Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File:                     uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier:          nP+1S5WkeTYe2q7bVbiIezRGHSPFPdxHNUJWiSDYVvc=
Subject key identifier:   45:4E:6B:48:E4:19:BA:8D:F6:E0:2C:F8:D9:53:20:15:C8:1C:8E:A5
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer:       /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial:       019873E34295C58C8B1735171CDA6F19ED6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number:          15A6
Signing time:             Mon 04 Aug 2025 07:02:10 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:10 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:10 +0000
Files and hashes:         1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: x+g171KvcvZvVLc3dAkqHWD+uXllG/yQ2grdV00z9lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:42:95:c5:8c:8b:17:35:17:1c:da:6f:19:ed:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
        Validity
            Not Before: Aug  4 07:02:10 2025 GMT
            Not After : Aug  5 07:02:10 2025 GMT
        Subject: CN=454e6b48e419ba8df6e02cf8d9532015c81c8ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:27:29:ec:d4:f9:df:00:dd:cd:85:a2:ae:
                    e3:67:fd:31:bc:37:7a:48:a9:4e:93:0b:10:36:12:
                    26:2f:1a:53:55:8c:13:67:b3:d1:74:58:89:05:ac:
                    1c:8b:3d:7e:b0:30:e7:86:4d:6d:a7:ba:98:d9:67:
                    2b:36:63:72:f6:bc:c0:62:c8:a3:7e:66:b5:74:62:
                    39:18:aa:0d:26:db:7a:6d:dc:26:0c:f1:d8:73:2a:
                    ca:3f:53:45:29:68:94:21:45:b0:cd:ec:ca:28:29:
                    19:c8:2f:84:98:4c:39:ff:67:57:33:61:d2:85:7e:
                    fa:f0:b3:eb:a3:e3:5c:f9:d2:86:ce:e2:ae:5d:08:
                    77:9f:7a:48:93:1b:de:73:6f:85:ea:35:0b:6e:d4:
                    e3:da:a3:ca:ba:77:21:f3:90:8f:78:fd:2c:a1:8e:
                    9a:a8:08:c1:be:52:9d:4a:4b:d2:48:0b:1a:e2:80:
                    0a:56:ae:69:f0:78:7a:a6:75:3d:1f:17:50:2c:fb:
                    68:f7:03:ad:3c:08:4b:aa:56:b6:07:62:b4:e1:7c:
                    e5:57:22:5a:bc:ca:10:c4:b7:d7:35:1c:3c:66:4e:
                    eb:07:0a:ee:c1:86:22:0f:79:bb:87:c5:8b:43:8e:
                    61:66:f1:e2:7a:f7:0c:04:cc:f3:70:15:96:4f:4c:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4E:6B:48:E4:19:BA:8D:F6:E0:2C:F8:D9:53:20:15:C8:1C:8E:A5
            X509v3 Authority Key Identifier:
                keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:5d:6f:8c:c4:ec:7f:89:24:77:fd:ee:4a:b7:23:11:fb:62:
         1c:17:05:d6:70:50:9c:d0:99:b9:e3:6a:99:e1:52:a8:11:47:
         b8:30:c5:62:9f:d8:4f:d7:d1:60:65:9d:60:d4:b5:9c:a2:61:
         2e:b9:bf:37:b8:e6:88:c1:4c:43:af:51:82:12:2d:77:fc:b5:
         c7:a5:be:d7:09:d5:2a:6d:92:76:d0:ad:17:90:45:f1:49:ff:
         b0:2b:80:56:fd:97:0e:c7:e3:46:78:cd:21:c5:a9:dc:19:c4:
         c2:57:1b:1b:6e:c6:f4:67:31:f6:c2:d2:eb:0d:a7:01:b3:c7:
         56:44:bf:8e:6c:e9:e4:7b:7e:98:08:c5:6c:57:a5:b1:07:cf:
         67:c8:7a:9e:d5:e3:20:ed:6a:53:8d:47:67:62:ae:8c:88:86:
         4f:a6:e3:67:24:ef:a1:54:e6:a6:c5:e2:6e:22:ab:4f:bb:cd:
         cd:f6:f3:1c:21:f0:65:52:61:09:09:51:aa:d2:f6:b0:76:13:
         09:b7:4e:80:ee:c8:9d:69:ab:98:71:ac:63:4c:82:fd:b9:bf:
         43:21:f7:27:ef:a1:2f:b4:ac:da:0d:d9:72:78:9b:b8:eb:a4:
         9d:ee:6f:8d:5f:f7:fb:71:58:a2:86:17:b4:01:f2:0f:69:1d:
         ce:1c:63:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz40KVxYyLFzUXHNpvGe1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOGQ2Nzk4YmRkMGIyYjg4MDVkNDNiMzQ1NWY3NjczOWI5
NDZmMWQwHhcNMjUwODA0MDcwMjEwWhcNMjUwODA1MDcwMjEwWjAzMTEwLwYDVQQD
Eyg0NTRlNmI0OGU0MTliYThkZjZlMDJjZjhkOTUzMjAxNWM4MWM4ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2MnKezU+d8A3c2Foq7jZ/0xvDd6
SKlOkwsQNhImLxpTVYwTZ7PRdFiJBawciz1+sDDnhk1tp7qY2WcrNmNy9rzAYsij
fma1dGI5GKoNJtt6bdwmDPHYcyrKP1NFKWiUIUWwzezKKCkZyC+EmEw5/2dXM2HS
hX768LPro+Nc+dKGzuKuXQh3n3pIkxvec2+F6jULbtTj2qPKunch85CPeP0soY6a
qAjBvlKdSkvSSAsa4oAKVq5p8Hh6pnU9HxdQLPto9wOtPAhLqla2B2K04XzlVyJa
vMoQxLfXNRw8Zk7rBwruwYYiD3m7h8WLQ45hZvHievcMBMzzcBWWT0x8twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVOa0jkGbqN9uAs+NlTIBXIHI6lMB8GA1UdIwQY
MBaAFLqNZ5i90LK4gF1Ds0VfdnOblG8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy82OGI1N2ItZDE4ZC00Nzg1LTk3YjAt
ZWM1NmMwYjA4MWFlLzEvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy82OGI1N2ItZDE4ZC00Nzg1LTk3YjAtZWM1NmMwYjA4MWFl
LzEvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxl1vjMTs
f4kkd/3uSrcjEftiHBcF1nBQnNCZueNqmeFSqBFHuDDFYp/YT9fRYGWdYNS1nKJh
Lrm/N7jmiMFMQ69RghItd/y1x6W+1wnVKm2SdtCtF5BF8Un/sCuAVv2XDsfjRnjN
IcWp3BnEwlcbG27G9Gcx9sLS6w2nAbPHVkS/jmzp5Ht+mAjFbFelsQfPZ8h6ntXj
IO1qU41HZ2KujIiGT6bjZyTvoVTmpsXibiKrT7vNzfbzHCHwZVJhCQlRqtL2sHYT
CbdOgO7InWmrmHGsY0yC/bm/QyH3J++hL7Ss2g3ZcnibuOukne5vjV/3+3FYooYX
tAHyD2kdzhxjrA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:25 2025 by rpki-client