3/7RvtXTfhD
uHjKx8QGg/fTYA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:57 2025 by rpki-client