Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File:                     ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier:          NlY4Gs8pqLMEMKag33WiSkXlgRpuoyBl/8eF5TV51FY=
Subject key identifier:   A3:35:20:37:78:70:0D:1A:42:D9:45:58:76:65:78:E7:27:4C:D4:21
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer:       /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial:       019777F7DC43178A90F70A5018D3236A8816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number:          0574
Signing time:             Mon 16 Jun 2025 09:00:21 +0000
Manifest this update:     Mon 16 Jun 2025 09:00:21 +0000
Manifest next update:     Tue 17 Jun 2025 09:00:21 +0000
Files and hashes:         1: AlkZJ5y5SgK5NicIMpQu5G4y-kk.roa (hash: 6pDsa6TgLwnLkjOOWWhXhHFWrv8bvlopmayBUNqycZY=)
                          2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: 7VNk71l22Zkvk4eixY/j66A4MaZhupOj6emhn7mUMys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:f7:dc:43:17:8a:90:f7:0a:50:18:d3:23:6a:88:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
        Validity
            Not Before: Jun 16 09:00:21 2025 GMT
            Not After : Jun 17 09:00:21 2025 GMT
        Subject: CN=a335203778700d1a42d94558766578e7274cd421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:1a:d2:e8:46:88:84:aa:60:f1:23:5e:48:
                    81:79:78:af:29:cc:78:22:d3:8a:82:5b:e3:b3:3b:
                    98:6b:a9:0b:c5:d4:a7:31:86:64:15:c1:17:15:71:
                    86:7b:21:ad:81:a7:35:65:45:75:b3:31:8c:4a:25:
                    84:8f:25:ee:cf:c5:31:46:77:01:a1:3f:4c:49:a2:
                    b4:4c:32:ab:d5:90:83:87:51:a1:b5:03:5f:27:1a:
                    28:65:d2:da:8f:de:b5:53:99:a0:45:96:82:81:89:
                    37:c0:01:03:c6:18:14:ff:88:2e:d1:36:d8:bd:ed:
                    5f:25:4d:44:26:8c:61:28:d4:68:36:c5:02:4c:52:
                    98:da:ca:f7:ac:8e:93:2b:6b:61:c1:14:8f:0c:d0:
                    78:5a:a6:5e:1b:89:c2:af:c9:b9:6f:ff:8f:1f:2f:
                    78:45:cc:54:52:9c:32:5c:11:a7:f5:9f:6d:06:5a:
                    29:68:30:72:52:82:1d:85:c6:fc:7e:4c:29:87:9f:
                    e6:2a:d2:01:19:ed:66:da:43:69:b6:7e:81:74:c6:
                    7c:f9:3b:4a:dd:27:c7:2e:be:76:a9:79:ce:98:01:
                    1e:15:84:94:e7:cd:c3:2c:19:08:84:25:e7:bc:71:
                    85:a2:d6:65:be:09:4b:ef:05:ef:0c:55:c6:37:61:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:35:20:37:78:70:0D:1A:42:D9:45:58:76:65:78:E7:27:4C:D4:21
            X509v3 Authority Key Identifier:
                keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:22:5c:15:34:86:4d:3a:5c:e6:8f:cc:ad:e3:9b:ef:85:
         57:e1:c5:1f:46:a1:2b:e5:b5:ea:7e:e7:93:e8:b4:51:2b:67:
         6b:ae:27:5d:f8:60:95:67:96:d7:65:96:ee:6c:ef:31:10:e5:
         5d:34:83:2b:38:98:71:f4:bd:a1:c2:9a:4b:f0:94:dd:48:51:
         da:45:9b:b7:6e:ad:6a:b3:ea:9a:45:e2:07:73:b2:3f:e4:95:
         97:44:53:c0:9c:3a:f1:60:01:9f:69:48:db:ea:2e:a1:e8:30:
         c2:9c:98:90:fa:f0:00:8f:e9:33:f9:fa:8d:b5:ac:df:be:fb:
         cb:e9:68:8d:13:d7:73:03:30:b7:32:c6:61:a8:42:01:03:fd:
         8d:d0:f3:1e:6b:7a:a0:82:81:8b:de:04:20:51:3c:75:75:09:
         7f:c3:4e:e7:de:fb:90:98:cb:de:a5:99:02:d7:bc:55:9f:bd:
         7d:77:d5:6a:12:f9:cd:32:6a:9d:57:68:21:0f:dc:42:5c:67:
         ae:6b:b5:7d:8a:b7:a0:6d:0c:bd:ac:6a:86:15:2d:38:d9:a1:
         4d:e8:2a:18:e7:f4:5e:76:c7:b2:ae:ff:32:f2:34:99:28:be:
         89:17:54:a4:a1:e2:34:fb:51:b9:27:66:69:37:92:0e:e2:77:
         09:26:63:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd399xDF4qQ9wpQGNMjaogWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDQzMzg2NTk4NWE3YmI1ZTI2OWMzNzk0YWU2ZjE2NGNm
YzJkZGIwHhcNMjUwNjE2MDkwMDIxWhcNMjUwNjE3MDkwMDIxWjAzMTEwLwYDVQQD
EyhhMzM1MjAzNzc4NzAwZDFhNDJkOTQ1NTg3NjY1NzhlNzI3NGNkNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hka0uhGiISqYPEjXkiBeXivKcx4
ItOKglvjszuYa6kLxdSnMYZkFcEXFXGGeyGtgac1ZUV1szGMSiWEjyXuz8UxRncB
oT9MSaK0TDKr1ZCDh1GhtQNfJxooZdLaj961U5mgRZaCgYk3wAEDxhgU/4gu0TbY
ve1fJU1EJoxhKNRoNsUCTFKY2sr3rI6TK2thwRSPDNB4WqZeG4nCr8m5b/+PHy94
RcxUUpwyXBGn9Z9tBlopaDByUoIdhcb8fkwph5/mKtIBGe1m2kNptn6BdMZ8+TtK
3SfHLr52qXnOmAEeFYSU583DLBkIhCXnvHGFotZlvglL7wXvDFXGN2HP/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM1IDd4cA0aQtlFWHZleOcnTNQhMB8GA1UdIwQY
MBaAFLpEM4ZZhae7XiacN5SubxZM/C3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYjMyMTktYzY0Yi00NzBlLTgzNDEt
M2ExMjAyNzQwMGU2LzEvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hYjMyMTktYzY0Yi00NzBlLTgzNDEtM2ExMjAyNzQwMGU2
LzEvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe4iXBU0
hk06XOaPzK3jm++FV+HFH0ahK+W16n7nk+i0UStna64nXfhglWeW12WW7mzvMRDl
XTSDKziYcfS9ocKaS/CU3UhR2kWbt26tarPqmkXiB3OyP+SVl0RTwJw68WABn2lI
2+ouoegwwpyYkPrwAI/pM/n6jbWs3777y+lojRPXcwMwtzLGYahCAQP9jdDzHmt6
oIKBi94EIFE8dXUJf8NO5977kJjL3qWZAte8VZ+9fXfVahL5zTJqnVdoIQ/cQlxn
rmu1fYq3oG0MvaxqhhUtONmhTegqGOf0XnbHsq7/MvI0mSi+iRdUpKHiNPtRuSdm
aTeSDuJ3CSZjag==
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:03:32 2025 by rpki-client