Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File:                     UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier:          Q8GrxnqVhP48X9PhbQKAVIea6uplxMZzWl3mTYPfZ78=
Subject key identifier:   27:A0:7B:F3:C9:62:24:22:FE:4F:20:AB:9E:2F:CC:96:9C:C5:9E:A6
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer:       /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial:       0197692995365230410BE698A77EEA8FE83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 12:00:22 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:22 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:22 +0000
Files and hashes:         1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
                          2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: /Oja4pvjCfI6f222jRAFL+ieYJS+iXVhEXfVXY4zOQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:95:36:52:30:41:0b:e6:98:a7:7e:ea:8f:e8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
        Validity
            Not Before: Jun 13 12:00:22 2025 GMT
            Not After : Jun 14 12:00:22 2025 GMT
        Subject: CN=27a07bf3c9622422fe4f20ab9e2fcc969cc59ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:87:35:f3:ed:31:49:b9:ff:9f:f7:31:3e:
                    52:2b:44:33:fa:76:66:95:d2:9f:94:b0:b1:76:bd:
                    8f:c6:37:17:5d:2d:fd:e7:40:ba:76:71:01:56:20:
                    af:c4:0d:9b:fd:31:eb:28:8b:22:9a:fa:3a:77:b3:
                    6f:1c:4f:48:ba:8b:95:71:15:2f:08:d1:c3:24:f7:
                    50:22:bc:48:8c:ae:b0:a6:fc:78:1c:41:d1:a1:5a:
                    e6:86:c0:5a:30:a3:4d:c1:20:2f:e5:b9:ea:ca:0c:
                    ef:e5:22:08:88:ff:77:ce:96:b6:d9:d1:11:b7:60:
                    47:a3:fe:39:3e:3d:9b:a5:ec:5c:af:e2:d5:4a:d2:
                    0d:7c:2e:e6:f8:3c:91:03:00:3a:72:59:ac:6b:28:
                    b6:a0:56:91:70:2d:ad:9d:99:da:4a:18:57:1e:1e:
                    26:09:5b:e2:58:52:21:67:54:19:cf:c1:2a:03:1c:
                    b4:36:08:b2:a2:65:e5:b7:19:6c:6e:c2:ea:9d:2a:
                    3d:d7:3c:08:df:35:11:8b:33:d8:8f:63:d9:37:de:
                    db:ee:ab:af:bc:d2:9f:ce:cf:21:b0:02:f6:81:01:
                    00:7b:05:7a:c1:e9:59:c3:ff:fd:fe:db:60:a9:5b:
                    6b:6c:a3:0e:5b:f2:47:a4:a6:3f:5d:49:27:88:37:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:7B:F3:C9:62:24:22:FE:4F:20:AB:9E:2F:CC:96:9C:C5:9E:A6
            X509v3 Authority Key Identifier:
                keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:aa:f7:49:cf:b8:64:86:9e:0e:eb:e6:4a:e2:12:fe:a6:69:
         2c:d6:bd:b6:b8:a5:d6:c1:df:1d:a8:fa:8e:c4:eb:15:e2:c9:
         a2:92:76:eb:78:db:25:77:ac:aa:18:b0:02:b0:91:6f:cd:a0:
         89:83:a9:8a:7e:76:b1:cd:63:79:b0:f3:3d:3e:b6:bd:f7:b5:
         f4:bc:94:33:c5:db:59:79:fa:7c:ca:c4:ac:5b:41:de:a6:cc:
         70:a0:7c:72:a3:68:3b:1b:5c:9f:3c:14:3f:77:54:ab:69:09:
         62:98:43:7e:f6:13:6a:8f:ca:98:76:69:02:47:77:23:a2:e6:
         34:67:c9:62:af:d5:06:79:03:54:52:1e:65:a3:5e:c7:73:e2:
         4a:bf:e3:8d:5b:7f:34:e9:78:c7:17:2b:27:51:43:69:25:6d:
         9c:36:d6:d1:c1:dc:57:ec:86:e6:f8:f0:34:6b:6a:ee:e5:59:
         bc:5c:33:b7:ac:56:ff:8b:cb:8b:cf:b9:f5:03:7d:8f:47:a8:
         87:59:93:a6:8d:b1:9e:b9:8c:d6:53:49:ca:a5:6e:d7:fd:09:
         62:ca:38:28:8b:3e:0e:fc:e1:5f:80:e0:b7:24:c1:1f:6e:61:
         10:b2:fa:6e:b9:60:9a:95:92:27:30:68:00:a5:bf:b0:67:64:
         56:c7:99:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKZU2UjBBC+aYp37qj+g+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjY0YzNmMDk4MzFjY2Q4ODk3MTJmNGZhYjVjNWIxYmUw
Y2FkNTYwHhcNMjUwNjEzMTIwMDIyWhcNMjUwNjE0MTIwMDIyWjAzMTEwLwYDVQQD
EygyN2EwN2JmM2M5NjIyNDIyZmU0ZjIwYWI5ZTJmY2M5NjljYzU5ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNWHNfPtMUm5/5/3MT5SK0Qz+nZm
ldKflLCxdr2PxjcXXS3950C6dnEBViCvxA2b/THrKIsimvo6d7NvHE9IuouVcRUv
CNHDJPdQIrxIjK6wpvx4HEHRoVrmhsBaMKNNwSAv5bnqygzv5SIIiP93zpa22dER
t2BHo/45Pj2bpexcr+LVStINfC7m+DyRAwA6clmsayi2oFaRcC2tnZnaShhXHh4m
CVviWFIhZ1QZz8EqAxy0NgiyomXltxlsbsLqnSo91zwI3zURizPYj2PZN97b7quv
vNKfzs8hsAL2gQEAewV6welZw//9/ttgqVtrbKMOW/JHpKY/XUkniDfbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCege/PJYiQi/k8gq54vzJacxZ6mMB8GA1UdIwQY
MBaAFFAmTD8JgxzNiJcS9Pq1xbG+DK1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTIt
NzE0Zjk2MjZkMDIxLzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTItNzE0Zjk2MjZkMDIx
LzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxar3Sc+4
ZIaeDuvmSuIS/qZpLNa9tril1sHfHaj6jsTrFeLJopJ263jbJXesqhiwArCRb82g
iYOpin52sc1jebDzPT62vfe19LyUM8XbWXn6fMrErFtB3qbMcKB8cqNoOxtcnzwU
P3dUq2kJYphDfvYTao/KmHZpAkd3I6LmNGfJYq/VBnkDVFIeZaNex3PiSr/jjVt/
NOl4xxcrJ1FDaSVtnDbW0cHcV+yG5vjwNGtq7uVZvFwzt6xW/4vLi8+59QN9j0eo
h1mTpo2xnrmM1lNJyqVu1/0JYso4KIs+DvzhX4DgtyTBH25hELL6brlgmpWSJzBo
AKW/sGdkVseZjg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:21 2025 by rpki-client