Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          KF1HZes7q2oLJVs8NujAix34hK7p0Aa85tIBuWbkZ4Y=
Subject key identifier:   F3:FC:B8:D6:92:B2:72:55:AC:CA:51:BA:04:F0:CD:8D:48:43:92:40
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       01989034DD6F636BD8BDC49BDC4E046C4369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          0F3A
Signing time:             Sat 09 Aug 2025 19:00:40 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:40 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:40 +0000
Files and hashes:         1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: ngDKHjo5YInvpLxD3ekfBOYs7FG7tiFa32Qo6K+srKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:dd:6f:63:6b:d8:bd:c4:9b:dc:4e:04:6c:43:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Aug  9 19:00:40 2025 GMT
            Not After : Aug 10 19:00:40 2025 GMT
        Subject: CN=f3fcb8d692b27255acca51ba04f0cd8d48439240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:f0:a0:c5:78:79:e1:2a:22:47:38:e9:0c:
                    0c:e8:1f:a7:b0:92:67:89:4d:23:0e:bd:fd:7c:43:
                    7f:24:2b:a6:22:a8:64:17:a9:97:59:a5:9c:55:ba:
                    a0:9a:14:d1:83:7b:7f:83:3a:30:e2:ac:12:46:dd:
                    a7:93:c7:1d:1d:75:89:99:37:c1:03:38:e3:41:79:
                    e4:0a:28:1b:00:22:ab:fa:d0:87:e3:55:28:75:71:
                    be:6a:be:64:33:d0:88:8e:5f:4e:77:98:bb:77:7a:
                    f3:ab:29:4a:bb:0f:78:86:8e:b4:ab:54:51:1f:91:
                    e9:3b:ef:50:39:9c:48:b8:05:a1:fb:62:14:2c:7f:
                    55:51:2a:a6:73:54:4b:11:2f:fd:32:4b:aa:58:fc:
                    eb:44:be:89:a4:89:5b:7e:54:fb:82:47:05:3b:fe:
                    8d:81:aa:fd:e4:ba:29:d7:22:ea:97:e1:41:e7:5f:
                    e2:82:93:61:02:0b:d5:6b:7a:39:c8:42:fe:e3:4e:
                    e0:c0:ec:00:f5:41:ab:e6:32:b2:59:1d:08:f1:ef:
                    50:88:e3:00:11:dc:9a:a4:e1:23:15:e5:4e:72:8f:
                    f4:b9:4c:67:07:15:dc:1e:3d:3f:a0:57:c2:df:75:
                    8b:6e:5e:88:d2:5a:cd:a8:3a:df:b9:16:e1:bb:5a:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:B8:D6:92:B2:72:55:AC:CA:51:BA:04:F0:CD:8D:48:43:92:40
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:22:3e:9a:dd:41:d5:ff:e6:77:9a:e4:62:1e:a3:5b:70:f7:
         6b:1e:f6:a9:70:e3:16:b9:05:06:31:63:80:97:85:74:9e:09:
         7b:b0:74:d5:45:6f:f5:ff:ab:ac:83:3a:29:ee:5c:a5:db:50:
         b4:37:9e:31:34:5a:23:8f:fd:b2:a1:86:ed:48:8f:fe:a7:61:
         52:b2:ad:b1:56:10:72:0b:e4:a7:87:39:87:36:01:76:ec:f7:
         28:f5:c9:d7:2e:4c:0a:ff:52:f8:d1:0d:56:f9:10:05:37:60:
         fe:c7:39:64:68:76:ec:5f:45:03:fb:bd:70:60:03:fa:ef:89:
         a9:44:17:83:35:fc:78:eb:cf:4a:a2:49:e6:f9:84:63:77:bc:
         b0:c9:58:7d:d6:f4:d9:ca:5a:5b:ea:b8:d3:73:75:61:3d:ae:
         8c:89:a1:8a:ce:fb:c7:b7:f6:a1:ea:a1:07:3c:d4:62:10:b2:
         5d:07:dc:62:de:3f:35:8b:8e:9d:36:14:a4:0e:88:f3:8e:21:
         8c:6a:66:91:7b:80:46:59:0a:95:9e:6d:80:13:39:69:6a:46:
         c0:a3:43:69:f0:7e:04:a9:23:e1:72:7d:44:e4:50:ac:2d:78:
         e6:39:88:ec:ec:c9:e5:44:bc:8f:da:93:b2:63:e4:03:07:3f:
         16:ed:e9:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNN1vY2vYvcSb3E4EbENpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk
MDY4MmMwHhcNMjUwODA5MTkwMDQwWhcNMjUwODEwMTkwMDQwWjAzMTEwLwYDVQQD
EyhmM2ZjYjhkNjkyYjI3MjU1YWNjYTUxYmEwNGYwY2Q4ZDQ4NDM5MjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoojwoMV4eeEqIkc46QwM6B+nsJJn
iU0jDr39fEN/JCumIqhkF6mXWaWcVbqgmhTRg3t/gzow4qwSRt2nk8cdHXWJmTfB
AzjjQXnkCigbACKr+tCH41UodXG+ar5kM9CIjl9Od5i7d3rzqylKuw94ho60q1RR
H5HpO+9QOZxIuAWh+2IULH9VUSqmc1RLES/9MkuqWPzrRL6JpIlbflT7gkcFO/6N
gar95Lop1yLql+FB51/igpNhAgvVa3o5yEL+407gwOwA9UGr5jKyWR0I8e9QiOMA
EdyapOEjFeVOco/0uUxnBxXcHj0/oFfC33WLbl6I0lrNqDrfuRbhu1pz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP8uNaSsnJVrMpRugTwzY1IQ5JAMB8GA1UdIwQY
MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt
Y2U4ZDJkZDQzMDY2LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2
LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCI+mt1B
1f/md5rkYh6jW3D3ax72qXDjFrkFBjFjgJeFdJ4Je7B01UVv9f+rrIM6Ke5cpdtQ
tDeeMTRaI4/9sqGG7UiP/qdhUrKtsVYQcgvkp4c5hzYBduz3KPXJ1y5MCv9S+NEN
VvkQBTdg/sc5ZGh27F9FA/u9cGAD+u+JqUQXgzX8eOvPSqJJ5vmEY3e8sMlYfdb0
2cpaW+q403N1YT2ujImhis77x7f2oeqhBzzUYhCyXQfcYt4/NYuOnTYUpA6I844h
jGpmkXuARlkKlZ5tgBM5aWpGwKNDafB+BKkj4XJ9RORQrC145jmI7OzJ5US8j9qT
smPkAwc/Fu3pbQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:00 2025 by rpki-client