Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          3j3pKDdwO0KKS/wrS3PpN7DYODs8sHojwDTJy5ZXsWw=
Subject key identifier:   C6:75:6B:E3:BD:BA:85:E7:88:76:05:2D:AE:78:49:D1:E0:0B:38:31
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       0198D7E184BF07E13AFE5132B79914B80C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          40
Signing time:             Sat 23 Aug 2025 17:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:17 +0000
Files and hashes:         1: 4Vk4JEUOO7Z8F7RLvQIBiIwUlEI.roa (hash: rcW0o0NPhb5z9zMvMiuZsijCh+e9Jb8o7gbV3WSd0Yo=)
                          2: 5eOpZ_VbK_AsCtNFBwr6V5q25mA.roa (hash: /d2c751AjrNowXlWGm7ktfdmB8uq9hd//jNoOLsL47A=)
                          3: 9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa (hash: Oph3EY1I7qKANoza6w+PZiQdqIJHyMeGx03HDQGfB8E=)
                          4: J-BM_Ca54Ppe1TH_JAPmfmThPF8.roa (hash: 2hiZg6+oGhdSn69vdZDUaG+7SsG9WkxCcOP68C1coYw=)
                          5: JQHcV8OOuQy1QSZyp2cuqOKhFPY.roa (hash: aBTrfIT3ktKIIu+swwWMWw3Bg8+yjsrokXyn1wHp47Y=)
                          6: KS0evwzT0fKZKmO6x2f1TLJa10Q.roa (hash: QH1PZvfD6pJeC9AVUb3+wuoacHUFSdtLTDCGMZ5OfC8=)
                          7: MBeLFpwB8QjHf_N_IxAcOZ8IyuM.roa (hash: P6+QO6fgMYgkt8NQWFPGEIfzkGs7o3tSOrpCD+C2W5w=)
                          8: RKoG6yGzYUsbwzkvak0IDVmP8aI.roa (hash: NYzAPW/dpm/sRwQxxpLinnVE8uK7AfRUJKejz4Su0j8=)
                          9: Xh6fOuIqrHup_0uREFffoWmnBPM.roa (hash: VRFG28rlxAV4XGduEJBQ/BW/nmxOEOmyQM8JZVbblfI=)
                          10: ZKrSVjIyp3c4vmsRta99lxJ1nWk.roa (hash: V86J8geSpEHBLLo/A/uTbJtr9YVbr3Cw49uNukpc0Ds=)
                          11: _p1bqdZFVV-yCNRgEU5D9s9zduA.roa (hash: ceBcN8Y3K7sjyx/xdHHBUfHwwn6/AgpxvZfQOED4K7s=)
                          12: fmg5GUDKj3L9SuYf_M-1A94BHqQ.roa (hash: 1LrtxsZqEizRlM+kerihrTQg03P7e3dIyw1N/Vnu3/Y=)
                          13: jiDJSvi9EqJddMvuoh8wcY-xXLI.roa (hash: Az6PcHeJNE/JDkLE74QtKZcLIoSRO07Ltp+s6SDMm7g=)
                          14: lIsU5M82Q_Q6z8rDWhFmVz7T4Ec.roa (hash: HB9E/o72V0zVeoUgJVG284a4pw9VdNVj0soXlhohpjM=)
                          15: nnRaPTdWT0I5mCAIv3uUnoBDHog.roa (hash: WHO0LN3x988yfZy6sulNPi/HXNoZ+/jemZUpVJlOqso=)
                          16: rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa (hash: v+pd4dmoz8jOnZlQ7TRnQpQrIxQ0T2Ba231XJowrkiA=)
                          17: srVqEm74KpTVMl3qC8QeYm8ZOA4.roa (hash: eQXf7qYx6EafQLGPgfHgbR98ETU7M7ws9rJT2ka8KBc=)
                          18: tM10Pkad9yq5Hsv-cfqn34_LFRc.roa (hash: c2YwqEFmRVt/GP93CPEiCCw94qEe+FsD0C6QrcTdxKg=)
                          19: tuig2McYqtXX_-PGUedAeeH6Gc8.roa (hash: mNb7ugtDqM+5WQB4XF8NRapcLPX1pQXy2Ip8g/Fb0zE=)
                          20: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: xo3FYerd2JLaRsu0ebUsCAItmdYS2uYTnfcf8HccvjE=)
