Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File:                     uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier:          5UNpAyAIqWE4a3yvDPVyfGOlGbNviLsUlgQu8ffxBeo=
Subject key identifier:   AA:5B:04:B7:15:DA:4B:4C:9A:1F:75:99:0D:24:EE:C8:AC:F8:FB:50
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer:       /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial:       01976EBE11720E30493A9210B46627C3E875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number:          07CD
Signing time:             Sat 14 Jun 2025 14:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:39 +0000
Files and hashes:         1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
                          2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: kYv6L7RHd9Fpx7XasLGw1vAbDPA+kPfT4zbdgsALxpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:11:72:0e:30:49:3a:92:10:b4:66:27:c3:e8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
        Validity
            Not Before: Jun 14 14:00:39 2025 GMT
            Not After : Jun 15 14:00:39 2025 GMT
        Subject: CN=aa5b04b715da4b4c9a1f75990d24eec8acf8fb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:be:07:00:8d:b5:3e:fb:be:fd:7e:bb:4f:
                    1f:8d:2a:32:f8:64:81:91:68:f2:9f:cc:bc:c2:40:
                    42:45:3c:30:fe:23:91:47:5b:6f:58:d7:2a:ed:5a:
                    d6:11:ef:a3:8c:e9:0d:23:7b:ca:0e:66:8c:98:79:
                    ef:5b:e2:54:00:b5:4e:4f:43:d2:8d:1b:41:86:49:
                    e1:98:fc:d4:cf:1a:33:7d:a9:d1:ad:9c:3d:91:2a:
                    26:09:6c:cc:b3:8c:34:6d:49:20:c7:19:43:1e:05:
                    3b:e3:02:8d:b4:29:df:57:a1:e0:6c:9e:e4:61:1e:
                    0d:ae:fb:e1:0c:57:8b:52:80:42:7d:a7:5a:20:0c:
                    28:e4:22:34:fb:e6:64:67:83:1f:e3:c0:9c:47:72:
                    65:07:76:53:11:f9:c6:1c:e7:65:18:5e:41:ac:72:
                    93:83:7e:c9:66:84:3b:f6:73:6f:5f:77:01:e5:05:
                    84:22:43:2c:dd:84:ca:5e:28:20:04:86:79:23:44:
                    a5:81:52:fc:9a:48:29:2f:f3:54:dd:b7:f2:1f:3d:
                    e1:7a:0c:12:89:da:bb:a8:50:e3:bc:63:d3:a7:3e:
                    0e:47:16:23:12:e9:62:c7:96:4a:75:4f:d9:a3:56:
                    7b:1d:48:c1:ec:18:d7:29:2d:4b:06:74:6e:1f:d0:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5B:04:B7:15:DA:4B:4C:9A:1F:75:99:0D:24:EE:C8:AC:F8:FB:50
            X509v3 Authority Key Identifier:
                keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:9e:55:31:b5:d5:92:b4:15:1e:63:43:74:d1:5d:ae:e1:
         25:2d:4f:2c:6e:f4:64:ed:cb:81:cf:e0:e6:a8:e2:16:6e:78:
         6c:3e:73:4c:64:5f:bf:5f:58:33:9a:1c:3e:0c:44:3a:04:8a:
         68:73:be:99:81:2c:bc:94:bb:12:37:16:75:b5:1e:ac:0c:b0:
         5f:43:17:b0:ba:8a:06:23:02:de:23:b5:f9:50:e6:da:8b:bc:
         d8:23:51:70:0b:1d:f6:f3:92:e0:08:f9:14:25:18:f9:47:4f:
         e5:80:ba:4c:d9:09:9e:4a:1e:f3:4d:32:91:84:bf:11:7b:a9:
         9a:6a:29:bf:5f:49:09:80:53:c0:43:9e:66:45:17:97:79:46:
         30:3c:40:02:a6:83:ca:d1:04:5e:89:9b:ee:69:8a:56:89:72:
         c4:f4:18:53:ba:6e:2d:b2:86:85:f4:2c:9d:97:e3:bc:ef:ad:
         4a:a6:1d:59:74:da:91:1e:31:3f:fe:e9:11:a3:78:7e:1a:53:
         30:6d:3f:98:55:0e:d4:06:3c:8e:c5:75:e2:bc:9f:24:e3:22:
         eb:13:fa:eb:a3:f3:e3:e5:07:05:a4:0a:b9:7b:58:a4:71:f4:
         42:4a:76:ee:96:eb:77:1b:63:7b:52:db:ef:e5:5e:bd:1a:9b:
         ce:63:39:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvhFyDjBJOpIQtGYnw+h1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWJlMmIzNjc5OTA0YjYwYTJmYzM5OWI3ODA4MWM4NmIw
MzhkOTkwHhcNMjUwNjE0MTQwMDM5WhcNMjUwNjE1MTQwMDM5WjAzMTEwLwYDVQQD
EyhhYTViMDRiNzE1ZGE0YjRjOWExZjc1OTkwZDI0ZWVjOGFjZjhmYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0O+BwCNtT77vv1+u08fjSoy+GSB
kWjyn8y8wkBCRTww/iORR1tvWNcq7VrWEe+jjOkNI3vKDmaMmHnvW+JUALVOT0PS
jRtBhknhmPzUzxozfanRrZw9kSomCWzMs4w0bUkgxxlDHgU74wKNtCnfV6HgbJ7k
YR4NrvvhDFeLUoBCfadaIAwo5CI0++ZkZ4Mf48CcR3JlB3ZTEfnGHOdlGF5BrHKT
g37JZoQ79nNvX3cB5QWEIkMs3YTKXiggBIZ5I0SlgVL8mkgpL/NU3bfyHz3hegwS
idq7qFDjvGPTpz4ORxYjEulix5ZKdU/Zo1Z7HUjB7BjXKS1LBnRuH9CheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpbBLcV2ktMmh91mQ0k7sis+PtQMB8GA1UdIwQY
MBaAFLkb4rNnmQS2Ci/DmbeAgchrA42ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTkt
MmI5YmY4MDUxYzhiLzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTktMmI5YmY4MDUxYzhi
LzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4ueVTG1
1ZK0FR5jQ3TRXa7hJS1PLG70ZO3Lgc/g5qjiFm54bD5zTGRfv19YM5ocPgxEOgSK
aHO+mYEsvJS7EjcWdbUerAywX0MXsLqKBiMC3iO1+VDm2ou82CNRcAsd9vOS4Aj5
FCUY+UdP5YC6TNkJnkoe800ykYS/EXupmmopv19JCYBTwEOeZkUXl3lGMDxAAqaD
ytEEXomb7mmKVolyxPQYU7puLbKGhfQsnZfjvO+tSqYdWXTakR4xP/7pEaN4fhpT
MG0/mFUO1AY8jsV14ryfJOMi6xP666Pz4+UHBaQKuXtYpHH0Qkp27pbrdxtje1Lb
7+VevRqbzmM58w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:39 2025 by rpki-client