Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File:                     uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier:          epjw8YrVQ/KGEisVxuCnu9N8Z82zw//Wewyi2dp90Gc=
Subject key identifier:   44:70:EA:C9:B6:EA:6B:0B:C6:1A:B4:A4:65:B0:2D:8D:20:50:38:53
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer:       /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial:       0199239F34E58463BF31FAD059E4C1E6D01B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number:          0127
Signing time:             Sun 07 Sep 2025 10:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:00 +0000
Files and hashes:         1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
                          2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: GTb1wI3njM8SDPLgTQ2Xd+F/QY9TI99s1dOLJnFAwRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:34:e5:84:63:bf:31:fa:d0:59:e4:c1:e6:d0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
        Validity
            Not Before: Sep  7 10:01:00 2025 GMT
            Not After : Sep  8 10:01:00 2025 GMT
        Subject: CN=4470eac9b6ea6b0bc61ab4a465b02d8d20503853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:6f:17:aa:b9:13:e8:bd:d2:81:ab:88:1b:
                    de:3b:c4:26:2e:83:a1:c3:de:93:99:4b:30:49:d0:
                    a7:09:2b:ab:61:8d:e6:c7:c1:f9:f6:8d:b1:cb:bc:
                    49:a6:a7:eb:5d:93:77:c7:39:22:68:8c:37:c6:cd:
                    55:b6:9c:99:6e:6a:a9:cb:3e:25:4f:48:b3:18:ea:
                    07:b6:78:47:81:cb:5a:ef:9a:7c:7d:d1:2d:d9:91:
                    01:9b:94:08:fa:b7:16:09:ed:10:e7:ee:ef:fb:5a:
                    17:29:73:fe:04:f2:e5:62:d7:59:83:34:95:76:75:
                    b8:2f:da:94:25:3e:b0:a1:c8:c6:c7:c8:57:ff:25:
                    90:e7:e6:1f:fe:1c:e4:7b:2e:93:c5:d9:f1:dd:36:
                    a6:58:ce:52:c1:28:6f:f2:75:b9:bb:3b:e2:46:55:
                    46:e3:b0:1a:20:2c:99:ea:49:91:f6:4d:89:b7:69:
                    ad:28:f9:43:d2:0b:17:14:d8:92:6b:55:9a:6c:d9:
                    2b:79:39:ad:eb:c1:85:db:9f:37:5f:4d:a5:d6:eb:
                    3c:aa:2c:27:8a:37:ea:38:6e:76:6e:10:43:1b:bb:
                    60:f8:a0:a9:a6:8f:85:ef:38:3a:8f:8b:4a:8e:ef:
                    54:27:b7:8e:ab:30:d2:f6:b6:56:ac:d2:cf:ed:d8:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:70:EA:C9:B6:EA:6B:0B:C6:1A:B4:A4:65:B0:2D:8D:20:50:38:53
            X509v3 Authority Key Identifier:
                keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:e2:e7:bf:c0:ca:54:a7:b8:10:d4:9c:31:b7:33:07:c7:
         b1:ee:55:51:af:b1:8c:6b:2a:ec:ea:4b:f5:f1:2c:98:90:7f:
         7c:79:07:09:49:6a:f6:9b:df:a6:eb:b3:95:52:bf:64:9a:61:
         15:8a:93:16:15:d4:28:d5:fd:aa:81:ad:de:cc:6f:8a:4c:b3:
         78:ac:f7:3b:47:35:33:ef:ec:fb:ba:ab:6a:01:9c:59:a3:19:
         dc:78:30:17:e4:b2:7f:89:53:66:48:33:92:9c:96:27:26:a4:
         79:8c:42:b3:48:a6:f6:25:69:50:a6:bc:10:ea:ee:3c:47:42:
         c7:e4:7f:73:dc:ca:65:14:fe:49:6a:09:b8:f6:ed:03:ec:74:
         bb:bd:5f:a5:f0:62:ae:76:e3:e4:d8:21:7b:01:bd:4d:60:89:
         88:eb:c0:c0:2d:d2:8f:b8:5b:cc:db:8e:e6:2e:b5:82:cb:84:
         c5:23:35:84:bf:ea:74:b1:76:6c:91:6a:26:99:d2:60:63:de:
         f7:d9:9f:d6:92:89:39:b6:a6:d8:fd:da:fa:c0:af:20:ef:27:
         ff:39:99:c9:74:e6:43:d0:2b:3f:f7:fa:aa:f4:56:79:31:e1:
         c5:9c:25:f5:ee:b4:b8:28:17:08:ea:7f:3f:80:0e:0e:d8:bd:
         de:13:97:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnzTlhGO/MfrQWeTB5tAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDVkMjJkMzc2ZmNhMTk3YjJlODRlMWVlNTczMjAzNDQz
MmZmYWQwHhcNMjUwOTA3MTAwMTAwWhcNMjUwOTA4MTAwMTAwWjAzMTEwLwYDVQQD
Eyg0NDcwZWFjOWI2ZWE2YjBiYzYxYWI0YTQ2NWIwMmQ4ZDIwNTAzODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllhvF6q5E+i90oGriBveO8QmLoOh
w96TmUswSdCnCSurYY3mx8H59o2xy7xJpqfrXZN3xzkiaIw3xs1VtpyZbmqpyz4l
T0izGOoHtnhHgcta75p8fdEt2ZEBm5QI+rcWCe0Q5+7v+1oXKXP+BPLlYtdZgzSV
dnW4L9qUJT6wocjGx8hX/yWQ5+Yf/hzkey6Txdnx3TamWM5SwShv8nW5uzviRlVG
47AaICyZ6kmR9k2Jt2mtKPlD0gsXFNiSa1WabNkreTmt68GF2583X02l1us8qiwn
ijfqOG52bhBDG7tg+KCppo+F7zg6j4tKju9UJ7eOqzDS9rZWrNLP7dg49wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERw6sm26msLxhq0pGWwLY0gUDhTMB8GA1UdIwQY
MBaAFLlF0i03b8oZey6E4e5XMgNEMv+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVYU0xUZHZ5aGw3TG9UaDdsY3lBMFF5XzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82MzhhOGUtN2YwOC00MmY1LWE5OGMt
NGM1ZTY3ZTVlZTI1LzEvdVVYU0xUZHZ5aGw3TG9UaDdsY3lBMFF5XzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82MzhhOGUtN2YwOC00MmY1LWE5OGMtNGM1ZTY3ZTVlZTI1
LzEvdVVYU0xUZHZ5aGw3TG9UaDdsY3lBMFF5XzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE7i57/A
ylSnuBDUnDG3MwfHse5VUa+xjGsq7OpL9fEsmJB/fHkHCUlq9pvfpuuzlVK/ZJph
FYqTFhXUKNX9qoGt3sxvikyzeKz3O0c1M+/s+7qragGcWaMZ3HgwF+Syf4lTZkgz
kpyWJyakeYxCs0im9iVpUKa8EOruPEdCx+R/c9zKZRT+SWoJuPbtA+x0u71fpfBi
rnbj5NghewG9TWCJiOvAwC3Sj7hbzNuO5i61gsuExSM1hL/qdLF2bJFqJpnSYGPe
99mf1pKJObam2P3a+sCvIO8n/zmZyXTmQ9ArP/f6qvRWeTHhxZwl9e60uCgXCOp/
P4AODti93hOXbQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:17 2025 by rpki-client