Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File:                     UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier:          avV4TiZw9/mbx1jMxz9J/9lvJykHZ6bjPh7Vckuv++A=
Subject key identifier:   A3:FB:E8:99:5C:FB:C6:C5:4C:FB:FD:32:31:FD:3B:E2:05:AF:CF:45
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer:       /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial:       01989FDEF430BA785B41041BD3ABA5B02A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number:          0D14
Signing time:             Tue 12 Aug 2025 20:00:45 +0000
Manifest this update:     Tue 12 Aug 2025 20:00:45 +0000
Manifest next update:     Wed 13 Aug 2025 20:00:45 +0000
Files and hashes:         1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: M4z4l/rbB9KtsadfvmOMRi8gBdGWpc+/D3kFng6c8bI=)
                          2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:de:f4:30:ba:78:5b:41:04:1b:d3:ab:a5:b0:2a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
        Validity
            Not Before: Aug 12 20:00:45 2025 GMT
            Not After : Aug 13 20:00:45 2025 GMT
        Subject: CN=a3fbe8995cfbc6c54cfbfd3231fd3be205afcf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:f8:38:da:47:71:0c:b4:65:0c:ca:15:bc:
                    25:1f:39:1a:1a:02:2f:19:6a:05:3f:15:e3:5f:f8:
                    f4:b6:30:69:ca:48:70:47:a5:79:cb:4b:2e:bc:fa:
                    83:b9:32:96:7e:72:af:d8:f0:6e:42:6e:9d:33:0b:
                    97:2d:b0:6c:de:85:33:57:4b:de:4d:aa:41:79:62:
                    64:3b:56:7a:d6:9e:ec:68:c5:a5:cb:2e:7b:aa:ac:
                    90:39:ba:72:66:75:ca:e4:82:fc:56:2e:85:17:14:
                    4d:2a:1f:f1:d2:94:40:5b:54:b7:58:dc:4c:ce:49:
                    99:a2:b9:42:01:09:e3:2e:cb:2a:e8:03:c6:d1:80:
                    8c:70:45:da:43:b3:0a:b8:ba:e6:ae:cc:59:87:41:
                    5e:d9:b3:9f:7c:da:12:c2:ae:90:04:85:02:0e:8d:
                    d9:da:49:cd:cc:4e:c6:a8:ae:35:72:1c:b8:18:27:
                    b7:fa:97:dc:45:71:55:b6:da:88:97:27:d9:b6:b5:
                    26:c1:01:13:06:9a:d4:18:5d:3e:f6:b6:1c:b3:1f:
                    f8:04:8d:9b:f9:32:93:6a:6e:1c:c5:00:50:50:7e:
                    de:19:63:70:be:f3:6f:1e:f8:73:59:14:59:a5:5e:
                    22:db:cc:6f:ca:98:09:70:5e:e6:9f:07:10:5b:e5:
                    d3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FB:E8:99:5C:FB:C6:C5:4C:FB:FD:32:31:FD:3B:E2:05:AF:CF:45
            X509v3 Authority Key Identifier:
                keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:32:28:fc:44:27:5e:81:2d:5e:94:cf:fd:55:11:af:dc:
         42:7d:8e:44:df:0c:1a:cb:29:34:a1:a6:91:3f:1c:d6:2e:cd:
         51:cc:64:ea:1a:19:c0:74:11:70:6f:82:8d:25:67:b8:71:0c:
         b2:c4:d5:33:05:cd:e6:5b:28:68:97:db:2a:92:e3:9d:81:c0:
         90:ae:54:9b:93:f4:83:21:44:27:6d:3c:7d:3d:03:0c:53:dc:
         07:bd:4a:05:ff:a2:be:42:a8:60:e6:c7:80:ef:01:59:5a:81:
         75:bc:7c:22:d4:40:93:01:b3:59:c4:77:6e:79:f1:88:7b:1a:
         e9:14:8e:20:4e:76:e6:fe:ab:45:4c:81:d9:17:de:68:13:8c:
         bc:5d:bf:48:d6:f9:b2:4e:7d:a3:22:f6:20:bd:00:68:d1:e7:
         a5:f4:bc:e7:a6:16:93:d3:09:43:b0:12:cb:26:c6:cf:32:18:
         50:00:9e:43:29:d2:a0:b3:09:57:f0:07:f4:76:b7:fb:a3:67:
         a7:60:d7:e2:bb:98:a1:eb:b0:c1:27:85:d8:a6:6b:3e:7f:44:
         05:92:5f:5d:74:01:77:20:1d:1c:4b:f3:78:33:eb:85:93:19:
         06:9b:0f:d6:3e:63:ec:b2:80:4f:15:47:e3:b4:f3:02:90:59:
         d0:82:97:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZif3vQwunhbQQQb06ulsCqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZjk0MTE3MzU2NGEwOWI3Y2Y4ZWZkZDk4NzU2MTQyNjJh
N2RkNjEwHhcNMjUwODEyMjAwMDQ1WhcNMjUwODEzMjAwMDQ1WjAzMTEwLwYDVQQD
EyhhM2ZiZTg5OTVjZmJjNmM1NGNmYmZkMzIzMWZkM2JlMjA1YWZjZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS/4ONpHcQy0ZQzKFbwlHzkaGgIv
GWoFPxXjX/j0tjBpykhwR6V5y0suvPqDuTKWfnKv2PBuQm6dMwuXLbBs3oUzV0ve
TapBeWJkO1Z61p7saMWlyy57qqyQObpyZnXK5IL8Vi6FFxRNKh/x0pRAW1S3WNxM
zkmZorlCAQnjLssq6APG0YCMcEXaQ7MKuLrmrsxZh0Fe2bOffNoSwq6QBIUCDo3Z
2knNzE7GqK41chy4GCe3+pfcRXFVttqIlyfZtrUmwQETBprUGF0+9rYcsx/4BI2b
+TKTam4cxQBQUH7eGWNwvvNvHvhzWRRZpV4i28xvypgJcF7mnwcQW+XTUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP76Jlc+8bFTPv9MjH9O+IFr89FMB8GA1UdIwQY
MBaAFFL5QRc1ZKCbfPjv3Zh1YUJip91hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEt
MDlkOGU0OTNjMWY5LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNGY1MDktZWMyYy00ODZkLTliMDEtMDlkOGU0OTNjMWY5
LzEvVXZsQkZ6VmtvSnQ4LU9fZG1IVmhRbUtuM1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU4yKPxE
J16BLV6Uz/1VEa/cQn2ORN8MGsspNKGmkT8c1i7NUcxk6hoZwHQRcG+CjSVnuHEM
ssTVMwXN5lsoaJfbKpLjnYHAkK5Um5P0gyFEJ208fT0DDFPcB71KBf+ivkKoYObH
gO8BWVqBdbx8ItRAkwGzWcR3bnnxiHsa6RSOIE525v6rRUyB2RfeaBOMvF2/SNb5
sk59oyL2IL0AaNHnpfS856YWk9MJQ7ASyybGzzIYUACeQynSoLMJV/AH9Ha3+6Nn
p2DX4ruYoeuwwSeF2KZrPn9EBZJfXXQBdyAdHEvzeDPrhZMZBpsP1j5j7LKATxVH
47TzApBZ0IKX9w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:20 2025 by rpki-client