Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
File:                     uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json)
Hash identifier:          jiRpy9dsuX5S6IYd0Ap6i/Rr+TCM9rjfxIPQGlJijQs=
Subject key identifier:   05:61:8B:CC:A4:68:09:0A:DF:74:E3:E8:65:81:CC:B2:FA:F5:EB:B4
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Certificate issuer:       /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial:       01992255BB1ECEF29517D833A377FA99F14A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
Manifest number:          083C
Signing time:             Sun 07 Sep 2025 04:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:07 +0000
Files and hashes:         1: fmD84MKcKNszvegRc78ea5yDEkU.roa (hash: l40Hf3OlT5bsApNDrNH7Y+k7wZYD3XggeWdBVJzjivU=)
                          2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: kXhguSao2rVVN4bj8BxsnX0sf/W7ty6Ez2pWzhmoaC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:bb:1e:ce:f2:95:17:d8:33:a3:77:fa:99:f1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
        Validity
            Not Before: Sep  7 04:01:07 2025 GMT
            Not After : Sep  8 04:01:07 2025 GMT
        Subject: CN=05618bcca468090adf74e3e86581ccb2faf5ebb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:eb:f0:b8:38:d5:f2:86:3c:3d:35:36:cb:
                    91:65:47:b1:ed:f0:aa:9d:95:a6:c2:b1:5e:d3:ed:
                    d7:dc:89:7d:bf:33:9b:19:1d:4f:df:85:aa:eb:70:
                    1e:a1:fa:a8:82:ec:7f:e6:c2:fe:9e:d6:08:d0:02:
                    d1:20:b4:08:d0:7d:55:a0:8d:63:59:b3:20:52:99:
                    0d:cf:bc:bf:fb:e4:00:26:85:45:7e:31:63:4a:05:
                    71:78:b2:81:ce:0a:fd:8b:c9:85:fb:ec:e3:eb:9c:
                    fb:e5:87:28:f5:2f:40:46:74:46:77:90:0f:f1:e8:
                    31:c4:69:c9:06:a9:13:cf:a6:62:31:6a:8b:92:52:
                    0e:b5:1b:bc:d6:86:29:41:36:90:24:e3:70:0b:de:
                    e0:79:63:bb:96:27:6b:01:0f:e1:ad:da:67:2d:85:
                    ff:53:94:8c:cc:46:21:81:6c:68:2f:01:30:7c:86:
                    19:00:87:68:9a:a5:07:ea:1e:73:96:13:32:ba:57:
                    96:bf:37:e9:9d:2a:50:5c:cf:ce:62:b5:0f:33:58:
                    e8:02:f1:4d:e4:45:a8:52:5e:32:2e:34:1e:c6:a5:
                    ec:29:f5:80:9b:50:5d:54:18:66:46:5b:74:12:81:
                    f4:2a:9a:9b:72:cf:4c:8a:11:16:4b:73:61:da:68:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:61:8B:CC:A4:68:09:0A:DF:74:E3:E8:65:81:CC:B2:FA:F5:EB:B4
            X509v3 Authority Key Identifier:
                keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:2c:45:c4:26:c8:c6:95:45:95:e9:90:15:4c:2b:ff:20:
         19:d4:26:8a:6c:8b:2f:7f:a0:c6:05:7c:e5:b2:25:db:32:de:
         35:61:00:58:4b:14:a5:72:7a:d9:16:2e:40:a2:e9:c7:16:77:
         00:a0:71:29:5d:52:13:87:da:3b:1c:96:1a:39:4c:0e:83:3e:
         ef:9a:13:b5:f9:0b:52:0d:a9:cc:d9:bb:08:f4:5b:e0:80:de:
         78:b2:b0:3e:ac:92:aa:8f:c0:96:eb:da:06:c2:71:da:8a:96:
         66:7b:29:90:cc:0b:c1:a7:1b:56:d9:d7:c5:b1:cd:fb:13:1e:
         ee:0a:9b:c8:e6:be:09:22:ca:64:ed:c8:14:c0:c1:f6:48:fd:
         c9:a6:8e:6b:80:a6:e6:7d:c9:fe:0f:dc:f0:b2:5d:02:7e:13:
         74:9e:42:87:16:3d:37:08:29:96:15:13:8e:ac:32:12:e4:13:
         ca:18:0d:d0:70:1e:60:cf:f4:83:6e:12:8e:3b:9f:4f:27:32:
         99:73:c0:58:5e:8f:43:bb:df:3d:52:12:c4:c1:ec:96:98:0a:
         01:e3:8b:3c:15:a5:44:fe:0a:a6:8c:e6:21:73:64:0d:e9:8f:
         b0:8b:44:5c:2a:58:54:97:3e:11:94:2c:3c:b7:73:cf:29:01:
         12:6a:42:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVbsezvKVF9gzo3f6mfFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTQzNDVhZmZkMTUwNmFmOWFmMzJlYzBkNzczOTliNzY2
NGFhM2YwHhcNMjUwOTA3MDQwMTA3WhcNMjUwOTA4MDQwMTA3WjAzMTEwLwYDVQQD
EygwNTYxOGJjY2E0NjgwOTBhZGY3NGUzZTg2NTgxY2NiMmZhZjVlYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZzr8Lg41fKGPD01NsuRZUex7fCq
nZWmwrFe0+3X3Il9vzObGR1P34Wq63Aeofqogux/5sL+ntYI0ALRILQI0H1VoI1j
WbMgUpkNz7y/++QAJoVFfjFjSgVxeLKBzgr9i8mF++zj65z75Yco9S9ARnRGd5AP
8egxxGnJBqkTz6ZiMWqLklIOtRu81oYpQTaQJONwC97geWO7lidrAQ/hrdpnLYX/
U5SMzEYhgWxoLwEwfIYZAIdomqUH6h5zlhMyuleWvzfpnSpQXM/OYrUPM1joAvFN
5EWoUl4yLjQexqXsKfWAm1BdVBhmRlt0EoH0Kpqbcs9MihEWS3Nh2mjaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVhi8ykaAkK33Tj6GWBzLL69eu0MB8GA1UdIwQY
MBaAFLgUNFr/0VBq+a8y7A13OZt2ZKo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUt
OWRlNzUyNWJhNzEyLzEvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUtOWRlNzUyNWJhNzEy
LzEvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGwsRcQm
yMaVRZXpkBVMK/8gGdQmimyLL3+gxgV85bIl2zLeNWEAWEsUpXJ62RYuQKLpxxZ3
AKBxKV1SE4faOxyWGjlMDoM+75oTtfkLUg2pzNm7CPRb4IDeeLKwPqySqo/Aluva
BsJx2oqWZnspkMwLwacbVtnXxbHN+xMe7gqbyOa+CSLKZO3IFMDB9kj9yaaOa4Cm
5n3J/g/c8LJdAn4TdJ5ChxY9NwgplhUTjqwyEuQTyhgN0HAeYM/0g24SjjufTycy
mXPAWF6PQ7vfPVISxMHslpgKAeOLPBWlRP4KpozmIXNkDemPsItEXCpYVJc+EZQs
PLdzzykBEmpCng==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client