Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File:                     uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier:          rH0A2UeceDvU6cqWpf+zwOUkDzQKJXhbbnOZy12Wx2A=
Subject key identifier:   D2:AC:C2:24:71:C0:65:47:2C:30:CC:4E:C0:96:F4:9C:61:CD:70:8A
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer:       /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial:       0197481E3A890BECB332A75C54755786609A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number:          0BBD
Signing time:             Sat 07 Jun 2025 02:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:29 +0000
Files and hashes:         1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
                          2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: EtvLUnxtl5chZCFxyoEc0xz0s8Ogw8dlaYFnWKFl+18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:3a:89:0b:ec:b3:32:a7:5c:54:75:57:86:60:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
        Validity
            Not Before: Jun  7 02:00:29 2025 GMT
            Not After : Jun  8 02:00:29 2025 GMT
        Subject: CN=d2acc22471c065472c30cc4ec096f49c61cd708a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:46:e0:cc:13:7f:ec:2f:4c:df:60:df:86:
                    27:ea:e7:38:f2:94:de:e2:c4:99:87:26:75:a6:f6:
                    84:e9:68:db:9f:d0:96:73:c4:83:42:c0:4b:03:bb:
                    29:0f:c3:93:a3:e0:49:d9:ab:25:12:03:ba:d1:07:
                    79:49:45:b0:f8:5f:ab:bb:3d:24:09:01:f6:c9:17:
                    2f:4a:20:ca:71:e5:7c:74:20:84:bb:b8:77:4f:5c:
                    85:94:f2:a8:3b:03:ad:f0:9c:d9:41:74:5d:06:37:
                    32:68:b7:07:ba:d7:4d:f3:e9:a7:7b:f4:9b:fe:84:
                    bd:b1:7b:e4:0e:10:76:a4:ec:c5:91:e3:f0:16:11:
                    9a:62:a7:df:2d:ac:ea:5f:b9:ed:db:34:f8:89:a0:
                    1d:d0:de:bf:a4:d7:61:a1:37:fa:ee:8e:04:8e:db:
                    b6:e0:65:57:01:be:5a:05:98:55:9a:95:67:b3:7e:
                    1c:e0:0f:18:7b:00:c1:d9:15:45:d7:1a:ad:1b:88:
                    de:9d:7d:db:c8:7e:06:70:55:91:89:7b:1e:51:59:
                    ce:ac:c9:1a:ca:74:e2:36:f1:bf:76:c1:91:4a:97:
                    93:5e:23:62:cd:65:ab:4e:5b:26:3c:35:3a:67:15:
                    72:97:e1:e4:0b:2f:f2:10:10:e2:4d:c7:74:24:f5:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:C2:24:71:C0:65:47:2C:30:CC:4E:C0:96:F4:9C:61:CD:70:8A
            X509v3 Authority Key Identifier:
                keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ab:7f:86:f8:db:97:76:7a:c8:4a:27:75:fe:b0:52:de:a2:
         23:f3:6b:33:ec:d5:f6:e8:7f:50:8b:a0:f9:33:1d:de:84:66:
         fd:a8:31:e4:97:69:57:92:76:51:55:b5:36:bb:61:fe:b6:45:
         54:1a:75:6a:d1:fc:2a:c2:51:8b:83:75:dc:3b:1e:df:1c:4e:
         be:96:a7:e8:55:3f:31:49:c0:80:a3:1a:b0:90:a0:7e:e8:d0:
         81:d7:09:d8:a4:b7:7b:65:6e:ce:36:ba:cb:4d:c4:c3:5a:d5:
         f9:6d:57:ca:57:83:c3:5a:79:f7:36:6c:d2:d8:01:ba:18:16:
         e5:e4:d4:a3:50:38:01:0e:bc:63:c9:9f:f0:4c:50:e7:c1:54:
         44:e4:a5:09:10:d0:f7:0e:87:50:88:10:97:83:f4:08:89:ec:
         58:39:70:92:70:c2:f3:73:92:e5:6c:75:1f:18:ed:4d:22:95:
         34:cb:ba:14:73:68:12:c6:4b:24:87:db:54:7f:6b:49:76:34:
         4c:7a:df:85:b0:47:62:2e:dc:2f:dc:1e:66:15:8e:4c:54:6d:
         aa:7a:ff:7c:71:48:67:a1:e1:13:ff:5d:92:19:75:08:c6:18:
         32:80:9e:89:10:c1:26:45:29:4a:22:25:d9:cd:6d:ef:52:71:
         39:9b:97:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHjqJC+yzMqdcVHVXhmCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh
MmE1MGYwHhcNMjUwNjA3MDIwMDI5WhcNMjUwNjA4MDIwMDI5WjAzMTEwLwYDVQQD
EyhkMmFjYzIyNDcxYzA2NTQ3MmMzMGNjNGVjMDk2ZjQ5YzYxY2Q3MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr5G4MwTf+wvTN9g34Yn6uc48pTe
4sSZhyZ1pvaE6Wjbn9CWc8SDQsBLA7spD8OTo+BJ2aslEgO60Qd5SUWw+F+ruz0k
CQH2yRcvSiDKceV8dCCEu7h3T1yFlPKoOwOt8JzZQXRdBjcyaLcHutdN8+mne/Sb
/oS9sXvkDhB2pOzFkePwFhGaYqffLazqX7nt2zT4iaAd0N6/pNdhoTf67o4Ejtu2
4GVXAb5aBZhVmpVns34c4A8YewDB2RVF1xqtG4jenX3byH4GcFWRiXseUVnOrMka
ynTiNvG/dsGRSpeTXiNizWWrTlsmPDU6ZxVyl+HkCy/yEBDiTcd0JPUUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKswiRxwGVHLDDMTsCW9JxhzXCKMB8GA1UdIwQY
MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt
ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm
LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqat/hvjb
l3Z6yEondf6wUt6iI/NrM+zV9uh/UIug+TMd3oRm/agx5JdpV5J2UVW1Nrth/rZF
VBp1atH8KsJRi4N13Dse3xxOvpan6FU/MUnAgKMasJCgfujQgdcJ2KS3e2Vuzja6
y03Ew1rV+W1XyleDw1p59zZs0tgBuhgW5eTUo1A4AQ68Y8mf8ExQ58FUROSlCRDQ
9w6HUIgQl4P0CInsWDlwknDC83OS5Wx1HxjtTSKVNMu6FHNoEsZLJIfbVH9rSXY0
THrfhbBHYi7cL9weZhWOTFRtqnr/fHFIZ6HhE/9dkhl1CMYYMoCeiRDBJkUpSiIl
2c1t71JxOZuXTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:16 2025 by rpki-client