Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          zLCRt2ZJkG5TDYaX9du8j4va7+6WoR1GrE43IydWdOQ=
Subject key identifier:   B1:5A:CE:E2:33:AD:6B:E2:D4:54:4B:94:12:D3:68:99:EC:72:01:73
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       019874193282DADAFC07DBD351CE302321B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0788
Signing time:             Mon 04 Aug 2025 08:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:05 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: fkZA675yDazrFxxGdvaPh3HUWhacoiS2uPFO9P8uxlo=)
                          2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:32:82:da:da:fc:07:db:d3:51:ce:30:23:21:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Aug  4 08:01:05 2025 GMT
            Not After : Aug  5 08:01:05 2025 GMT
        Subject: CN=b15acee233ad6be2d4544b9412d36899ec720173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:75:22:9d:56:c7:e3:9c:a9:65:4c:e4:94:
                    99:ce:e6:03:1a:26:43:47:c0:58:17:64:b0:41:2c:
                    52:c3:d2:ed:89:63:9a:cb:b0:02:04:d8:d2:74:af:
                    fb:55:ac:df:cd:ce:e1:47:3b:a4:c2:70:f0:c3:8f:
                    3d:b7:02:ac:56:0d:48:03:9d:68:61:aa:21:5e:a8:
                    51:7d:94:8e:46:22:2b:64:68:1c:da:4f:38:34:5d:
                    53:c3:7f:23:be:c0:c6:02:97:5e:cd:9f:dc:9d:35:
                    aa:67:62:d1:1d:c3:19:e1:fb:8b:78:9a:bc:48:0a:
                    a3:9f:d5:9a:59:67:f5:5f:64:9d:a6:74:95:48:1a:
                    90:4d:40:9c:b3:03:1b:09:1e:f9:b5:63:a8:ef:1c:
                    1c:6a:7c:e9:01:b7:38:a7:7e:52:24:de:36:af:00:
                    e6:2f:b4:1e:df:15:d5:ca:42:5d:10:66:95:a3:ae:
                    ef:1d:e8:32:a2:08:b5:f5:ef:69:d8:b5:95:9b:5a:
                    6c:53:7e:46:ec:dd:6d:82:e8:d3:aa:6f:13:14:85:
                    0e:31:42:17:8a:03:13:84:fc:50:be:7f:c4:5f:04:
                    a1:9a:ca:44:f6:9a:85:ee:29:1b:2a:1d:d7:ff:a7:
                    16:ae:bf:7a:9f:c6:2c:a5:4c:61:a1:9a:ff:fe:6e:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:CE:E2:33:AD:6B:E2:D4:54:4B:94:12:D3:68:99:EC:72:01:73
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:f0:2b:f3:a9:a3:84:ca:04:c9:f9:fa:8b:78:49:84:67:
         9e:a5:5d:5a:55:1c:dd:15:e4:7a:1d:e2:4e:e4:f8:1e:80:76:
         93:54:9b:63:79:12:89:1a:47:19:91:75:b2:ff:f3:a5:b7:48:
         2f:b1:4c:77:70:e2:2a:33:4a:92:03:49:f5:25:f2:1a:b3:9c:
         f7:0c:be:19:dd:9c:12:bb:5e:c2:43:40:ec:6d:d9:3d:92:54:
         b8:5a:84:d7:da:99:b7:4f:2d:c8:39:8c:a8:86:b8:12:33:34:
         0b:59:bf:38:85:e0:dc:c2:7e:f0:7b:a0:33:96:ee:6e:2e:87:
         57:2e:e7:a9:ee:35:ca:25:84:2d:72:40:52:7d:e3:bb:da:b7:
         f3:d8:46:18:11:81:26:4e:4b:83:8d:90:0f:25:e2:fa:29:a9:
         c9:3a:d9:0a:aa:bd:16:cf:65:3a:e8:09:f2:ca:69:00:31:8b:
         b0:fe:cc:16:91:2b:00:5f:2e:7c:df:75:2f:43:13:07:e8:d2:
         71:10:39:50:dc:cf:ff:d2:bc:0f:55:67:8b:36:33:a4:29:64:
         14:4d:36:d1:1d:b2:81:30:d0:75:8a:28:44:aa:ea:4a:7e:34:
         17:2d:f8:1f:9c:f8:d5:5f:6f:27:63:b4:18:33:42:76:71:e5:
         04:02:77:a7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZh0GTKC2tr8B9vTUc4wIyG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjUwODA0MDgwMTA1WhcNMjUwODA1MDgwMTA1WjAzMTEwLwYDVQQD
EyhiMTVhY2VlMjMzYWQ2YmUyZDQ1NDRiOTQxMmQzNjg5OWVjNzIwMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJN1Ip1Wx+OcqWVM5JSZzuYDGiZD
R8BYF2SwQSxSw9LtiWOay7ACBNjSdK/7Vazfzc7hRzukwnDww489twKsVg1IA51o
YaohXqhRfZSORiIrZGgc2k84NF1Tw38jvsDGApdezZ/cnTWqZ2LRHcMZ4fuLeJq8
SAqjn9WaWWf1X2SdpnSVSBqQTUCcswMbCR75tWOo7xwcanzpAbc4p35SJN42rwDm
L7Qe3xXVykJdEGaVo67vHegyogi19e9p2LWVm1psU35G7N1tgujTqm8TFIUOMUIX
igMThPxQvn/EXwShmspE9pqF7ikbKh3X/6cWrr96n8YspUxhoZr//m7OHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLFazuIzrWvi1FRLlBLTaJnscgFzMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqTw
K/Opo4TKBMn5+ot4SYRnnqVdWlUc3RXkeh3iTuT4HoB2k1SbY3kSiRpHGZF1sv/z
pbdIL7FMd3DiKjNKkgNJ9SXyGrOc9wy+Gd2cErtewkNA7G3ZPZJUuFqE19qZt08t
yDmMqIa4EjM0C1m/OIXg3MJ+8HugM5bubi6HVy7nqe41yiWELXJAUn3ju9q389hG
GBGBJk5Lg42QDyXi+impyTrZCqq9Fs9lOugJ8sppADGLsP7MFpErAF8ufN91L0MT
B+jScRA5UNzP/9K8D1VnizYzpClkFE020R2ygTDQdYooRKrqSn40Fy34H5z41V9v
J2O0GDNCdnHlBAJ3pw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:58 2025 by rpki-client