Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          RU7ARdQGZee9zamPbJ1zc+JERVAsLW+4GkdxMuzq7xQ=
Subject key identifier:   1A:6F:2D:D7:46:DA:4E:F7:C5:63:96:0A:9B:EB:2B:5B:2B:4C:6D:E3
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       01988DA1B0C092C27D906F2AC773E3F17944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          162A
Signing time:             Sat 09 Aug 2025 07:00:40 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:40 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:40 +0000
Files and hashes:         1: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=)
                          2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: EjH0ecTh/omf/8N6XCbVbTyR25ovnEOVbxlRG4b/pZY=)
                          4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:b0:c0:92:c2:7d:90:6f:2a:c7:73:e3:f1:79:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Aug  9 07:00:40 2025 GMT
            Not After : Aug 10 07:00:40 2025 GMT
        Subject: CN=1a6f2dd746da4ef7c563960a9beb2b5b2b4c6de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:00:c4:33:b0:41:3d:4b:66:5b:c3:8a:41:
                    f8:40:8c:98:89:d6:d9:6e:79:b3:10:5d:12:01:54:
                    3a:df:c2:2d:4b:5b:64:3f:fc:e6:cd:c5:38:b6:64:
                    b8:96:a0:77:44:83:1f:95:d9:10:be:27:1b:c2:ff:
                    f8:1b:03:b3:1a:a3:52:f9:94:e9:f3:01:d9:9f:20:
                    84:0e:6c:b2:5c:53:b5:d8:94:08:0e:64:42:b8:bf:
                    1c:7e:b8:27:e0:45:85:a1:e8:14:bb:e9:e1:fa:d7:
                    40:86:64:c0:26:18:de:53:6e:be:a7:47:d9:7f:8e:
                    c2:19:f0:38:8f:c5:fd:4f:c7:ae:2a:b4:c6:3b:8a:
                    6b:d1:d6:2c:b4:e1:fc:19:3a:ea:03:c7:ea:dd:0f:
                    97:a3:04:34:8f:c3:95:49:b1:4f:36:af:7a:ab:b2:
                    f9:3a:56:fd:5c:f7:c1:c8:5b:f1:5a:77:a7:0b:a6:
                    09:9f:b0:a6:16:db:5e:0c:13:b9:00:52:10:38:1c:
                    bc:24:bc:9e:4b:60:89:a5:c8:fd:d2:06:c2:dd:aa:
                    46:98:0a:9e:05:1c:de:c0:01:56:22:7d:9f:e5:38:
                    34:85:e0:da:f4:b4:d9:96:c2:62:69:cf:52:e3:63:
                    6b:e2:56:91:6e:0f:59:de:33:ce:05:2c:0d:cd:9b:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6F:2D:D7:46:DA:4E:F7:C5:63:96:0A:9B:EB:2B:5B:2B:4C:6D:E3
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:5e:6b:73:f0:75:7d:f0:0a:30:01:c7:4e:e0:4e:86:0f:
         fe:4a:bf:3c:69:b5:f0:73:5c:2b:7e:70:30:e3:94:63:59:1e:
         42:b4:80:c7:51:a8:d3:bf:b5:d7:86:fe:80:23:7a:f6:18:a8:
         d8:26:be:c4:ed:99:ef:ef:e0:34:02:3f:bb:bc:9e:58:42:56:
         f2:82:0c:5a:7e:73:44:e8:da:86:58:35:e3:77:cb:e3:a2:d3:
         d2:98:ae:e4:fc:81:77:41:f4:ee:74:d4:f5:8e:87:40:dc:48:
         dc:6a:6d:91:35:63:e0:7a:95:56:79:8d:07:70:bc:31:5a:2b:
         2b:f6:50:9a:11:58:82:e3:bb:bd:b2:99:f2:94:6b:fb:3d:12:
         5c:a9:a3:cd:08:d4:21:37:ad:90:62:13:56:d1:95:28:4a:a8:
         02:d9:5e:97:ba:71:55:ba:50:fa:3b:9b:dc:e2:90:e8:15:4a:
         de:a6:4b:c4:cf:f0:c3:e0:62:63:a0:94:23:3b:19:71:af:0d:
         12:95:60:23:cb:1f:67:79:fd:ec:aa:08:61:1f:b0:3b:95:bc:
         75:cd:65:0b:d3:3b:5a:bd:56:44:44:e6:68:a6:40:ab:a6:5e:
         9e:3b:75:52:03:0f:aa:d9:38:dd:c0:07:d7:fd:91:96:7c:f6:
         2a:23:8b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNobDAksJ9kG8qx3Pj8XlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUwODA5MDcwMDQwWhcNMjUwODEwMDcwMDQwWjAzMTEwLwYDVQQD
EygxYTZmMmRkNzQ2ZGE0ZWY3YzU2Mzk2MGE5YmViMmI1YjJiNGM2ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvScAxDOwQT1LZlvDikH4QIyYidbZ
bnmzEF0SAVQ638ItS1tkP/zmzcU4tmS4lqB3RIMfldkQvicbwv/4GwOzGqNS+ZTp
8wHZnyCEDmyyXFO12JQIDmRCuL8cfrgn4EWFoegUu+nh+tdAhmTAJhjeU26+p0fZ
f47CGfA4j8X9T8euKrTGO4pr0dYstOH8GTrqA8fq3Q+XowQ0j8OVSbFPNq96q7L5
Olb9XPfByFvxWnenC6YJn7CmFtteDBO5AFIQOBy8JLyeS2CJpcj90gbC3apGmAqe
BRzewAFWIn2f5Tg0heDa9LTZlsJiac9S42Nr4laRbg9Z3jPOBSwNzZuUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpvLddG2k73xWOWCpvrK1srTG3jMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPpea3Pw
dX3wCjABx07gToYP/kq/PGm18HNcK35wMOOUY1keQrSAx1Go07+114b+gCN69hio
2Ca+xO2Z7+/gNAI/u7yeWEJW8oIMWn5zROjahlg143fL46LT0piu5PyBd0H07nTU
9Y6HQNxI3GptkTVj4HqVVnmNB3C8MVorK/ZQmhFYguO7vbKZ8pRr+z0SXKmjzQjU
ITetkGITVtGVKEqoAtlel7pxVbpQ+jub3OKQ6BVK3qZLxM/ww+BiY6CUIzsZca8N
EpVgI8sfZ3n97KoIYR+wO5W8dc1lC9M7Wr1WRETmaKZAq6Zenjt1UgMPqtk43cAH
1/2Rlnz2KiOLVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:45 2025 by rpki-client