Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File:                     uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier:          XEMz/JFmVtx5wrLyXcKA9dhfUAWxPMGUg3AFhrgiO3w=
Subject key identifier:   58:A7:C7:D0:12:B6:54:A6:BD:05:02:4D:E8:1B:27:8F:3F:76:51:14
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer:       /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial:       019872CF6E522305D9064D8D03C21C5F3650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number:          098B
Signing time:             Mon 04 Aug 2025 02:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:53 +0000
Files and hashes:         1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
                          2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: Ek8pk95PVQKqMsDgTJpjh6AbqsBDHRFH6rAN6w/fTzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:6e:52:23:05:d9:06:4d:8d:03:c2:1c:5f:36:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
        Validity
            Not Before: Aug  4 02:00:53 2025 GMT
            Not After : Aug  5 02:00:53 2025 GMT
        Subject: CN=58a7c7d012b654a6bd05024de81b278f3f765114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:e6:b3:73:53:b0:45:df:4b:73:2b:81:2d:
                    7d:0f:f1:b7:11:17:06:c7:66:16:91:13:d9:82:63:
                    ae:50:c0:59:73:24:02:49:e3:3d:6d:8b:9a:a9:1d:
                    74:bb:5f:f8:e7:cc:1f:50:45:87:28:c4:2e:17:9c:
                    c8:da:4b:31:e2:fe:d6:40:22:29:05:64:ec:9c:a2:
                    dc:71:a5:2a:d7:1f:4d:33:46:da:40:f8:90:a3:2d:
                    06:d2:0d:76:34:ac:dd:4f:18:66:dd:fa:67:8e:cc:
                    ad:2c:ef:79:3d:52:cb:9c:4e:6b:0f:cf:69:4c:ad:
                    81:5e:50:03:3f:7a:dd:04:fb:09:24:68:9c:4b:9b:
                    ce:18:e3:52:49:8e:e7:45:4e:2a:77:3e:62:6f:f7:
                    0b:cb:6f:02:a8:4e:1f:7e:c9:a7:a1:50:fb:c5:b6:
                    a5:b8:b5:6a:63:42:59:dd:ba:1e:fa:e5:84:27:ce:
                    35:d3:24:05:d7:0f:f1:88:c1:72:fc:e8:44:e7:e4:
                    de:60:56:c5:b1:a8:64:92:c5:31:ab:60:b3:25:fd:
                    85:df:d0:53:d1:70:15:1a:85:1a:96:9e:e2:db:9a:
                    11:94:d3:89:0c:c7:7a:ae:4a:dd:35:80:a7:52:85:
                    db:8e:29:fe:ac:06:b2:43:79:af:47:30:9f:3e:17:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:C7:D0:12:B6:54:A6:BD:05:02:4D:E8:1B:27:8F:3F:76:51:14
            X509v3 Authority Key Identifier:
                keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:38:26:d5:a6:93:51:8c:c2:51:1a:4f:3f:1b:82:1b:a7:bb:
         93:b6:e6:e0:3b:40:c3:7c:de:0d:0c:5b:43:fa:97:a1:fe:a8:
         b2:a3:54:5a:e5:25:4a:1a:90:82:9b:3d:50:c0:3d:65:9a:30:
         8e:ab:0c:d9:77:cf:22:51:31:49:b4:dc:8d:66:e6:4f:a6:c6:
         e5:1e:07:17:71:c6:ca:56:80:90:fb:47:b9:db:59:73:c3:7b:
         ce:b6:f4:d2:f3:58:57:1b:e5:1a:a0:b7:37:88:ad:06:34:98:
         a3:81:57:fd:50:79:92:a5:98:d7:b6:81:b2:76:d2:2d:c3:2f:
         b1:44:bc:15:a1:55:da:c1:83:48:e0:22:a4:32:29:ee:1c:83:
         fc:52:13:26:2c:d0:29:c3:d1:f8:47:44:af:47:b4:41:d7:4f:
         45:75:c0:ca:ef:72:07:6a:56:00:07:fc:01:d6:0d:50:9e:23:
         56:82:79:00:14:b0:f9:13:2a:1c:96:8d:23:1a:28:98:9b:17:
         ad:9b:2b:e7:e1:43:be:d9:c9:04:b9:95:40:55:86:fd:96:bb:
         84:35:73:e9:74:3b:10:5e:48:17:38:46:82:da:26:fd:4c:5a:
         15:6f:64:67:1b:44:e3:1a:db:67:9c:68:2b:d9:40:8d:87:16:
         32:92:a1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz25SIwXZBk2NA8IcXzZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzYyOGEzNjMwNGUzYmRjMjFmODUzYmIzZmFkNDNlNDg2
MWE1YzUwHhcNMjUwODA0MDIwMDUzWhcNMjUwODA1MDIwMDUzWjAzMTEwLwYDVQQD
Eyg1OGE3YzdkMDEyYjY1NGE2YmQwNTAyNGRlODFiMjc4ZjNmNzY1MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJPms3NTsEXfS3MrgS19D/G3ERcG
x2YWkRPZgmOuUMBZcyQCSeM9bYuaqR10u1/458wfUEWHKMQuF5zI2ksx4v7WQCIp
BWTsnKLccaUq1x9NM0baQPiQoy0G0g12NKzdTxhm3fpnjsytLO95PVLLnE5rD89p
TK2BXlADP3rdBPsJJGicS5vOGONSSY7nRU4qdz5ib/cLy28CqE4ffsmnoVD7xbal
uLVqY0JZ3boe+uWEJ8410yQF1w/xiMFy/OhE5+TeYFbFsahkksUxq2CzJf2F39BT
0XAVGoUalp7i25oRlNOJDMd6rkrdNYCnUoXbjin+rAayQ3mvRzCfPhfDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFinx9AStlSmvQUCTegbJ48/dlEUMB8GA1UdIwQY
MBaAFLk2KKNjBOO9wh+FO7P61D5IYaXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmIt
ODdkM2VjN2YwNDEwLzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmItODdkM2VjN2YwNDEw
LzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDgm1aaT
UYzCURpPPxuCG6e7k7bm4DtAw3zeDQxbQ/qXof6osqNUWuUlShqQgps9UMA9ZZow
jqsM2XfPIlExSbTcjWbmT6bG5R4HF3HGylaAkPtHudtZc8N7zrb00vNYVxvlGqC3
N4itBjSYo4FX/VB5kqWY17aBsnbSLcMvsUS8FaFV2sGDSOAipDIp7hyD/FITJizQ
KcPR+EdEr0e0QddPRXXAyu9yB2pWAAf8AdYNUJ4jVoJ5ABSw+RMqHJaNIxoomJsX
rZsr5+FDvtnJBLmVQFWG/Za7hDVz6XQ7EF5IFzhGgtom/UxaFW9kZxtE4xrbZ5xo
K9lAjYcWMpKhcA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:30 2025 by rpki-client