                          21: wjqbq6cegrBZnivnBbcWQDIwUA8.roa (hash: 7rSsH79YeiFL4Us+BpiHOVr7sYUtCYWM0OTojI6TbUU=)
                          22: xcqi1G8tytJ2yUHhU5QYf0Y_Ovk.roa (hash: OuLcHzFv8gCjZ50gByVbvBsUIYLEedqYV0FASZ8Y/ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:84:bf:07:e1:3a:fe:51:32:b7:99:14:b8:0c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Aug 23 17:02:17 2025 GMT
            Not After : Aug 24 17:02:17 2025 GMT
        Subject: CN=c6756be3bdba85e78876052dae7849d1e00b3831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8d:ff:bf:c6:a5:db:f1:39:eb:49:68:9c:22:
                    14:76:56:23:e0:91:2d:da:5e:65:05:7e:f2:73:a2:
                    96:8f:a3:ba:81:f5:d5:5c:29:3b:63:a5:55:19:3d:
                    d9:f6:5d:a2:37:34:27:b4:5f:76:d9:a0:88:35:3d:
                    ff:eb:70:44:0d:87:48:52:da:3f:70:7c:21:a9:1f:
                    2f:55:38:d6:e9:29:3c:80:ba:a1:06:ed:67:33:18:
                    54:93:46:f5:f3:4a:95:e4:af:0c:e9:e9:0e:9b:e5:
                    7a:16:a9:7c:44:6c:a7:ae:71:4b:f1:73:09:ef:c3:
                    79:44:a4:5a:c3:e6:31:ea:a6:ee:e6:4e:dc:9d:47:
                    48:52:81:c7:3f:85:b0:86:03:77:84:b2:88:2b:3c:
                    52:a7:c0:ec:10:b3:6e:23:09:d0:82:7b:66:71:44:
                    48:0c:c6:c0:23:81:17:4d:4d:89:e9:45:c0:81:ad:
                    8f:9c:13:ef:14:4d:db:16:74:0f:ab:b9:19:3a:56:
                    fb:88:ad:9b:33:4c:c7:dd:27:90:3c:76:40:d3:48:
                    fc:fe:2e:4d:3b:1d:65:cb:04:a9:6b:af:5b:4d:61:
                    eb:88:87:76:01:3a:57:6c:5b:af:1d:f5:fd:f8:a8:
                    20:d1:f7:98:89:23:67:2e:3b:63:18:66:86:93:de:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:6B:E3:BD:BA:85:E7:88:76:05:2D:AE:78:49:D1:E0:0B:38:31
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:2c:c0:41:93:f4:d9:75:e7:d6:62:a8:7a:22:aa:66:d4:
         ed:d7:b3:e6:3c:01:3b:ac:e6:24:2c:8d:05:fb:de:1a:80:84:
         30:d0:c1:de:cc:4a:b9:4d:58:89:46:75:57:16:e2:68:8a:54:
         18:94:d9:c6:0b:71:80:d7:7d:de:eb:ca:e5:f0:77:8b:6c:d7:
         75:27:43:52:79:7f:e6:f6:3e:8d:35:e5:69:36:13:1e:04:23:
         1b:49:6d:6c:04:3d:b6:8d:3a:d9:92:db:7b:45:f6:e4:37:a3:
         ab:b3:41:ed:f7:55:3a:5f:ce:a4:5e:18:84:02:b6:05:9c:61:
         7b:5a:3f:d1:00:63:df:79:fc:90:e2:7d:c1:3b:56:3e:15:51:
         c4:b5:c8:1d:c5:1a:73:c9:78:a1:25:cd:a3:af:17:91:a4:0f:
         e0:b6:66:8b:b9:fe:c4:8f:80:5b:83:82:82:36:d0:59:c6:ab:
         31:0f:c4:e9:32:30:79:c6:98:c4:c7:55:92:d4:03:a7:53:d7:
         b1:f6:47:89:0e:b5:fe:8c:a1:bf:24:f1:be:70:19:76:34:11:
         f0:16:66:63:62:04:f7:86:c7:cd:a7:03:d0:4b:22:42:11:09:
         eb:fa:27:54:e6:8d:8e:38:d3:04:20:b5:b3:b1:4d:9d:d6:40:
         83:4f:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:19:25 2025 by rpki-client