Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File:                     UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier:          ilJNsAfFO6pxeCVuEsd/NVQEZ7QrDLJY2TiWsjgU1i0=
Subject key identifier:   49:BF:EC:5B:66:78:CA:38:A9:C3:01:2B:72:A1:53:5E:39:AB:D7:6A
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer:       /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial:       019922FA722BF252EB0E09175B8702A0C102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 07:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:02 +0000
Files and hashes:         1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
                          2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: gupnWqTncjFniT7JPqJoRlfWTQJk2uDx1p3Rqr8SNsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:72:2b:f2:52:eb:0e:09:17:5b:87:02:a0:c1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
        Validity
            Not Before: Sep  7 07:01:02 2025 GMT
            Not After : Sep  8 07:01:02 2025 GMT
        Subject: CN=49bfec5b6678ca38a9c3012b72a1535e39abd76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:55:82:e2:92:68:dc:72:ac:1a:ea:e9:18:
                    88:6f:c3:cc:97:1f:f3:62:9f:ca:0a:9e:24:ea:1f:
                    71:39:da:6f:90:09:80:f6:de:1a:61:c4:38:14:17:
                    35:03:1d:2c:14:86:57:43:de:5d:8f:1c:3d:31:bf:
                    d8:cd:98:21:f3:f3:e5:4c:bd:b5:cc:8a:71:6f:db:
                    b1:35:76:9c:f1:06:7d:6d:ee:47:9b:d7:b9:78:81:
                    87:7f:f1:76:e8:14:dc:43:a4:21:7e:e2:7c:9f:ff:
                    55:41:a2:2f:fa:75:87:bb:b1:86:00:b1:29:ef:c6:
                    da:83:e1:79:92:dc:5b:a0:b3:36:80:88:8b:b4:0c:
                    8e:ae:2c:dd:f2:88:29:a2:62:97:1d:c8:59:c7:95:
                    c7:ea:d5:9e:06:5b:44:f7:a1:02:48:cd:5f:9e:9f:
                    9b:47:6d:38:98:27:44:fc:a8:e8:a9:7d:a9:af:11:
                    d4:06:96:b3:38:14:eb:66:28:47:ef:29:4f:47:35:
                    5d:ce:c8:46:a1:0e:d0:0d:95:ce:0f:e6:fc:c0:f1:
                    64:e9:d5:e4:47:d0:6c:83:67:29:a6:64:74:7d:a8:
                    8e:03:f5:ef:bc:7f:47:73:01:dc:52:ca:e2:09:9c:
                    55:ec:7c:25:d6:be:b7:64:1f:37:90:5a:3b:9a:64:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BF:EC:5B:66:78:CA:38:A9:C3:01:2B:72:A1:53:5E:39:AB:D7:6A
            X509v3 Authority Key Identifier:
                keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6c:f0:40:98:68:81:19:4d:ac:0e:1c:dd:5b:2e:1a:4b:6c:
         f4:58:0a:c1:a8:e3:f7:4b:0d:98:0e:bb:d6:7e:04:3f:45:e2:
         6e:e0:9d:54:44:26:c6:b6:d8:a5:5d:45:6e:ef:6f:3e:8c:60:
         c6:b6:3e:fc:92:20:f3:64:b9:86:84:ba:ae:f6:c3:c8:f1:7c:
         f3:3d:c6:5d:fd:00:23:89:a4:17:d3:ba:b1:d3:32:06:38:28:
         30:7a:4a:3d:3a:54:cd:19:36:35:6c:77:f1:83:b0:cb:24:39:
         86:cb:6e:7e:b0:d9:d3:60:e9:dd:10:2f:0b:b2:39:d1:b7:5e:
         aa:38:54:bf:0c:70:64:ad:4b:48:a6:e2:d0:30:ee:38:4c:43:
         ee:99:41:a0:d5:f9:02:87:9f:41:66:d2:67:6c:55:b0:68:c4:
         2d:2b:14:a7:41:89:39:ef:64:6c:b6:6f:f8:b2:90:26:76:15:
         f2:c5:ec:37:72:e9:14:d9:f0:37:94:3d:37:77:06:31:c2:53:
         af:c7:6a:e6:29:14:f7:aa:cd:52:bb:43:c9:f8:62:c6:cb:b8:
         3c:68:df:9e:d1:a1:4f:5c:ed:a9:ff:1f:54:26:aa:19:98:8b:
         85:a6:0b:7f:14:95:e8:15:9b:fb:09:88:00:7e:b9:5c:8d:8c:
         32:fa:96:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+nIr8lLrDgkXW4cCoMECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjYyOWYzNGNkMDgzYmM2ODA1NDA2OWIxY2M1ZWU3OTcx
ZjhiYmIwHhcNMjUwOTA3MDcwMTAyWhcNMjUwOTA4MDcwMTAyWjAzMTEwLwYDVQQD
Eyg0OWJmZWM1YjY2NzhjYTM4YTljMzAxMmI3MmExNTM1ZTM5YWJkNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu05VguKSaNxyrBrq6RiIb8PMlx/z
Yp/KCp4k6h9xOdpvkAmA9t4aYcQ4FBc1Ax0sFIZXQ95djxw9Mb/YzZgh8/PlTL21
zIpxb9uxNXac8QZ9be5Hm9e5eIGHf/F26BTcQ6QhfuJ8n/9VQaIv+nWHu7GGALEp
78bag+F5ktxboLM2gIiLtAyOrizd8ogpomKXHchZx5XH6tWeBltE96ECSM1fnp+b
R204mCdE/KjoqX2prxHUBpazOBTrZihH7ylPRzVdzshGoQ7QDZXOD+b8wPFk6dXk
R9Bsg2cppmR0faiOA/XvvH9HcwHcUsriCZxV7Hwl1r63ZB83kFo7mmTFQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm/7FtmeMo4qcMBK3KhU145q9dqMB8GA1UdIwQY
MBaAFFL2KfNM0IO8aAVAabHMXueXH4u7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEt
OTdhNDI4M2I2MjkyLzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85MzJmYjctZGIwNS00MDljLWExNmEtOTdhNDI4M2I2Mjky
LzEvVXZZcDgwelFnN3hvQlVCcHNjeGU1NWNmaTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGzwQJho
gRlNrA4c3VsuGkts9FgKwajj90sNmA671n4EP0XibuCdVEQmxrbYpV1Fbu9vPoxg
xrY+/JIg82S5hoS6rvbDyPF88z3GXf0AI4mkF9O6sdMyBjgoMHpKPTpUzRk2NWx3
8YOwyyQ5hstufrDZ02Dp3RAvC7I50bdeqjhUvwxwZK1LSKbi0DDuOExD7plBoNX5
AoefQWbSZ2xVsGjELSsUp0GJOe9kbLZv+LKQJnYV8sXsN3LpFNnwN5Q9N3cGMcJT
r8dq5ikU96rNUrtDyfhixsu4PGjfntGhT1ztqf8fVCaqGZiLhaYLfxSV6BWb+wmI
AH65XI2MMvqWJA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:40 2025 by rpki-client