Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File:                     UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier:          sZFNOGZEMu5SfCmLhH5DSxIxUnVEpZq+8qC1Djj9RvQ=
Subject key identifier:   A6:D7:45:77:6C:31:C6:0B:76:1C:71:3D:95:01:63:2D:0C:54:DC:FB
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer:       /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial:       01987D1C8A7707B308E04D3AB7981EF38A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number:          0E9A
Signing time:             Wed 06 Aug 2025 02:01:19 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:19 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:19 +0000
Files and hashes:         1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: 7VABHome6netYkCkrBaZ6VGI9nBVGiaoylqyQOgvoag=)
                          2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:8a:77:07:b3:08:e0:4d:3a:b7:98:1e:f3:8a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
        Validity
            Not Before: Aug  6 02:01:19 2025 GMT
            Not After : Aug  7 02:01:19 2025 GMT
        Subject: CN=a6d745776c31c60b761c713d9501632d0c54dcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:b4:36:57:69:f1:16:b8:50:7e:f7:93:fe:
                    d8:27:60:6e:6c:17:8b:35:b8:fb:13:bd:21:af:17:
                    40:41:a6:1b:54:cb:7e:d4:b9:75:16:ca:a9:df:b1:
                    46:8c:fd:de:1f:de:f2:6f:95:94:8a:c0:c4:dd:bd:
                    c0:25:f4:c0:81:2c:e4:c0:6a:5f:e5:5c:ae:31:ff:
                    98:d7:09:ca:cf:ee:fe:53:b0:fc:34:eb:ea:1d:29:
                    a5:ee:53:e9:fa:d3:95:a5:31:13:77:cd:86:6a:ce:
                    8e:51:6c:67:01:60:c9:a4:55:a0:dd:c7:d8:4f:81:
                    f1:bc:f0:9b:30:73:59:21:cf:8a:b0:ac:37:5e:c7:
                    8f:07:1e:2a:94:d2:bc:ff:ce:68:48:d7:b8:61:e9:
                    f8:99:9f:48:5a:ed:45:c0:c3:7c:fa:fa:3d:d3:70:
                    59:de:14:2c:8c:16:e0:8d:ea:37:e9:ee:d5:8e:c4:
                    d1:ea:7b:8d:27:a0:25:c9:1a:02:0c:ad:64:9e:83:
                    30:fd:73:40:31:24:2c:d0:66:93:b1:1a:2e:f6:b8:
                    9a:87:8e:73:31:75:42:59:b5:0a:0d:f1:c7:08:3d:
                    41:d1:5f:01:95:3c:86:c0:31:a0:10:98:ec:b0:b5:
                    83:02:e3:9d:c9:7a:d8:0e:5e:63:7e:43:7d:6d:ed:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:45:77:6C:31:C6:0B:76:1C:71:3D:95:01:63:2D:0C:54:DC:FB
            X509v3 Authority Key Identifier:
                keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:03:a3:e7:a7:7f:80:62:d7:16:60:e1:7e:a0:33:dc:45:
         01:52:40:17:c4:5f:40:68:8a:86:d3:1d:5e:77:c2:1e:d0:9f:
         e5:25:ee:3d:fd:a4:67:7b:01:e3:92:ef:8e:1b:1a:27:3f:18:
         69:c4:da:6a:c2:b4:1a:35:a5:22:0c:f3:19:98:5c:89:50:1d:
         c0:d1:7f:39:ae:62:29:d2:91:46:72:ec:c0:c3:e0:70:ba:a2:
         f6:84:f3:bb:bf:a1:a9:7b:68:0d:10:a7:97:82:6e:88:95:37:
         aa:a9:9a:fc:82:87:0d:79:52:65:02:95:0d:f5:f9:8d:98:0e:
         cc:6b:ca:3b:18:2e:8c:61:1f:29:d1:52:79:76:a4:4c:9f:0d:
         73:29:82:67:ba:dd:82:22:9b:6c:69:40:97:a9:ea:00:9b:51:
         59:31:ed:b5:d9:13:bd:f3:30:c4:7d:60:e7:b9:cf:3c:74:ac:
         ed:a4:25:29:62:b6:c2:85:8e:93:df:71:dc:b9:84:d1:39:58:
         06:62:39:45:10:9e:a4:16:38:e5:8f:9d:3f:7d:c9:a4:48:b0:
         ca:19:05:a7:83:8e:62:35:f3:81:3e:6c:92:76:5b:48:d0:b1:
         a6:e0:03:f2:7a:a4:3e:0a:38:a3:04:ff:aa:5f:09:6d:5b:0c:
         48:93:1a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HIp3B7MI4E06t5ge84oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1
MjA3NTMwHhcNMjUwODA2MDIwMTE5WhcNMjUwODA3MDIwMTE5WjAzMTEwLwYDVQQD
EyhhNmQ3NDU3NzZjMzFjNjBiNzYxYzcxM2Q5NTAxNjMyZDBjNTRkY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EK0Nldp8Ra4UH73k/7YJ2BubBeL
Nbj7E70hrxdAQaYbVMt+1Ll1Fsqp37FGjP3eH97yb5WUisDE3b3AJfTAgSzkwGpf
5VyuMf+Y1wnKz+7+U7D8NOvqHSml7lPp+tOVpTETd82Gas6OUWxnAWDJpFWg3cfY
T4HxvPCbMHNZIc+KsKw3XsePBx4qlNK8/85oSNe4Yen4mZ9IWu1FwMN8+vo903BZ
3hQsjBbgjeo36e7VjsTR6nuNJ6AlyRoCDK1knoMw/XNAMSQs0GaTsRou9riah45z
MXVCWbUKDfHHCD1B0V8BlTyGwDGgEJjssLWDAuOdyXrYDl5jfkN9be3xrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbXRXdsMcYLdhxxPZUBYy0MVNz7MB8GA1UdIwQY
MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt
MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz
LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeIDo+en
f4Bi1xZg4X6gM9xFAVJAF8RfQGiKhtMdXnfCHtCf5SXuPf2kZ3sB45LvjhsaJz8Y
acTaasK0GjWlIgzzGZhciVAdwNF/Oa5iKdKRRnLswMPgcLqi9oTzu7+hqXtoDRCn
l4JuiJU3qqma/IKHDXlSZQKVDfX5jZgOzGvKOxgujGEfKdFSeXakTJ8NcymCZ7rd
giKbbGlAl6nqAJtRWTHttdkTvfMwxH1g57nPPHSs7aQlKWK2woWOk99x3LmE0TlY
BmI5RRCepBY45Y+dP33JpEiwyhkFp4OOYjXzgT5sknZbSNCxpuAD8nqkPgo4owT/
ql8JbVsMSJMa8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:59 2025 by rpki-client