Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File:                     uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier:          8JiAUYlTXdCwPS5GCouL8NuyuwZcIHhGo+0fdfZLTSc=
Subject key identifier:   09:29:02:C5:3A:39:33:CE:A2:EB:25:5B:3D:7D:73:D7:EE:4E:C8:A1
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer:       /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial:       0198752BF98458D8705BF95BAC833CB509CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number:          0D1E
Signing time:             Mon 04 Aug 2025 13:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:12 +0000
Files and hashes:         1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
                          2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: 01Gxd+8B+QvQSWbtAZsf7O4S9fsQ3paeaNjMLi70SrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:f9:84:58:d8:70:5b:f9:5b:ac:83:3c:b5:09:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
        Validity
            Not Before: Aug  4 13:01:12 2025 GMT
            Not After : Aug  5 13:01:12 2025 GMT
        Subject: CN=092902c53a3933cea2eb255b3d7d73d7ee4ec8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:92:a1:b4:60:92:87:cd:80:82:37:00:3e:
                    5f:ab:ec:b9:a1:70:b7:22:2d:34:01:36:c0:54:68:
                    4a:fb:55:64:6b:56:4a:49:c1:ee:49:91:08:c1:83:
                    02:94:c7:0c:48:48:f6:d0:33:c6:0d:5a:b9:b7:a9:
                    90:87:16:3b:36:0f:e0:9c:96:d6:2d:b1:3f:01:cc:
                    34:32:7c:57:ad:76:45:c6:0b:ac:42:e8:6a:5d:d0:
                    8f:cd:fb:d6:e3:41:85:1f:78:9f:f0:f9:f8:fa:b7:
                    67:ba:86:17:c4:da:70:9e:75:33:7f:04:38:a1:af:
                    e2:c5:25:98:b5:73:86:71:db:34:83:8a:5d:22:e1:
                    23:1a:83:35:74:3a:4c:9f:1e:d0:ce:6d:0b:b7:05:
                    9e:31:df:6b:f6:5e:e3:f5:44:2b:fe:80:64:59:5c:
                    62:73:62:d4:57:38:96:bd:b0:66:52:e7:48:cd:f9:
                    fa:5b:54:1c:c5:09:66:30:94:6a:d5:d4:de:f1:75:
                    6a:94:f0:2e:f4:76:28:e9:24:bb:64:84:81:6a:53:
                    11:e1:92:7f:3d:bb:7c:27:85:a6:06:74:2a:16:be:
                    5f:44:b2:a2:fa:8c:87:3f:5a:fd:f4:2e:d4:ac:d2:
                    03:07:34:aa:a3:62:21:b2:15:94:6d:19:2e:e2:9a:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:29:02:C5:3A:39:33:CE:A2:EB:25:5B:3D:7D:73:D7:EE:4E:C8:A1
            X509v3 Authority Key Identifier:
                keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:89:95:1f:34:04:90:97:dc:77:cd:d2:7c:45:41:c2:7d:32:
         47:0b:27:96:ad:a6:84:fe:d2:8f:3e:95:f7:9b:d4:17:fc:96:
         ce:0c:d4:f8:18:f7:7b:2d:ed:21:c7:64:44:a9:e3:57:11:49:
         36:d2:02:78:d3:3b:62:6b:cb:a3:3c:02:db:a3:9a:fa:52:22:
         b9:e0:0a:0d:a9:cb:58:b1:cb:7f:ef:91:17:ea:dc:5f:13:50:
         d7:fd:6b:45:71:2c:32:77:e5:02:e5:49:49:30:0d:4a:fc:f0:
         c2:6b:61:7e:ac:4b:10:8f:fd:d9:7b:05:53:9c:cb:40:b1:54:
         37:95:0a:2f:fc:29:13:97:af:b6:54:d0:26:1c:bb:dd:c9:4d:
         28:f4:8a:8c:03:0b:0e:9c:3e:12:91:35:83:f4:c5:1b:16:8b:
         ff:d9:f1:25:f0:ec:66:de:17:6a:d5:31:9c:50:0a:64:d1:84:
         93:bd:9d:85:b1:91:b1:38:5f:4a:08:ea:c9:87:f3:37:1d:ef:
         a4:45:b0:1e:a6:6e:cc:5d:bf:08:dc:2c:a1:d1:ef:8c:26:9a:
         1a:f9:9e:a2:1f:b4:42:0a:c5:87:b3:77:c5:6c:8c:01:7a:5a:
         3b:ef:e6:af:40:1e:ce:b5:d5:de:8a:4f:46:82:a6:d4:ae:e3:
         d1:2f:08:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K/mEWNhwW/lbrIM8tQnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NjllNzNkZTgzNmY0MWZmMjcyNDM0MGI5M2VjMTc3NjNk
NjllNzIwHhcNMjUwODA0MTMwMTEyWhcNMjUwODA1MTMwMTEyWjAzMTEwLwYDVQQD
EygwOTI5MDJjNTNhMzkzM2NlYTJlYjI1NWIzZDdkNzNkN2VlNGVjOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwiSobRgkofNgII3AD5fq+y5oXC3
Ii00ATbAVGhK+1Vka1ZKScHuSZEIwYMClMcMSEj20DPGDVq5t6mQhxY7Ng/gnJbW
LbE/Acw0MnxXrXZFxgusQuhqXdCPzfvW40GFH3if8Pn4+rdnuoYXxNpwnnUzfwQ4
oa/ixSWYtXOGcds0g4pdIuEjGoM1dDpMnx7Qzm0LtwWeMd9r9l7j9UQr/oBkWVxi
c2LUVziWvbBmUudIzfn6W1QcxQlmMJRq1dTe8XVqlPAu9HYo6SS7ZISBalMR4ZJ/
Pbt8J4WmBnQqFr5fRLKi+oyHP1r99C7UrNIDBzSqo2IhshWUbRku4pp3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkpAsU6OTPOouslWz19c9fuTsihMB8GA1UdIwQY
MBaAFLlp5z3oNvQf8nJDQLk+wXdj1p5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAt
MDc0ZDI3ZGQ5MzBlLzEvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAtMDc0ZDI3ZGQ5MzBl
LzEvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACImVHzQE
kJfcd83SfEVBwn0yRwsnlq2mhP7Sjz6V95vUF/yWzgzU+Bj3ey3tIcdkRKnjVxFJ
NtICeNM7YmvLozwC26Oa+lIiueAKDanLWLHLf++RF+rcXxNQ1/1rRXEsMnflAuVJ
STANSvzwwmthfqxLEI/92XsFU5zLQLFUN5UKL/wpE5evtlTQJhy73clNKPSKjAML
Dpw+EpE1g/TFGxaL/9nxJfDsZt4XatUxnFAKZNGEk72dhbGRsThfSgjqyYfzNx3v
pEWwHqZuzF2/CNwsodHvjCaaGvmeoh+0QgrFh7N3xWyMAXpaO+/mr0AezrXV3opP
RoKm1K7j0S8IYA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:35 2025 by rpki-client