Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File:                     uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier:          7eiXFfXk8m0kE1H6fAxf9Hk1VMn/tdnyrV5uMU/fyKM=
Subject key identifier:   AD:3E:B6:4D:5D:66:8B:61:04:E7:13:C3:9D:DA:D0:42:C7:85:23:9D
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer:       /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial:       01977CE78E12B4175E7C4134F38B9726FB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number:          12DE
Signing time:             Tue 17 Jun 2025 08:00:39 +0000
Manifest this update:     Tue 17 Jun 2025 08:00:39 +0000
Manifest next update:     Wed 18 Jun 2025 08:00:39 +0000
Files and hashes:         1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
                          2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: xCBK7od2XGGVK5weGL5lACxS8fy3JMOL/Ox0b4xq/9U=)
                          3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:e7:8e:12:b4:17:5e:7c:41:34:f3:8b:97:26:fb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
        Validity
            Not Before: Jun 17 08:00:39 2025 GMT
            Not After : Jun 18 08:00:39 2025 GMT
        Subject: CN=ad3eb64d5d668b6104e713c39ddad042c785239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:d6:63:fb:c2:69:9a:a4:59:5a:53:cc:73:
                    12:4a:72:aa:83:03:85:6d:59:b7:3c:1b:d9:8d:c9:
                    46:78:9b:db:8c:4b:4e:7d:f9:3b:a0:f7:e9:28:b8:
                    76:ca:d1:60:5e:9b:fd:e8:9a:74:f5:1b:21:db:a1:
                    2a:1d:7f:a4:c3:7a:76:65:93:cb:22:43:f1:a7:cc:
                    ae:69:c6:de:af:31:aa:17:4a:bc:ca:99:a8:d2:d0:
                    93:3f:33:c9:92:20:c3:df:84:36:26:18:9a:20:5e:
                    2b:19:05:97:38:33:b4:00:0b:34:67:19:18:dc:40:
                    d4:db:3d:72:7b:ef:51:58:ad:7e:8f:97:72:b3:da:
                    16:bd:ad:97:64:b7:12:73:ef:d4:a2:e5:0f:17:b2:
                    a2:be:95:b6:74:55:4c:13:6d:4f:60:d4:e6:04:1b:
                    d2:7a:de:ab:a5:b1:a5:d1:22:ee:be:84:29:73:6a:
                    78:a6:57:99:87:84:69:c1:a5:12:44:02:7c:8a:89:
                    54:36:46:c7:1e:2c:2e:b0:2e:d3:86:82:62:ef:c1:
                    fe:e8:e9:49:43:60:82:6b:5f:18:a4:e2:b0:41:39:
                    17:1d:c8:7f:5d:3d:56:aa:04:2c:85:d1:7e:b5:21:
                    fb:2f:e0:33:42:33:db:05:e2:0a:96:f9:5a:32:47:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:B6:4D:5D:66:8B:61:04:E7:13:C3:9D:DA:D0:42:C7:85:23:9D
            X509v3 Authority Key Identifier:
                keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:a8:1c:02:14:cc:a3:de:e9:92:23:7d:7d:fa:c9:b3:3a:
         4e:3f:a3:fb:e8:d9:1c:28:b7:7f:6d:53:52:7e:39:4e:23:fb:
         3c:37:9f:b6:a4:d7:98:25:17:c0:92:b6:24:ff:0e:88:97:4d:
         ce:2c:b0:09:ae:c0:aa:89:97:fd:80:e4:26:4d:be:1b:c3:c9:
         68:4e:d4:f7:01:d2:b2:8e:a2:82:d9:3d:ab:72:96:a2:19:95:
         56:13:8f:22:78:80:f4:80:66:94:a3:fc:5a:41:14:a8:f4:95:
         9d:7a:2e:c1:02:cd:57:7d:5b:a1:45:b5:59:23:1b:3f:c4:19:
         d9:12:da:4b:d5:b8:19:de:b8:0a:3c:95:0a:bb:30:31:e3:d4:
         fa:ba:2c:f7:56:5e:ff:62:af:7c:7e:a3:65:95:95:e6:07:04:
         93:cf:64:03:75:51:2d:73:da:6b:72:d4:8b:22:71:0a:c5:9f:
         55:b1:ad:fa:e6:ab:97:07:31:df:af:8b:44:a1:6f:5b:ec:6b:
         c7:db:13:ed:59:41:bb:c6:20:52:7d:8f:74:5a:24:09:37:3c:
         d9:55:db:ed:36:00:9b:c7:46:74:8a:b3:1a:de:90:67:2c:8b:
         14:23:e8:66:e0:db:82:ba:0a:cc:ba:ca:af:44:02:82:92:44:
         3d:db:d8:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8544StBdefEE084uXJvtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OGQxZjZlMzM2YTdjODEzNTE5NDFiYzBiOWRlYTM5ZDdk
NzY0ZGIwHhcNMjUwNjE3MDgwMDM5WhcNMjUwNjE4MDgwMDM5WjAzMTEwLwYDVQQD
EyhhZDNlYjY0ZDVkNjY4YjYxMDRlNzEzYzM5ZGRhZDA0MmM3ODUyMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBjWY/vCaZqkWVpTzHMSSnKqgwOF
bVm3PBvZjclGeJvbjEtOffk7oPfpKLh2ytFgXpv96Jp09Rsh26EqHX+kw3p2ZZPL
IkPxp8yuacberzGqF0q8ypmo0tCTPzPJkiDD34Q2JhiaIF4rGQWXODO0AAs0ZxkY
3EDU2z1ye+9RWK1+j5dys9oWva2XZLcSc+/UouUPF7KivpW2dFVME21PYNTmBBvS
et6rpbGl0SLuvoQpc2p4pleZh4RpwaUSRAJ8iolUNkbHHiwusC7ThoJi78H+6OlJ
Q2CCa18YpOKwQTkXHch/XT1WqgQshdF+tSH7L+AzQjPbBeIKlvlaMkcWfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0+tk1dZothBOcTw53a0ELHhSOdMB8GA1UdIwQY
MBaAFLmNH24zanyBNRlBvAud6jnX12TbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAt
MDM4NTdlZjViMzg3LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAtMDM4NTdlZjViMzg3
LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL02oHAIU
zKPe6ZIjfX36ybM6Tj+j++jZHCi3f21TUn45TiP7PDeftqTXmCUXwJK2JP8OiJdN
ziywCa7AqomX/YDkJk2+G8PJaE7U9wHSso6igtk9q3KWohmVVhOPIniA9IBmlKP8
WkEUqPSVnXouwQLNV31boUW1WSMbP8QZ2RLaS9W4Gd64CjyVCrswMePU+ros91Ze
/2KvfH6jZZWV5gcEk89kA3VRLXPaa3LUiyJxCsWfVbGt+uarlwcx36+LRKFvW+xr
x9sT7VlBu8YgUn2PdFokCTc82VXb7TYAm8dGdIqzGt6QZyyLFCPoZuDbgroKzLrK
r0QCgpJEPdvYkw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:01:18 2025 by rpki-client