Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File:                     uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier:          rAHUlqodUXDMb/55eBEuViaUNow5pXDF1JWC0WQar+w=
Subject key identifier:   6B:B4:F1:0C:39:7D:44:4F:2D:7E:36:B1:5C:1C:25:2B:B0:03:11:7F
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       019881D4FDBA47B219BCB34E22A30C16EE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number:          1621
Signing time:             Thu 07 Aug 2025 00:01:16 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:16 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:16 +0000
Files and hashes:         1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
                          2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: vd1BWV+X8qJqHt7CNzVacSeruzx6AvBUmAYuwPob+OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:fd:ba:47:b2:19:bc:b3:4e:22:a3:0c:16:ee:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Aug  7 00:01:16 2025 GMT
            Not After : Aug  8 00:01:16 2025 GMT
        Subject: CN=6bb4f10c397d444f2d7e36b15c1c252bb003117f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:b3:fc:45:de:88:4f:24:5c:a3:14:c2:62:
                    d6:45:b8:22:f5:66:13:1a:0b:f2:2f:a0:7e:aa:fa:
                    70:cc:16:99:02:2c:91:fe:18:85:53:4e:cc:d4:07:
                    9e:ad:d0:ea:1f:07:30:ef:bd:44:8f:9c:b7:d3:11:
                    d4:47:a0:71:1c:7d:37:6e:a7:b3:2d:36:41:f7:e8:
                    cb:e7:cd:a4:a0:8e:d1:a7:18:82:f6:36:8c:a2:ab:
                    a5:dc:d1:46:ca:37:5d:e7:9a:22:c8:84:de:83:a1:
                    38:ce:d8:0a:52:57:40:76:f5:d6:d3:1c:2a:8f:44:
                    3b:77:95:b3:cb:b3:b0:c9:73:02:1f:06:8f:52:8f:
                    f2:8e:53:98:ef:5e:d9:45:cb:17:5c:89:86:49:3b:
                    38:ea:82:7b:ef:15:f3:9e:7d:62:fe:43:64:ca:9d:
                    8a:6b:72:d5:38:8b:8e:a9:bb:39:25:7a:6f:48:66:
                    4c:ff:b7:ad:64:2f:eb:5d:5d:94:e9:6f:65:9e:04:
                    d1:20:96:64:4e:d9:e0:60:df:c9:e2:c2:6a:6f:89:
                    42:bb:82:ee:49:10:10:38:58:34:fa:5b:07:1b:ee:
                    67:ce:81:f3:2d:f2:e4:cb:c0:27:6e:ac:a5:65:cf:
                    5e:4e:a3:f2:f8:c9:30:cb:c6:a9:aa:a9:8c:ab:12:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:F1:0C:39:7D:44:4F:2D:7E:36:B1:5C:1C:25:2B:B0:03:11:7F
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:56:fe:ca:1f:35:8d:a7:45:62:c7:ca:8f:fb:a6:bd:ac:a6:
         fb:bb:f9:81:42:30:aa:ac:66:3c:75:d1:bd:59:11:ac:c8:6b:
         14:94:df:23:b8:0e:a6:1e:e9:ea:eb:9f:2e:1d:ee:88:46:af:
         bf:92:c8:21:a4:25:3b:d3:24:e9:a1:36:7d:f2:8f:59:c7:2e:
         76:78:77:ff:d6:b1:4e:26:bb:90:89:6c:e5:10:cd:49:58:1f:
         c0:97:a2:37:b5:50:a5:65:75:57:e9:5b:7c:4d:2d:fd:a2:d0:
         60:01:dd:64:d3:be:5d:01:ce:33:3b:0d:4a:59:d4:e2:5a:a3:
         09:27:18:13:00:84:3b:39:1a:0e:e5:f6:83:2a:17:ef:bd:4c:
         3a:90:c0:cd:f0:84:ed:0d:b1:69:e5:9e:87:89:22:8d:7a:3f:
         fd:df:2b:41:18:a1:8c:3d:90:b2:fc:0f:df:b4:33:b9:93:9d:
         ff:5e:98:13:7f:b3:0e:77:93:d6:0a:07:d9:fc:c5:aa:d9:bf:
         a9:30:1f:ad:3f:6a:93:37:f8:67:33:9c:f9:ce:52:74:f1:f9:
         a1:f3:15:3b:52:4c:5d:88:b0:7c:4f:31:fa:4e:44:09:d7:3b:
         e8:02:9a:36:de:56:30:c9:dd:c7:2c:c2:ed:a4:c9:cc:52:25:
         2a:1f:84:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1P26R7IZvLNOIqMMFu4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDYzM2ZlNzlhNjI5NjEwOWZkYmY2NDc1ZDRjMmE2NWUy
ZDRmMWMwHhcNMjUwODA3MDAwMTE2WhcNMjUwODA4MDAwMTE2WjAzMTEwLwYDVQQD
Eyg2YmI0ZjEwYzM5N2Q0NDRmMmQ3ZTM2YjE1YzFjMjUyYmIwMDMxMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym2z/EXeiE8kXKMUwmLWRbgi9WYT
GgvyL6B+qvpwzBaZAiyR/hiFU07M1AeerdDqHwcw771Ej5y30xHUR6BxHH03bqez
LTZB9+jL582koI7RpxiC9jaMoqul3NFGyjdd55oiyITeg6E4ztgKUldAdvXW0xwq
j0Q7d5Wzy7OwyXMCHwaPUo/yjlOY717ZRcsXXImGSTs46oJ77xXznn1i/kNkyp2K
a3LVOIuOqbs5JXpvSGZM/7etZC/rXV2U6W9lngTRIJZkTtngYN/J4sJqb4lCu4Lu
SRAQOFg0+lsHG+5nzoHzLfLky8AnbqylZc9eTqPy+Mkwy8apqqmMqxLH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu08Qw5fURPLX42sVwcJSuwAxF/MB8GA1UdIwQY
MBaAFLgGM/55pilhCf2/ZHXUwqZeLU8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTkt
MmEwNmVkMTA0NTUzLzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTktMmEwNmVkMTA0NTUz
LzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlb+yh81
jadFYsfKj/umvaym+7v5gUIwqqxmPHXRvVkRrMhrFJTfI7gOph7p6uufLh3uiEav
v5LIIaQlO9Mk6aE2ffKPWccudnh3/9axTia7kIls5RDNSVgfwJeiN7VQpWV1V+lb
fE0t/aLQYAHdZNO+XQHOMzsNSlnU4lqjCScYEwCEOzkaDuX2gyoX771MOpDAzfCE
7Q2xaeWeh4kijXo//d8rQRihjD2QsvwP37QzuZOd/16YE3+zDneT1goH2fzFqtm/
qTAfrT9qkzf4ZzOc+c5SdPH5ofMVO1JMXYiwfE8x+k5ECdc76AKaNt5WMMndxyzC
7aTJzFIlKh+EIg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:31 2025 by rpki-client