Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File:                     TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier:          /Zg0lABFrKNUOm2G3ql/kwE9h66YD3pSu2Y6HB9IJWc=
Subject key identifier:   2D:A2:AA:54:5C:7C:A4:BB:BC:F6:EF:E9:DD:9A:FB:33:D8:86:91:8E
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer:       /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial:       0198D660814F0FBFAEB3C564CC7711810DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number:          08FF
Signing time:             Sat 23 Aug 2025 10:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:45 +0000
Files and hashes:         1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: yJRxWOI7wN1Kcg986HzFtBBoyAf5W9sknEeB5xDBhWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:81:4f:0f:bf:ae:b3:c5:64:cc:77:11:81:0d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
        Validity
            Not Before: Aug 23 10:01:45 2025 GMT
            Not After : Aug 24 10:01:45 2025 GMT
        Subject: CN=2da2aa545c7ca4bbbcf6efe9dd9afb33d886918e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:98:08:9c:c3:cd:ab:8c:68:87:83:44:a2:
                    ec:f4:a6:1e:ab:f7:02:88:2b:26:8b:1c:f5:61:ea:
                    e7:9b:71:ae:8d:bc:84:65:9d:24:ea:19:ba:30:59:
                    28:bc:47:bf:a9:08:09:90:49:8c:e1:a8:ac:65:32:
                    63:b2:1d:77:94:8f:d5:37:5e:23:5a:b1:4f:c0:a0:
                    73:07:40:b2:77:4c:ef:f8:d3:34:cb:24:ce:08:2a:
                    da:1b:bb:fa:1a:64:1e:7f:3c:08:22:a8:f8:32:0f:
                    61:cd:e7:0c:06:9f:df:9a:6c:ea:ac:50:f0:c5:45:
                    22:8b:50:1d:e2:68:f4:49:30:53:70:1e:86:e2:0f:
                    f6:6a:23:fd:43:da:53:94:ac:01:af:56:49:bf:fc:
                    c0:d9:f7:69:3d:87:9f:8d:29:0f:e0:e3:2a:bb:b5:
                    ed:96:93:fb:34:82:27:54:d3:30:d8:df:81:83:0b:
                    81:ec:d3:02:88:b7:b9:ad:92:5d:54:82:64:46:83:
                    eb:38:c9:43:78:c7:91:25:92:52:87:3c:d4:08:27:
                    0d:2b:f8:2f:df:7b:61:ab:69:a8:85:2b:1f:45:31:
                    95:2c:f4:8f:d6:b4:24:58:50:ef:71:a6:0e:12:ec:
                    34:8e:f2:f1:0d:5e:dc:66:60:13:58:ce:f7:b8:6e:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:AA:54:5C:7C:A4:BB:BC:F6:EF:E9:DD:9A:FB:33:D8:86:91:8E
            X509v3 Authority Key Identifier:
                keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:8d:4e:1b:8c:41:e3:0e:c6:ad:08:c9:5b:52:06:e1:29:
         05:53:7b:f1:84:c3:3f:c2:c4:25:5a:44:02:72:17:13:d6:bd:
         b4:4d:8f:05:8c:18:a9:8f:f4:a9:f2:b2:b7:f9:c5:99:31:36:
         c5:45:86:d3:14:f7:7f:d6:e4:a2:57:1c:1b:51:b8:c5:03:a0:
         ec:ed:e7:70:d7:5a:b3:cf:cc:8e:5e:cf:fd:b0:39:62:aa:99:
         75:e2:22:b5:53:ed:af:cd:7f:d5:b5:60:9d:e4:e5:8d:43:30:
         17:f9:dd:ca:30:39:58:98:a4:1f:d6:70:19:84:6e:f3:75:4e:
         c0:05:57:3d:28:dd:01:12:e4:dc:6f:a1:85:a0:1d:15:00:0f:
         05:bb:cc:1f:fa:f4:d5:1f:3f:eb:67:67:83:0e:a2:35:e2:74:
         53:5c:ab:39:60:8c:6a:8f:8b:27:71:84:1a:ab:fc:d3:55:2b:
         63:22:7b:43:5e:8d:11:3b:d7:67:67:ce:02:ea:f8:33:19:99:
         71:16:23:38:9b:d6:a8:3f:76:f0:46:ad:31:fb:bb:4e:69:f3:
         36:53:ff:cb:53:1c:36:e9:79:7e:2c:43:2d:9d:d6:96:fd:7b:
         81:f1:92:a5:18:15:3e:72:6f:a6:2b:0a:f2:b5:9e:a1:2f:e5:
         8b:3a:5f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYIFPD7+us8VkzHcRgQ2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNmYwZTQ0YTdmNmYwYzg4Y2NlOWM0NmRiYThlYzcyZWM2
MTc1MmIwHhcNMjUwODIzMTAwMTQ1WhcNMjUwODI0MTAwMTQ1WjAzMTEwLwYDVQQD
EygyZGEyYWE1NDVjN2NhNGJiYmNmNmVmZTlkZDlhZmIzM2Q4ODY5MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMCYCJzDzauMaIeDRKLs9KYeq/cC
iCsmixz1Yernm3GujbyEZZ0k6hm6MFkovEe/qQgJkEmM4aisZTJjsh13lI/VN14j
WrFPwKBzB0Cyd0zv+NM0yyTOCCraG7v6GmQefzwIIqj4Mg9hzecMBp/fmmzqrFDw
xUUii1Ad4mj0STBTcB6G4g/2aiP9Q9pTlKwBr1ZJv/zA2fdpPYefjSkP4OMqu7Xt
lpP7NIInVNMw2N+BgwuB7NMCiLe5rZJdVIJkRoPrOMlDeMeRJZJShzzUCCcNK/gv
33thq2mohSsfRTGVLPSP1rQkWFDvcaYOEuw0jvLxDV7cZmATWM73uG657wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2iqlRcfKS7vPbv6d2a+zPYhpGOMB8GA1UdIwQY
MBaAFE1vDkSn9vDIjM6cRtuo7HLsYXUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xMzNiYjUtMTFmYi00Zjk0LThmMjkt
YWNhM2I4MjgzZmUzLzEvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xMzNiYjUtMTFmYi00Zjk0LThmMjktYWNhM2I4MjgzZmUz
LzEvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9+NThuM
QeMOxq0IyVtSBuEpBVN78YTDP8LEJVpEAnIXE9a9tE2PBYwYqY/0qfKyt/nFmTE2
xUWG0xT3f9bkolccG1G4xQOg7O3ncNdas8/Mjl7P/bA5YqqZdeIitVPtr81/1bVg
neTljUMwF/ndyjA5WJikH9ZwGYRu83VOwAVXPSjdARLk3G+hhaAdFQAPBbvMH/r0
1R8/62dngw6iNeJ0U1yrOWCMao+LJ3GEGqv801UrYyJ7Q16NETvXZ2fOAur4MxmZ
cRYjOJvWqD928EatMfu7TmnzNlP/y1McNul5fixDLZ3Wlv17gfGSpRgVPnJvpisK
8rWeoS/lizpf/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:00 2025 by rpki-client