Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          rurswFJbBdb9gVgDLfbfBTgPsl2vHtd/8iymxd5xNAQ=
Subject key identifier:   D2:CB:AF:94:D6:C5:CB:BD:5F:3F:D4:FD:7A:F0:20:FF:35:F8:ED:F8
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       01977A8B52955FE551856DF16932DF49DD76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          0624
Signing time:             Mon 16 Jun 2025 21:00:40 +0000
Manifest this update:     Mon 16 Jun 2025 21:00:40 +0000
Manifest next update:     Tue 17 Jun 2025 21:00:40 +0000
Files and hashes:         1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: efv6JTAhtor+Hy8LNj6LWzPkrPNlt3T1iyNTCrLTEBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:8b:52:95:5f:e5:51:85:6d:f1:69:32:df:49:dd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: Jun 16 21:00:40 2025 GMT
            Not After : Jun 17 21:00:40 2025 GMT
        Subject: CN=d2cbaf94d6c5cbbd5f3fd4fd7af020ff35f8edf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:85:b5:8d:08:bd:e9:49:51:53:53:14:18:
                    b0:0e:63:58:1c:00:b9:bb:5a:f9:78:c7:f0:dc:64:
                    94:15:fb:f8:5b:eb:1c:a4:93:05:00:7d:e9:f2:45:
                    96:e8:77:de:e5:85:c1:98:12:1f:f2:98:f2:38:39:
                    03:3f:98:fc:53:f0:dc:c2:29:a5:d1:20:5f:1a:16:
                    35:19:93:dc:02:da:0c:b6:f9:ef:6c:41:29:0a:7b:
                    a4:44:c9:34:ff:10:f1:34:b9:3b:b3:e2:b8:98:bc:
                    72:d4:c8:d4:c0:4a:0c:fa:e4:c3:8f:98:c0:0c:f8:
                    3b:03:22:1a:7f:2a:a7:50:86:d3:94:e1:35:7d:2e:
                    84:93:55:96:ac:f3:99:f2:36:f7:31:28:d5:59:58:
                    40:91:c4:88:a3:f6:7a:8f:49:27:6e:12:64:dd:d2:
                    4f:28:cd:d0:4d:f1:6a:e1:3a:97:ad:aa:41:90:0c:
                    a9:e3:38:29:7f:60:13:4c:3a:99:71:a5:af:62:7d:
                    55:40:95:1e:2e:14:7c:31:46:70:be:26:ca:6a:bc:
                    8a:6a:03:23:90:11:b5:64:7d:a5:1c:5d:e4:5a:bc:
                    78:29:87:a5:20:5d:e4:23:24:17:ee:ab:15:3c:ea:
                    aa:93:0d:d6:58:da:53:61:ec:1e:3a:64:43:ee:1e:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CB:AF:94:D6:C5:CB:BD:5F:3F:D4:FD:7A:F0:20:FF:35:F8:ED:F8
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:43:25:67:4d:1e:71:5f:c3:41:f9:7d:52:f4:5c:1b:6f:
         b9:44:15:5d:7d:f5:a3:9a:45:5f:e0:1c:75:b2:9c:bc:63:2a:
         f0:36:1b:66:10:a8:6e:23:81:a3:28:30:12:78:5f:1f:56:21:
         72:6c:19:de:a6:e8:79:eb:b8:c8:4d:54:1f:28:6b:af:cc:42:
         64:de:d9:55:9a:5a:01:61:fe:b4:d2:e9:9a:01:61:71:c9:c2:
         98:0f:be:a6:55:dc:a3:69:0c:06:f9:b1:ef:2f:25:47:b2:68:
         d2:86:8c:8b:bd:5b:eb:50:b7:1c:05:56:54:d4:b6:75:ef:d9:
         17:a4:a8:8d:fe:d0:dd:ee:9f:68:3a:0f:8a:71:55:98:80:1e:
         d6:58:75:5c:fe:14:4b:fd:3d:18:c5:77:e9:89:d9:d8:7c:4b:
         8f:53:06:6e:8e:35:4a:e6:1f:ce:2b:40:e4:f5:94:7d:bd:66:
         8d:87:e2:95:5f:b6:a3:7c:18:20:23:37:ba:25:80:1a:8b:a3:
         26:01:6d:05:8c:72:a3:0b:f8:31:fd:c6:31:11:c4:fb:81:2f:
         a3:2e:ef:fe:93:ba:87:ba:74:97:3b:76:86:89:3b:a2:dc:e4:
         ff:b0:0a:f7:b6:f5:d0:d7:d2:2a:84:38:11:a3:f4:f7:9c:ba:
         ac:5d:85:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6i1KVX+VRhW3xaTLfSd12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm
ZmRmYjYwHhcNMjUwNjE2MjEwMDQwWhcNMjUwNjE3MjEwMDQwWjAzMTEwLwYDVQQD
EyhkMmNiYWY5NGQ2YzVjYmJkNWYzZmQ0ZmQ3YWYwMjBmZjM1ZjhlZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW+FtY0IvelJUVNTFBiwDmNYHAC5
u1r5eMfw3GSUFfv4W+scpJMFAH3p8kWW6Hfe5YXBmBIf8pjyODkDP5j8U/Dcwiml
0SBfGhY1GZPcAtoMtvnvbEEpCnukRMk0/xDxNLk7s+K4mLxy1MjUwEoM+uTDj5jA
DPg7AyIafyqnUIbTlOE1fS6Ek1WWrPOZ8jb3MSjVWVhAkcSIo/Z6j0knbhJk3dJP
KM3QTfFq4TqXrapBkAyp4zgpf2ATTDqZcaWvYn1VQJUeLhR8MUZwvibKaryKagMj
kBG1ZH2lHF3kWrx4KYelIF3kIyQX7qsVPOqqkw3WWNpTYeweOmRD7h51+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLLr5TWxcu9Xz/U/XrwIP81+O34MB8GA1UdIwQY
MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt
NTUzY2I3NzY5Y2E5LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5
LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzlDJWdN
HnFfw0H5fVL0XBtvuUQVXX31o5pFX+AcdbKcvGMq8DYbZhCobiOBoygwEnhfH1Yh
cmwZ3qboeeu4yE1UHyhrr8xCZN7ZVZpaAWH+tNLpmgFhccnCmA++plXco2kMBvmx
7y8lR7Jo0oaMi71b61C3HAVWVNS2de/ZF6Sojf7Q3e6faDoPinFVmIAe1lh1XP4U
S/09GMV36YnZ2HxLj1MGbo41SuYfzitA5PWUfb1mjYfilV+2o3wYICM3uiWAGouj
JgFtBYxyowv4Mf3GMRHE+4Evoy7v/pO6h7p0lzt2hok7otzk/7AK97b10NfSKoQ4
EaP095y6rF2F0Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:42:38 2025 by rpki-client