Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File:                     Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier:          jtyDByEHHx6kb+LQS8yZIyIX0MxZAyTwLFFOkk+iNFs=
Subject key identifier:   1B:2C:63:18:DD:08:3A:50:DD:0C:A6:9E:9E:9F:2C:C5:3D:07:EB:B0
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer:       /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial:       019874BE4EBDE63EF5CD994B07EFF6FD2369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number:          0D56
Signing time:             Mon 04 Aug 2025 11:01:25 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:25 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:25 +0000
Files and hashes:         1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
                          2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: YyaeJEqbYLwr7GMT1uI7a4+LmzDxgwdnPHM2IvnIUpQ=)
                          3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
                          4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:4e:bd:e6:3e:f5:cd:99:4b:07:ef:f6:fd:23:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
        Validity
            Not Before: Aug  4 11:01:25 2025 GMT
            Not After : Aug  5 11:01:25 2025 GMT
        Subject: CN=1b2c6318dd083a50dd0ca69e9e9f2cc53d07ebb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:9e:1f:b3:e8:e1:00:85:fa:c5:1d:d7:58:
                    10:44:15:1f:72:fb:ed:eb:70:9c:48:bc:c1:1d:85:
                    d6:8e:80:d9:d7:03:ac:08:93:b7:3b:28:94:08:24:
                    e4:19:cc:f7:e5:2d:23:50:60:d0:3c:36:b3:8b:62:
                    cb:9b:cc:4d:de:47:d5:80:dc:94:a2:bc:af:dc:9b:
                    bc:3c:8b:83:aa:91:a1:3d:c0:f8:a6:f5:c8:bb:69:
                    56:33:0f:88:22:35:3b:5a:30:14:fa:46:01:4f:92:
                    44:da:fc:e1:e9:ba:2a:32:8b:89:8c:d5:3a:e4:ed:
                    27:a4:a1:0c:4b:51:4e:20:da:e8:b5:af:3a:07:8a:
                    f8:04:6f:d5:20:d1:fc:c3:23:41:cf:13:d1:07:6e:
                    c6:49:3e:d9:95:d8:b6:5c:8a:54:6c:d1:8d:03:fa:
                    8a:77:7b:27:42:38:05:9f:75:73:64:e6:99:c6:8f:
                    db:75:70:58:fa:cd:9f:32:fe:0c:73:cf:af:5e:21:
                    7c:58:97:58:fa:e6:66:e1:bd:ee:a3:49:0b:c2:0e:
                    cc:18:bc:6d:6e:1f:18:bf:0c:85:98:80:3f:a8:35:
                    f3:f4:6d:0e:85:21:af:79:62:fb:0e:f1:6e:5d:9f:
                    fe:cf:c8:00:36:12:e7:34:28:c6:b0:1f:d2:77:21:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:63:18:DD:08:3A:50:DD:0C:A6:9E:9E:9F:2C:C5:3D:07:EB:B0
            X509v3 Authority Key Identifier:
                keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:07:37:4c:b6:92:87:93:5c:40:73:61:4d:a4:f0:31:28:52:
         ae:d8:a1:84:fe:ba:23:1a:b5:ca:e5:15:0f:0f:de:a5:d8:0a:
         8c:51:13:11:75:17:f6:b5:fb:34:01:5a:2f:f0:5a:2c:cd:c8:
         43:04:bc:5f:31:7b:50:c2:d3:76:4c:2a:c6:bb:87:90:ae:e7:
         1c:e5:4b:5a:f5:a2:ae:a6:c1:79:dd:0e:0b:33:b2:50:07:af:
         f0:8b:06:c4:07:57:39:d1:dc:71:f0:11:1a:1c:e6:13:d2:fb:
         a3:53:38:3b:7c:0a:4c:0a:39:83:f4:05:2e:b6:57:e7:21:55:
         07:c3:9b:ba:f0:34:00:d2:79:c5:65:99:e0:2d:b5:ad:e4:f1:
         80:86:41:fc:4f:e2:a9:c4:5b:e4:7f:ff:9d:19:36:11:9c:75:
         81:c5:dd:d6:67:89:58:26:7b:8f:66:8f:8f:59:0c:d1:14:20:
         ac:90:34:d3:23:4f:a5:c1:82:96:34:14:24:34:96:f1:30:ab:
         72:92:08:e8:46:9e:f3:9b:d3:6a:9c:71:b9:f8:f7:4d:3d:2c:
         e6:72:4e:56:28:40:0e:e8:dc:34:a5:4c:12:76:cf:24:6d:98:
         8a:75:86:0d:b1:ff:bd:55:00:a8:d0:7c:70:7b:97:4c:d5:8b:
         f3:2a:71:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vk695j71zZlLB+/2/SNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjUwODA0MTEwMTI1WhcNMjUwODA1MTEwMTI1WjAzMTEwLwYDVQQD
EygxYjJjNjMxOGRkMDgzYTUwZGQwY2E2OWU5ZTlmMmNjNTNkMDdlYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslaeH7Po4QCF+sUd11gQRBUfcvvt
63CcSLzBHYXWjoDZ1wOsCJO3OyiUCCTkGcz35S0jUGDQPDazi2LLm8xN3kfVgNyU
oryv3Ju8PIuDqpGhPcD4pvXIu2lWMw+IIjU7WjAU+kYBT5JE2vzh6boqMouJjNU6
5O0npKEMS1FOINrota86B4r4BG/VINH8wyNBzxPRB27GST7Zldi2XIpUbNGNA/qK
d3snQjgFn3VzZOaZxo/bdXBY+s2fMv4Mc8+vXiF8WJdY+uZm4b3uo0kLwg7MGLxt
bh8YvwyFmIA/qDXz9G0OhSGveWL7DvFuXZ/+z8gANhLnNCjGsB/SdyE7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBssYxjdCDpQ3Qymnp6fLMU9B+uwMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwc3TLaS
h5NcQHNhTaTwMShSrtihhP66Ixq1yuUVDw/epdgKjFETEXUX9rX7NAFaL/BaLM3I
QwS8XzF7UMLTdkwqxruHkK7nHOVLWvWirqbBed0OCzOyUAev8IsGxAdXOdHccfAR
GhzmE9L7o1M4O3wKTAo5g/QFLrZX5yFVB8ObuvA0ANJ5xWWZ4C21reTxgIZB/E/i
qcRb5H//nRk2EZx1gcXd1meJWCZ7j2aPj1kM0RQgrJA00yNPpcGCljQUJDSW8TCr
cpII6Eae85vTapxxufj3TT0s5nJOVihADujcNKVMEnbPJG2YinWGDbH/vVUAqNB8
cHuXTNWL8ypxAg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:30 2025 by rpki-client