Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File:                     UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier:          y5tUB40CdZuYmPlrCJP202+2tOr5nV5EJ+qHO7S+gM8=
Subject key identifier:   73:C6:C4:FD:B8:C0:A0:CC:B9:52:81:B7:E5:32:89:33:6D:4E:6D:F0
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer:       /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial:       019873E243A89BACA3A5D0129B6A8B507751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number:          0DE3
Signing time:             Mon 04 Aug 2025 07:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:04 +0000
Files and hashes:         1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: bePsWTl3+tjzluj0IhiyuIBkvIxzD4SklSQ+/R/8vLk=)
                          2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:43:a8:9b:ac:a3:a5:d0:12:9b:6a:8b:50:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
        Validity
            Not Before: Aug  4 07:01:04 2025 GMT
            Not After : Aug  5 07:01:04 2025 GMT
        Subject: CN=73c6c4fdb8c0a0ccb95281b7e53289336d4e6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:d0:21:d6:3c:82:0d:4c:b0:f7:7e:4e:5c:
                    aa:89:93:6b:8c:0d:bb:ed:38:29:b0:bd:ad:28:f5:
                    84:49:b3:95:0c:27:fb:3e:51:c9:2a:48:7e:99:e1:
                    a2:6d:8c:12:83:be:6e:ae:34:3e:17:23:3a:1f:2e:
                    f0:1b:57:66:3d:18:c4:43:78:34:4f:95:8e:ff:18:
                    3c:1d:d2:d8:ff:c3:e5:c5:f6:80:6e:eb:6f:27:56:
                    52:c0:b9:7f:54:54:58:32:ab:37:cc:f5:5a:ac:d5:
                    d9:0d:8f:9c:9c:19:8d:da:6c:85:92:25:3e:40:85:
                    07:63:ba:7f:c7:d3:e0:7c:70:40:f9:b9:2f:7a:ca:
                    0a:c8:96:0e:13:4c:6f:d8:f8:7e:0a:a9:35:84:06:
                    98:3e:0a:1f:74:68:1b:53:f4:07:22:bb:dd:2d:7e:
                    bd:d7:94:3f:3f:7f:5c:38:60:10:6f:36:66:19:ac:
                    18:24:d1:10:27:4b:e9:9f:ea:83:a6:7e:ed:20:5c:
                    ef:07:31:90:5c:2f:e5:e0:56:05:85:89:7e:e2:07:
                    17:80:1f:81:50:2b:3f:94:9b:da:4e:be:d6:f0:8c:
                    80:3c:05:d3:2b:a5:58:a5:0a:4d:2f:75:09:e5:91:
                    d8:ce:4b:0f:fe:25:aa:52:41:32:b1:33:68:62:77:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C6:C4:FD:B8:C0:A0:CC:B9:52:81:B7:E5:32:89:33:6D:4E:6D:F0
            X509v3 Authority Key Identifier:
                keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:1f:6e:7d:fc:a5:ba:d1:11:1b:82:c5:ae:5b:80:ff:eb:0c:
         1a:8c:9d:0b:36:29:e1:36:5d:ac:25:d3:2f:f6:a3:55:34:40:
         68:12:b4:bb:32:00:d0:4d:1e:42:56:f3:0f:6a:ed:6f:6c:2e:
         5b:f5:ba:e8:18:cd:eb:e2:0d:26:d7:33:8a:10:46:03:c4:79:
         3c:a7:2b:60:df:4f:52:e0:a5:b6:af:c8:02:20:ea:1f:7a:4f:
         79:4b:12:64:01:6f:21:c5:b5:ad:40:37:ac:06:dd:83:ff:fc:
         eb:e6:46:75:9a:70:5e:20:31:9d:4a:ce:65:f0:90:ca:f7:07:
         e6:e8:8c:d3:0a:54:b5:05:e6:9c:db:14:2c:b9:f5:5a:86:9b:
         15:ad:c4:bd:fa:77:b7:57:00:6c:4e:a1:69:f9:dc:f6:61:be:
         02:08:d8:3b:50:47:0c:b0:bc:25:2c:4c:68:8f:46:82:d1:6d:
         69:23:e9:42:8b:86:38:8e:94:89:5c:5c:be:2a:b0:83:f8:79:
         84:ca:32:05:4e:91:2b:f0:64:6d:f7:84:79:8a:7b:13:03:38:
         de:d0:31:07:74:ed:2c:e9:14:ec:ae:07:fd:06:9d:9a:e4:2b:
         5b:f2:44:98:fa:e7:22:5e:95:b4:f5:0b:fd:88:67:65:74:03:
         01:38:99:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4kOom6yjpdASm2qLUHdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTdjODdkMTExYzgwNTBmZDVjOWFjMmIwNmJlNjIzMjM2
NzUwMzMwHhcNMjUwODA0MDcwMTA0WhcNMjUwODA1MDcwMTA0WjAzMTEwLwYDVQQD
Eyg3M2M2YzRmZGI4YzBhMGNjYjk1MjgxYjdlNTMyODkzMzZkNGU2ZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPQIdY8gg1MsPd+TlyqiZNrjA27
7TgpsL2tKPWESbOVDCf7PlHJKkh+meGibYwSg75urjQ+FyM6Hy7wG1dmPRjEQ3g0
T5WO/xg8HdLY/8PlxfaAbutvJ1ZSwLl/VFRYMqs3zPVarNXZDY+cnBmN2myFkiU+
QIUHY7p/x9PgfHBA+bkvesoKyJYOE0xv2Ph+Cqk1hAaYPgofdGgbU/QHIrvdLX69
15Q/P39cOGAQbzZmGawYJNEQJ0vpn+qDpn7tIFzvBzGQXC/l4FYFhYl+4gcXgB+B
UCs/lJvaTr7W8IyAPAXTK6VYpQpNL3UJ5ZHYzksP/iWqUkEysTNoYnddTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPGxP24wKDMuVKBt+UyiTNtTm3wMB8GA1UdIwQY
MBaAFFFXyH0RHIBQ/VyawrBr5iMjZ1AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAt
ZDI5NzAxNDg3NTM2LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAtZDI5NzAxNDg3NTM2
LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4h9uffyl
utERG4LFrluA/+sMGoydCzYp4TZdrCXTL/ajVTRAaBK0uzIA0E0eQlbzD2rtb2wu
W/W66BjN6+INJtczihBGA8R5PKcrYN9PUuCltq/IAiDqH3pPeUsSZAFvIcW1rUA3
rAbdg//86+ZGdZpwXiAxnUrOZfCQyvcH5uiM0wpUtQXmnNsULLn1WoabFa3Evfp3
t1cAbE6hafnc9mG+AgjYO1BHDLC8JSxMaI9GgtFtaSPpQouGOI6UiVxcviqwg/h5
hMoyBU6RK/BkbfeEeYp7EwM43tAxB3TtLOkU7K4H/QadmuQrW/JEmPrnIl6VtPUL
/YhnZXQDATiZ4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:49 2025 by rpki-client