Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          A8PeD60hUSefGQL9k+a6dAUTgIwszgR+n05jzMCaaGU=
Subject key identifier:   1D:DB:58:2D:80:73:E5:3F:33:C9:14:A2:BC:06:8C:E1:D7:CD:DA:D4
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       0199301175BC147114BE75A3EC48C4872EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          0F9B
Signing time:             Tue 09 Sep 2025 20:01:14 +0000
Manifest this update:     Tue 09 Sep 2025 20:01:14 +0000
Manifest next update:     Wed 10 Sep 2025 20:01:14 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
                          3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
                          4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: KhU+CZ0/i5Mv4kouTpKlfKxbHR1NbX/nZp4HT9ZABEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:11:75:bc:14:71:14:be:75:a3:ec:48:c4:87:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Sep  9 20:01:14 2025 GMT
            Not After : Sep 10 20:01:14 2025 GMT
        Subject: CN=1ddb582d8073e53f33c914a2bc068ce1d7cddad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:73:59:07:76:ca:a0:6b:b3:79:1e:06:4b:12:
                    f4:e3:fd:27:e5:85:d3:5d:30:bc:35:0e:76:8d:de:
                    40:c0:e5:51:9c:08:58:72:44:27:af:6f:be:5d:fa:
                    0c:e3:c8:ee:64:a3:63:98:60:bd:35:6d:b2:3e:68:
                    de:73:cd:f4:e8:86:29:0e:34:28:42:dc:4b:9d:0c:
                    6b:dd:8c:88:5a:a1:5a:02:c9:57:33:19:f1:5c:3e:
                    f1:8f:64:be:81:5c:69:ac:a6:f2:4f:6f:30:d0:69:
                    6e:15:20:1b:e0:0a:48:81:49:72:65:e1:66:a5:70:
                    0d:9b:98:4f:9c:27:12:b8:8c:05:ea:af:a1:4b:54:
                    c0:d5:5c:2f:c5:9b:26:66:cc:26:95:1b:76:d2:a0:
                    84:f7:6c:81:0e:58:cf:72:45:51:4f:b1:91:d6:a7:
                    1f:f2:97:d7:ae:35:b1:39:32:e7:b2:77:31:5d:8b:
                    a9:08:8c:e9:99:96:09:16:29:a7:d3:cf:04:e3:78:
                    3e:83:71:5b:58:f6:48:26:da:f5:92:14:9a:99:34:
                    80:62:c8:3b:86:f9:b2:30:80:10:86:92:00:9d:e2:
                    43:f6:0b:17:64:be:c0:3e:f8:18:8d:c1:4d:71:d0:
                    91:01:21:ee:86:c9:99:f4:ef:4c:d4:a7:35:b1:68:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DB:58:2D:80:73:E5:3F:33:C9:14:A2:BC:06:8C:E1:D7:CD:DA:D4
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:67:35:fb:19:d0:b6:d6:be:50:d9:06:72:51:bf:a5:4c:5e:
         60:b9:30:be:11:d0:70:8e:8f:98:33:df:93:de:d5:3b:bc:3a:
         1d:22:90:35:36:de:fd:09:3c:0e:c8:d0:b9:c7:7e:38:01:9f:
         5a:8e:c4:2e:56:d4:7e:df:46:55:15:30:21:66:a8:ee:fc:d7:
         f5:c8:ca:4f:56:39:d9:e5:56:46:03:4d:0b:12:e7:f6:74:67:
         2a:6f:5b:10:6b:57:16:40:1a:34:b1:f1:c3:83:a5:08:cb:83:
         d2:14:81:4e:96:78:90:a6:a7:4c:7e:5f:3f:cc:43:41:d5:1d:
         89:5b:8f:e8:a2:cd:6c:9a:2f:14:8f:4c:7f:01:76:e1:5f:c7:
         a0:dd:bf:27:d9:d4:84:d3:a4:f3:2c:51:83:92:c2:76:e7:12:
         48:74:77:72:9d:fa:07:4a:25:23:59:23:70:35:af:5e:f9:70:
         44:e3:60:4a:ab:fa:2d:b5:00:81:1f:c2:e5:82:b1:e3:3f:f0:
         fe:8e:ba:37:b6:8b:db:da:a2:22:a5:dc:aa:50:f5:f4:62:5c:
         68:53:1f:37:81:0d:b5:15:52:94:b7:4d:b4:c1:70:b4:2a:b7:
         9f:33:03:94:fc:aa:d0:5a:ea:98:73:f2:ae:a6:3d:07:d2:37:
         f6:51:55:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwEXW8FHEUvnWj7EjEhy6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm
MDI0NGYwHhcNMjUwOTA5MjAwMTE0WhcNMjUwOTEwMjAwMTE0WjAzMTEwLwYDVQQD
EygxZGRiNTgyZDgwNzNlNTNmMzNjOTE0YTJiYzA2OGNlMWQ3Y2RkYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43NZB3bKoGuzeR4GSxL04/0n5YXT
XTC8NQ52jd5AwOVRnAhYckQnr2++XfoM48juZKNjmGC9NW2yPmjec8306IYpDjQo
QtxLnQxr3YyIWqFaAslXMxnxXD7xj2S+gVxprKbyT28w0GluFSAb4ApIgUlyZeFm
pXANm5hPnCcSuIwF6q+hS1TA1VwvxZsmZswmlRt20qCE92yBDljPckVRT7GR1qcf
8pfXrjWxOTLnsncxXYupCIzpmZYJFimn088E43g+g3FbWPZIJtr1khSamTSAYsg7
hvmyMIAQhpIAneJD9gsXZL7APvgYjcFNcdCRASHuhsmZ9O9M1Kc1sWjbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3bWC2Ac+U/M8kUorwGjOHXzdrUMB8GA1UdIwQY
MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct
OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy
LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Gc1+xnQ
tta+UNkGclG/pUxeYLkwvhHQcI6PmDPfk97VO7w6HSKQNTbe/Qk8DsjQucd+OAGf
Wo7ELlbUft9GVRUwIWao7vzX9cjKT1Y52eVWRgNNCxLn9nRnKm9bEGtXFkAaNLHx
w4OlCMuD0hSBTpZ4kKanTH5fP8xDQdUdiVuP6KLNbJovFI9MfwF24V/HoN2/J9nU
hNOk8yxRg5LCducSSHR3cp36B0olI1kjcDWvXvlwRONgSqv6LbUAgR/C5YKx4z/w
/o66N7aL29qiIqXcqlD19GJcaFMfN4ENtRVSlLdNtMFwtCq3nzMDlPyq0FrqmHPy
rqY9B9I39lFVew==
-----END CERTIFICATE-----
Generated at Wed Sep 10 06:24:40 2025 by rpki-client