Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File:                     ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier:          5qWWkFS2wzFdlY4NzZpsW2JiYEggbYkG4FkuAr3mB4Y=
Subject key identifier:   05:E4:30:B8:D6:6C:9A:2A:9D:30:7F:3C:6B:F5:A1:54:31:6B:BD:E7
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer:       /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial:       019916F67C6885F1E3E38070B2ECC9E9AB89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number:          166B
Signing time:             Thu 04 Sep 2025 23:01:16 +0000
Manifest this update:     Thu 04 Sep 2025 23:01:16 +0000
Manifest next update:     Fri 05 Sep 2025 23:01:16 +0000
Files and hashes:         1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
                          2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: 8VsUjeg060Tf7AEl3QX51rfoKwJPRcmaYcvCkdbG1W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f6:7c:68:85:f1:e3:e3:80:70:b2:ec:c9:e9:ab:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
        Validity
            Not Before: Sep  4 23:01:16 2025 GMT
            Not After : Sep  5 23:01:16 2025 GMT
        Subject: CN=05e430b8d66c9a2a9d307f3c6bf5a154316bbde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:3d:a8:d9:3c:07:11:09:80:45:75:9f:f7:
                    9d:32:9c:ff:05:67:3a:c6:f0:fc:6e:e6:5f:f9:d7:
                    6e:ad:89:78:01:e7:9f:91:7a:aa:00:e7:35:20:f3:
                    bc:20:d5:33:ba:a5:7a:d5:33:73:7c:3e:73:50:7b:
                    aa:e8:a1:60:7e:15:21:47:13:d2:9f:6f:d5:ef:bf:
                    61:1b:cf:e3:b8:5e:49:41:d1:68:3d:d4:1b:ba:94:
                    2f:a6:6a:5f:1b:b2:3d:34:b2:9a:3f:b6:07:d2:96:
                    33:7f:e3:b8:02:ef:59:75:0b:be:af:61:9c:f4:36:
                    88:e9:03:0c:14:9a:2c:e6:cb:93:f2:0a:4d:8d:86:
                    30:5f:cd:3d:2f:96:7f:8b:a8:b7:84:6b:e3:10:33:
                    d0:4e:79:a0:62:97:ed:04:b4:75:bd:00:4f:0e:d2:
                    55:7f:a7:5a:c8:5a:e9:a9:d0:26:2d:b0:bc:e0:f8:
                    17:a8:7e:0a:b0:28:e6:ae:68:1c:12:d6:10:fb:06:
                    c6:02:6b:9c:0a:8f:2b:cb:48:22:e7:f1:7d:d3:a0:
                    85:98:9b:dd:7a:cc:58:08:66:b7:59:83:34:05:6a:
                    ce:ee:7b:b3:03:8d:9e:f5:56:a4:41:37:ce:36:d2:
                    86:06:7b:f7:92:f3:af:64:ce:61:d8:c3:95:ce:86:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:30:B8:D6:6C:9A:2A:9D:30:7F:3C:6B:F5:A1:54:31:6B:BD:E7
            X509v3 Authority Key Identifier:
                keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:e6:ec:e4:65:4a:cc:35:0e:33:7a:e2:31:70:57:47:80:
         3f:00:4f:80:c4:46:d3:81:4e:50:5b:ef:46:7c:36:ec:5d:b4:
         6d:59:83:ce:40:db:51:2e:11:31:6a:c7:b0:7b:f6:cf:ec:ce:
         79:44:c1:6b:16:7c:e5:36:6a:c9:ad:65:70:05:b2:45:40:1e:
         3d:63:18:96:a0:af:09:75:09:0c:42:18:1a:dd:5c:0e:fa:6d:
         a7:0c:57:b4:52:32:1e:93:f9:c7:8a:9a:30:ba:2a:2a:81:44:
         66:9f:07:ba:93:9c:17:99:42:c1:a0:09:fb:13:81:f6:5f:d7:
         39:c9:18:fe:d8:10:92:f9:9a:e8:e6:22:e8:21:16:5a:3c:dc:
         19:3a:eb:f8:05:76:2a:1d:0a:03:7f:20:e8:35:7b:5a:e2:ce:
         a2:d8:08:9c:7e:89:6e:7a:2f:e6:68:d9:84:2e:88:48:e2:8a:
         b7:cf:11:0c:21:9e:bf:eb:b8:3b:1e:d5:f7:8c:99:a3:c4:53:
         e6:99:a4:ec:04:e4:7b:ea:30:34:ea:03:2b:f1:ec:9f:27:f8:
         b5:08:29:34:bf:d7:d6:21:d9:d5:61:f3:48:a0:00:85:2d:d9:
         ef:e3:e7:39:67:07:53:cd:9f:42:54:7e:cc:10:f2:3c:e3:38:
         30:e5:b5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9nxohfHj44BwsuzJ6auJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yzg5Y2ZhZGQ1MWY0ZDkyMWJiM2QwYzU1ZjkzMTM2NjNh
NzFjYzQwHhcNMjUwOTA0MjMwMTE2WhcNMjUwOTA1MjMwMTE2WjAzMTEwLwYDVQQD
EygwNWU0MzBiOGQ2NmM5YTJhOWQzMDdmM2M2YmY1YTE1NDMxNmJiZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqU9qNk8BxEJgEV1n/edMpz/BWc6
xvD8buZf+ddurYl4AeefkXqqAOc1IPO8INUzuqV61TNzfD5zUHuq6KFgfhUhRxPS
n2/V779hG8/juF5JQdFoPdQbupQvpmpfG7I9NLKaP7YH0pYzf+O4Au9ZdQu+r2Gc
9DaI6QMMFJos5suT8gpNjYYwX809L5Z/i6i3hGvjEDPQTnmgYpftBLR1vQBPDtJV
f6dayFrpqdAmLbC84PgXqH4KsCjmrmgcEtYQ+wbGAmucCo8ry0gi5/F906CFmJvd
esxYCGa3WYM0BWrO7nuzA42e9VakQTfONtKGBnv3kvOvZM5h2MOVzoZluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXkMLjWbJoqnTB/PGv1oVQxa73nMB8GA1UdIwQY
MBaAFLnInPrdUfTZIbs9DFX5MTZjpxzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQt
MzlkOWUwOTYyNDQwLzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQtMzlkOWUwOTYyNDQw
LzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN3m7ORl
Ssw1DjN64jFwV0eAPwBPgMRG04FOUFvvRnw27F20bVmDzkDbUS4RMWrHsHv2z+zO
eUTBaxZ85TZqya1lcAWyRUAePWMYlqCvCXUJDEIYGt1cDvptpwxXtFIyHpP5x4qa
MLoqKoFEZp8HupOcF5lCwaAJ+xOB9l/XOckY/tgQkvma6OYi6CEWWjzcGTrr+AV2
Kh0KA38g6DV7WuLOotgInH6Jbnov5mjZhC6ISOKKt88RDCGev+u4Ox7V94yZo8RT
5pmk7ATke+owNOoDK/Hsnyf4tQgpNL/X1iHZ1WHzSKAAhS3Z7+PnOWcHU82fQlR+
zBDyPOM4MOW10g==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:25:22 2025 by rpki-client