Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File:                     Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier:          M4zP4+HGxgvBMtzTjZ7BIO2AADJ4g0+e5GGhaxUKAQs=
Subject key identifier:   BE:E1:D0:EB:B6:6C:5B:9F:39:C7:D0:75:0A:B2:E3:04:DF:CE:86:CD
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer:       /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial:       019873E357FC4C2596C9862FC0471315454E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number:          09C0
Signing time:             Mon 04 Aug 2025 07:02:15 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:15 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:15 +0000
Files and hashes:         1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: b1wMah7Jv7LSro8p4+9uoduDTx3KGfCztScX7yVF6ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:57:fc:4c:25:96:c9:86:2f:c0:47:13:15:45:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
        Validity
            Not Before: Aug  4 07:02:15 2025 GMT
            Not After : Aug  5 07:02:15 2025 GMT
        Subject: CN=bee1d0ebb66c5b9f39c7d0750ab2e304dfce86cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7d:12:7c:cf:d3:f9:f2:7a:f1:bc:64:86:b6:
                    a9:83:13:f2:39:8a:99:55:a8:27:13:e4:0e:0d:96:
                    ed:78:d2:53:8a:21:11:d9:0f:7d:69:ff:cf:db:09:
                    82:1e:c5:33:96:f7:6f:cb:0a:48:59:83:7b:18:38:
                    b1:fb:7d:de:7d:46:a3:21:29:db:be:a3:74:53:12:
                    37:70:5e:14:b0:85:58:48:44:75:e7:31:dc:84:42:
                    df:ee:01:b1:64:68:f1:44:7c:a6:a8:22:b4:8d:11:
                    ca:37:eb:7f:16:b8:80:0e:b6:e1:dd:bf:64:e6:c1:
                    93:6e:bc:ee:08:f6:1c:1f:59:d0:bd:be:a2:53:1f:
                    ca:d0:a6:f9:73:22:3d:5d:ca:2e:b3:95:84:4d:51:
                    91:5b:b2:94:88:c2:54:ae:e7:f5:82:f6:5d:ad:1c:
                    02:85:71:f6:4d:e4:c1:78:39:ca:ea:c7:94:c7:4e:
                    65:03:1c:c4:74:97:64:40:43:02:d1:1f:bc:55:9f:
                    84:2d:cc:da:22:0f:f4:f7:f1:82:31:de:96:10:d8:
                    2e:b4:b3:52:3e:8e:21:91:2b:5a:3b:78:19:55:40:
                    a9:86:9a:b2:b6:80:99:13:d9:e4:e1:3f:48:f3:56:
                    ae:a2:6f:ba:24:1f:37:e1:a2:68:f4:fe:c9:ca:9a:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:D0:EB:B6:6C:5B:9F:39:C7:D0:75:0A:B2:E3:04:DF:CE:86:CD
            X509v3 Authority Key Identifier:
                keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:28:a7:96:7a:bc:4e:fe:1d:c6:7d:e7:2d:f1:d3:8d:e5:0e:
         29:f6:cd:c4:8c:9b:4f:ee:7b:bf:1e:45:6a:5a:e7:4e:fb:6d:
         96:0b:55:c6:f2:2d:b5:26:59:64:d5:bf:67:71:bd:60:29:27:
         87:ef:f4:76:38:eb:01:b8:9f:54:d8:58:3d:b1:84:d0:3f:eb:
         b1:20:1b:2d:78:ff:b4:c8:13:6e:0f:e3:be:5f:ee:6b:31:df:
         c6:57:34:88:4a:94:34:e9:62:c2:0f:27:2e:46:72:af:1f:7b:
         09:04:f1:2e:04:5a:b2:eb:bc:a6:3d:29:bb:82:cb:ee:53:c2:
         f6:ca:ff:d8:eb:a2:6c:31:85:a1:ee:1a:73:40:98:19:88:ef:
         70:11:ab:c2:ea:ba:5d:ff:dd:64:1c:10:af:05:51:e1:f6:81:
         2a:42:ed:97:fe:f3:b2:96:99:b7:e9:67:a2:b3:63:3f:5a:a7:
         99:ed:c8:6b:ef:5b:11:4f:c3:f5:70:12:d3:34:d2:13:4b:97:
         86:8d:96:6c:4c:74:00:c4:98:8b:9e:db:fd:9d:0f:98:cc:5e:
         da:a8:98:7a:d4:a2:cf:c3:8e:ea:b7:57:3c:9a:81:49:6d:f6:
         b0:89:58:21:d7:cf:d9:c8:c0:d6:db:1e:2c:d0:2c:d7:18:b8:
         24:3c:7e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz41f8TCWWyYYvwEcTFUVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWZmMzg1ZDRiNDgyMTVkODA1YjU4OGEyNzA1ODI5ZDQ2
MjExNzEwHhcNMjUwODA0MDcwMjE1WhcNMjUwODA1MDcwMjE1WjAzMTEwLwYDVQQD
EyhiZWUxZDBlYmI2NmM1YjlmMzljN2QwNzUwYWIyZTMwNGRmY2U4NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H0SfM/T+fJ68bxkhrapgxPyOYqZ
VagnE+QODZbteNJTiiER2Q99af/P2wmCHsUzlvdvywpIWYN7GDix+33efUajISnb
vqN0UxI3cF4UsIVYSER15zHchELf7gGxZGjxRHymqCK0jRHKN+t/FriADrbh3b9k
5sGTbrzuCPYcH1nQvb6iUx/K0Kb5cyI9Xcous5WETVGRW7KUiMJUruf1gvZdrRwC
hXH2TeTBeDnK6seUx05lAxzEdJdkQEMC0R+8VZ+ELczaIg/09/GCMd6WENgutLNS
Po4hkStaO3gZVUCphpqytoCZE9nk4T9I81auom+6JB834aJo9P7JypqxbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7h0Ou2bFufOcfQdQqy4wTfzobNMB8GA1UdIwQY
MBaAFFLv84XUtIIV2AW1iKJwWCnUYhFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYt
MzBkNDc1YmY0ZjYyLzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYtMzBkNDc1YmY0ZjYy
LzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyinlnq8
Tv4dxn3nLfHTjeUOKfbNxIybT+57vx5FalrnTvttlgtVxvIttSZZZNW/Z3G9YCkn
h+/0djjrAbifVNhYPbGE0D/rsSAbLXj/tMgTbg/jvl/uazHfxlc0iEqUNOliwg8n
LkZyrx97CQTxLgRasuu8pj0pu4LL7lPC9sr/2OuibDGFoe4ac0CYGYjvcBGrwuq6
Xf/dZBwQrwVR4faBKkLtl/7zspaZt+lnorNjP1qnme3Ia+9bEU/D9XAS0zTSE0uX
ho2WbEx0AMSYi57b/Z0PmMxe2qiYetSiz8OO6rdXPJqBSW32sIlYIdfP2cjA1tse
LNAs1xi4JDx+3w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:23 2025 by rpki-client