Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File:                     UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier:          /0QMD+fSLP1fI3UH1R8sNJdqvwk7xfsQ5V14KuakktE=
Subject key identifier:   22:AF:FA:7F:98:1E:23:1B:9E:9B:F5:0A:03:CC:7E:F6:BC:98:BF:8F
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer:       /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial:       019879AD5A87F61D00CFF313194DAB997BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number:          1105
Signing time:             Tue 05 Aug 2025 10:01:00 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:00 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:00 +0000
Files and hashes:         1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: LyzVo1pVdwAnCUgij5xPUBBtFwc6KcDwqLF/bfvFsnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:5a:87:f6:1d:00:cf:f3:13:19:4d:ab:99:7b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
        Validity
            Not Before: Aug  5 10:01:00 2025 GMT
            Not After : Aug  6 10:01:00 2025 GMT
        Subject: CN=22affa7f981e231b9e9bf50a03cc7ef6bc98bf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:8e:f7:1c:51:64:32:25:f3:a9:a5:6c:92:
                    68:10:6e:28:6f:71:42:d9:47:f8:19:4d:dd:82:ac:
                    62:15:29:ad:1c:20:cc:1a:cb:fb:da:b8:71:85:31:
                    9c:ca:f5:65:2b:01:c6:6e:d5:0c:fc:28:d3:d3:3b:
                    f7:25:09:55:8c:db:7a:27:a5:eb:3f:4c:f6:a7:eb:
                    46:85:57:07:4d:d5:7f:91:c0:f8:67:f5:2e:ce:73:
                    49:d2:50:9d:35:c9:a2:f5:b7:a7:69:eb:16:49:59:
                    9b:23:f8:b2:23:d5:3a:78:20:3f:62:4c:08:61:38:
                    c7:11:9f:ee:78:fb:71:4d:a5:ca:c0:53:12:ac:44:
                    15:fa:7b:07:6a:c0:60:ce:a6:43:9b:9b:f4:2b:f8:
                    2d:09:9e:69:6b:b0:03:9f:58:b3:13:3e:b3:ab:11:
                    98:94:9e:ff:51:64:4c:f7:85:ac:2b:44:06:1d:40:
                    b7:d6:68:01:ab:30:c7:16:67:ba:f2:40:8c:90:67:
                    8c:00:e8:0c:2b:e8:f6:b9:b2:2f:a9:98:2a:af:d5:
                    f5:20:8c:91:cb:5e:ad:46:27:e3:1b:60:36:bb:4c:
                    52:01:3c:43:82:66:ba:fb:36:94:d1:7a:d7:fb:91:
                    85:dc:96:5a:e0:f6:a8:69:c2:c5:30:80:d5:92:2f:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AF:FA:7F:98:1E:23:1B:9E:9B:F5:0A:03:CC:7E:F6:BC:98:BF:8F
            X509v3 Authority Key Identifier:
                keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a6:7d:65:31:bc:d8:40:c5:6b:83:04:8b:5f:f9:e8:66:54:
         0b:ca:53:b8:da:b1:ce:b1:e9:fb:00:29:05:6c:dc:70:d4:93:
         0b:5d:f3:4e:65:d4:f8:36:a4:77:37:d5:b6:a9:4f:c5:b9:73:
         28:fc:66:c8:05:43:af:1d:99:c0:5e:38:b2:7b:28:f1:ef:cd:
         77:fb:13:69:cc:1b:f7:93:41:54:3c:8e:35:33:b5:74:c7:9e:
         e4:13:19:da:6a:46:15:0c:21:74:dc:9e:17:a0:fc:40:29:d4:
         03:b0:a0:97:0d:c5:38:4b:f4:2f:0f:48:af:61:2c:ea:7f:78:
         cd:9c:67:81:72:b6:13:5d:f2:59:b8:69:56:75:7b:f5:c1:42:
         47:37:6d:59:74:4b:bb:35:57:66:73:22:70:3b:78:2d:82:4d:
         e8:6d:76:62:cb:b0:98:2a:1e:e4:c2:e3:09:90:9a:a5:b8:6b:
         74:9c:15:37:14:ae:c4:e3:d6:da:ce:16:01:2f:ab:ec:f3:f7:
         4f:f0:9a:d6:99:d7:02:83:61:1c:9a:c7:9d:ac:aa:5e:54:bc:
         1d:33:dd:01:31:10:ad:7b:79:5c:85:18:fc:1d:dd:f3:07:39:
         01:a3:48:b3:75:33:84:4b:9d:1f:6c:cc:69:69:5e:15:f8:e7:
         3d:ce:24:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rVqH9h0Az/MTGU2rmXvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNWNiZGJkMTZhNmU4NjhlOTk2NzViYzI5MTgwMjY4YzI1
OGYwZmIwHhcNMjUwODA1MTAwMTAwWhcNMjUwODA2MTAwMTAwWjAzMTEwLwYDVQQD
EygyMmFmZmE3Zjk4MWUyMzFiOWU5YmY1MGEwM2NjN2VmNmJjOThiZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5qO9xxRZDIl86mlbJJoEG4ob3FC
2Uf4GU3dgqxiFSmtHCDMGsv72rhxhTGcyvVlKwHGbtUM/CjT0zv3JQlVjNt6J6Xr
P0z2p+tGhVcHTdV/kcD4Z/UuznNJ0lCdNcmi9benaesWSVmbI/iyI9U6eCA/YkwI
YTjHEZ/uePtxTaXKwFMSrEQV+nsHasBgzqZDm5v0K/gtCZ5pa7ADn1izEz6zqxGY
lJ7/UWRM94WsK0QGHUC31mgBqzDHFme68kCMkGeMAOgMK+j2ubIvqZgqr9X1IIyR
y16tRifjG2A2u0xSATxDgma6+zaU0XrX+5GF3JZa4PaoacLFMIDVki8IOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKv+n+YHiMbnpv1CgPMfva8mL+PMB8GA1UdIwQY
MBaAFFFcvb0Wpuho6ZZ1vCkYAmjCWPD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZ5OXZSYW02R2pwbG5XOEtSZ0NhTUpZOFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMTA0YWItZTE0Ni00NThiLWI0NWYt
ZDNlOThlNjM5YWNhLzEvVVZ5OXZSYW02R2pwbG5XOEtSZ0NhTUpZOFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMTA0YWItZTE0Ni00NThiLWI0NWYtZDNlOThlNjM5YWNh
LzEvVVZ5OXZSYW02R2pwbG5XOEtSZ0NhTUpZOFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqZ9ZTG8
2EDFa4MEi1/56GZUC8pTuNqxzrHp+wApBWzccNSTC13zTmXU+DakdzfVtqlPxblz
KPxmyAVDrx2ZwF44snso8e/Nd/sTacwb95NBVDyONTO1dMee5BMZ2mpGFQwhdNye
F6D8QCnUA7Cglw3FOEv0Lw9Ir2Es6n94zZxngXK2E13yWbhpVnV79cFCRzdtWXRL
uzVXZnMicDt4LYJN6G12YsuwmCoe5MLjCZCapbhrdJwVNxSuxOPW2s4WAS+r7PP3
T/Ca1pnXAoNhHJrHnayqXlS8HTPdATEQrXt5XIUY/B3d8wc5AaNIs3UzhEudH2zM
aWleFfjnPc4kOg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:16 2025 by rpki-client