Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File:                     UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier:          T11IKa3Duht2NdFkWDVZc02WcmfjQruOdqjQ4RSuViE=
Subject key identifier:   B6:58:1B:29:AE:5D:D3:A9:35:9F:9C:60:A0:02:DA:4F:36:57:B8:98
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer:       /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial:       01988053FBF074CBED872223EE465CCD61A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number:          1301
Signing time:             Wed 06 Aug 2025 17:00:44 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:44 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:44 +0000
Files and hashes:         1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: pGFq5JvT+nmTyxsP0wTLr4eR5QgRzVfijtGOmqIIkwI=)
                          2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:53:fb:f0:74:cb:ed:87:22:23:ee:46:5c:cd:61:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
        Validity
            Not Before: Aug  6 17:00:44 2025 GMT
            Not After : Aug  7 17:00:44 2025 GMT
        Subject: CN=b6581b29ae5dd3a9359f9c60a002da4f3657b898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:08:79:5a:94:ee:ee:a4:f7:b2:71:57:98:
                    04:9b:ef:8a:0b:87:1e:e5:77:99:87:cc:eb:94:31:
                    5e:14:e3:f0:58:5b:f3:1b:50:32:1c:9b:dd:59:63:
                    ca:92:89:d5:a2:27:f3:38:96:79:1b:30:d8:c1:df:
                    63:b7:33:a7:7d:5b:a8:fe:af:c8:a2:14:19:64:dd:
                    f3:98:b4:97:da:c6:b3:7e:0b:65:69:20:42:9a:55:
                    bc:d3:af:9b:98:b1:87:fd:76:82:f1:f6:63:2a:9a:
                    83:2c:a9:f6:ce:90:72:5e:25:ff:37:dc:28:e2:ca:
                    bd:f8:ec:15:48:0b:cb:4e:ef:90:c5:d0:31:ea:cf:
                    e7:2f:0f:73:7e:c7:b5:9a:2f:53:47:ff:76:10:92:
                    3d:1b:a5:ab:98:ef:36:c0:18:a1:2f:87:a5:2f:66:
                    49:91:ed:80:55:2b:43:b0:f6:a3:9b:68:06:2a:19:
                    ce:c8:6f:20:a8:ca:30:54:a0:d0:13:25:fb:6d:20:
                    5f:4e:34:cc:32:03:5f:93:c7:e7:67:e2:05:bf:53:
                    0c:45:a1:cc:79:49:56:54:c4:ce:aa:b3:0a:f2:60:
                    6a:07:26:2d:de:ee:ab:64:d9:5f:db:ef:b5:a4:74:
                    98:60:4e:e3:0b:bd:8d:4d:03:05:bb:a4:04:a4:f6:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:1B:29:AE:5D:D3:A9:35:9F:9C:60:A0:02:DA:4F:36:57:B8:98
            X509v3 Authority Key Identifier:
                keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:a8:ab:08:ff:b4:a9:8f:02:4f:be:53:5e:22:0b:8c:6b:
         ec:58:34:a8:1e:0f:f8:12:9d:16:3a:d7:8b:5a:fd:e2:51:7b:
         af:25:e4:05:86:c9:39:48:3d:91:b5:0c:3b:fe:71:82:d8:9f:
         84:7d:76:99:da:a0:a0:41:95:74:11:e0:92:94:ef:76:e7:b8:
         8b:9d:7c:14:8a:5c:e8:f0:39:e7:51:83:ee:15:bc:b7:ca:dd:
         a1:cd:30:11:18:da:b6:a3:c6:c0:e1:68:93:6c:e8:2b:1c:db:
         84:d5:42:fc:7b:ff:7e:ff:1e:0b:22:07:bf:c5:f4:89:15:b9:
         e0:5b:26:31:10:1e:a2:49:82:a2:b8:bc:54:d1:af:b6:40:e6:
         b5:4d:74:fa:f1:e5:59:66:ed:fd:fe:b0:4b:bf:a6:21:8c:6c:
         79:47:d7:8f:c4:7e:11:f0:ec:99:9e:c1:c9:a7:2b:da:c6:16:
         0d:83:db:0c:1e:dc:11:8a:e0:1e:e5:43:1d:66:81:84:cf:b9:
         df:ac:ff:da:95:b6:3f:73:46:b7:ec:df:09:80:f1:33:82:ce:
         1e:35:f2:3d:4c:7d:55:1f:e9:17:a1:3f:59:4e:8f:0a:1a:aa:
         83:e0:b9:db:b4:40:2b:60:1f:f0:dc:fb:70:8b:c7:59:8f:f5:
         46:95:f4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAU/vwdMvthyIj7kZczWGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTcxYjM5ZDdjNDk0MzBiYmM3N2JiNjU5NTJlNDAyMWEw
MjUzMTYwHhcNMjUwODA2MTcwMDQ0WhcNMjUwODA3MTcwMDQ0WjAzMTEwLwYDVQQD
EyhiNjU4MWIyOWFlNWRkM2E5MzU5ZjljNjBhMDAyZGE0ZjM2NTdiODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwscIeVqU7u6k97JxV5gEm++KC4ce
5XeZh8zrlDFeFOPwWFvzG1AyHJvdWWPKkonVoifzOJZ5GzDYwd9jtzOnfVuo/q/I
ohQZZN3zmLSX2sazfgtlaSBCmlW806+bmLGH/XaC8fZjKpqDLKn2zpByXiX/N9wo
4sq9+OwVSAvLTu+QxdAx6s/nLw9zfse1mi9TR/92EJI9G6WrmO82wBihL4elL2ZJ
ke2AVStDsPajm2gGKhnOyG8gqMowVKDQEyX7bSBfTjTMMgNfk8fnZ+IFv1MMRaHM
eUlWVMTOqrMK8mBqByYt3u6rZNlf2++1pHSYYE7jC72NTQMFu6QEpPbyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZYGymuXdOpNZ+cYKAC2k82V7iYMB8GA1UdIwQY
MBaAFFLnGznXxJQwu8d7tllS5AIaAlMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMt
NmZiYTZhMWUwZWU3LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMzlhOGMtM2JiMC00NDlkLTg5YzMtNmZiYTZhMWUwZWU3
LzEvVXVjYk9kZkVsREM3eDN1MldWTGtBaG9DVXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebGoqwj/
tKmPAk++U14iC4xr7Fg0qB4P+BKdFjrXi1r94lF7ryXkBYbJOUg9kbUMO/5xgtif
hH12mdqgoEGVdBHgkpTvdue4i518FIpc6PA551GD7hW8t8rdoc0wERjatqPGwOFo
k2zoKxzbhNVC/Hv/fv8eCyIHv8X0iRW54FsmMRAeokmCori8VNGvtkDmtU10+vHl
WWbt/f6wS7+mIYxseUfXj8R+EfDsmZ7Byacr2sYWDYPbDB7cEYrgHuVDHWaBhM+5
36z/2pW2P3NGt+zfCYDxM4LOHjXyPUx9VR/pF6E/WU6PChqqg+C527RAK2Af8Nz7
cIvHWY/1RpX0Sw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:37 2025 by rpki-client