Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
File:                     uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json)
Hash identifier:          DLW2LC3W5WAWNuZv9EyxlWURv/KhX7T7fIAR+5rg5j8=
Subject key identifier:   3F:77:F2:43:D3:0A:55:2D:E8:73:E7:43:EF:10:07:60:25:4F:77:08
Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
Certificate issuer:       /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Certificate serial:       0199239F247F95A5656D9B7612BED7077AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
Manifest number:          1442
Signing time:             Sun 07 Sep 2025 10:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:56 +0000
Files and hashes:         1: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: DupV2H/s59+E/LVzkM1nHv5JGxjsHWuhrwC5UvkaGYM=)
                          2: um_x7j6zVmhOP4mF-URUgPyGQ3E.roa (hash: wUkyiUgLCwXSzxn/Wm+Q/r/1YAgpYiWS11qqDTfEJoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:24:7f:95:a5:65:6d:9b:76:12:be:d7:07:7a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
        Validity
            Not Before: Sep  7 10:00:56 2025 GMT
            Not After : Sep  8 10:00:56 2025 GMT
        Subject: CN=3f77f243d30a552de873e743ef100760254f7708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:72:e5:3c:47:7d:23:14:e9:11:0a:91:ad:
                    e3:64:34:d1:7b:70:5d:21:4b:be:51:f6:4a:83:d1:
                    58:0f:f2:ba:e2:21:eb:1f:68:3c:3d:64:a3:7c:0e:
                    58:54:04:be:e1:ea:f4:f8:d1:11:70:bc:55:69:f5:
                    c5:4f:15:89:62:24:28:fb:8a:04:8c:96:c8:5c:37:
                    f1:e0:b0:81:e4:29:e7:16:8b:4d:90:52:a7:c1:eb:
                    f7:05:dc:a4:1d:e0:c0:7f:d2:fe:e2:16:8a:6c:a8:
                    f4:69:b2:07:df:e8:f4:11:94:f4:34:58:f8:3e:48:
                    59:46:6c:a5:94:de:ef:85:84:1d:c0:3d:57:38:6d:
                    74:c3:52:22:1e:6e:c8:9b:d6:37:8e:34:74:dd:31:
                    f0:df:04:25:d5:25:30:26:b5:4d:21:42:3e:5f:af:
                    ac:12:bf:37:fa:f5:ee:14:9a:58:4f:c3:7b:9b:a0:
                    ec:3b:0a:23:73:07:e1:21:12:cf:49:6c:a1:4c:f0:
                    39:d1:85:a5:3f:7e:87:09:a3:98:de:b7:4d:58:e4:
                    2d:6c:15:0a:ae:c4:8c:e8:ad:35:1f:08:3a:75:cf:
                    9a:e6:9d:32:0f:b3:38:ae:30:64:37:79:ec:bb:de:
                    7e:07:b6:95:d0:06:d5:e2:33:c9:62:19:09:de:e5:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:F2:43:D3:0A:55:2D:E8:73:E7:43:EF:10:07:60:25:4F:77:08
            X509v3 Authority Key Identifier:
                keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3c:df:38:56:91:87:f3:24:2e:8d:eb:a3:04:3f:0d:c4:ac:
         40:23:94:98:8c:ff:7a:89:25:9d:9d:6c:02:28:4a:50:c2:16:
         fa:6b:75:13:0d:ca:ba:1d:2d:5b:5a:24:9d:6b:26:50:5e:b8:
         03:b2:41:a0:5e:84:26:a8:49:5c:62:da:12:b1:4b:25:98:f3:
         bf:53:55:ab:99:87:63:97:11:0d:e6:5e:68:a7:b6:1b:d2:25:
         6e:4e:80:58:f1:11:22:32:26:7b:83:7e:dc:7e:4a:8a:fc:32:
         94:21:61:e6:2c:d3:6d:ee:6e:41:35:1d:a3:da:d0:d4:b5:c3:
         ab:bd:1a:ea:9b:6c:c3:cb:98:62:b6:27:28:c7:63:89:50:c2:
         ed:8b:c9:ae:fa:4e:a5:57:de:2a:0c:e9:7f:38:3b:9d:89:29:
         e6:81:36:e8:b2:bb:d9:04:d5:72:a0:f8:17:40:6a:57:e5:09:
         7a:29:29:bf:fc:db:9a:c1:83:37:de:0e:eb:ca:93:f6:dc:9d:
         c7:09:e4:80:3a:5e:23:e6:69:fa:72:be:91:63:8e:6e:aa:1f:
         b6:ba:4f:59:3e:2c:74:47:70:18:60:35:74:78:a7:17:5e:b0:
         3a:a5:23:d8:6b:a9:8b:05:8e:c6:75:57:b2:61:3c:ed:90:94:
         5c:eb:55:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnyR/laVlbZt2Er7XB3rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWIwM2UyMjg3NWJiMDcwYjFiN2M1OGVhZGEyZTRiYjFh
YWJlN2YwHhcNMjUwOTA3MTAwMDU2WhcNMjUwOTA4MTAwMDU2WjAzMTEwLwYDVQQD
EygzZjc3ZjI0M2QzMGE1NTJkZTg3M2U3NDNlZjEwMDc2MDI1NGY3NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Jy5TxHfSMU6REKka3jZDTRe3Bd
IUu+UfZKg9FYD/K64iHrH2g8PWSjfA5YVAS+4er0+NERcLxVafXFTxWJYiQo+4oE
jJbIXDfx4LCB5CnnFotNkFKnwev3BdykHeDAf9L+4haKbKj0abIH3+j0EZT0NFj4
PkhZRmyllN7vhYQdwD1XOG10w1IiHm7Im9Y3jjR03THw3wQl1SUwJrVNIUI+X6+s
Er83+vXuFJpYT8N7m6DsOwojcwfhIRLPSWyhTPA50YWlP36HCaOY3rdNWOQtbBUK
rsSM6K01Hwg6dc+a5p0yD7M4rjBkN3nsu95+B7aV0AbV4jPJYhkJ3uUaZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD938kPTClUt6HPnQ+8QB2AlT3cIMB8GA1UdIwQY
MBaAFLgbA+IodbsHCxt8WOraLkuxqr5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUt
YWQyNTY2NDMwNTJiLzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUtYWQyNTY2NDMwNTJi
LzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTzfOFaR
h/MkLo3rowQ/DcSsQCOUmIz/eoklnZ1sAihKUMIW+mt1Ew3Kuh0tW1oknWsmUF64
A7JBoF6EJqhJXGLaErFLJZjzv1NVq5mHY5cRDeZeaKe2G9Ilbk6AWPERIjIme4N+
3H5KivwylCFh5izTbe5uQTUdo9rQ1LXDq70a6ptsw8uYYrYnKMdjiVDC7YvJrvpO
pVfeKgzpfzg7nYkp5oE26LK72QTVcqD4F0BqV+UJeikpv/zbmsGDN94O68qT9tyd
xwnkgDpeI+Zp+nK+kWOObqoftrpPWT4sdEdwGGA1dHinF16wOqUj2GupiwWOxnVX
smE87ZCUXOtVRg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:07 2025 by rpki-client