Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File:                     taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier:          jN92AhqLbq/zNcZ0A9NIJ2taLH7CxfQY2yUCsqUxL6s=
Subject key identifier:   50:60:13:CC:2B:80:74:09:C4:2E:6D:5F:1E:D2:92:E6:78:45:86:0A
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer:       /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial:       0198D705951F4CE9885EE20D8E091A85409B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number:          04E9
Signing time:             Sat 23 Aug 2025 13:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:03 +0000
Files and hashes:         1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
                          2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: DlN2JusjedEZcq9Djh8rXQTX4IZUz0NA1YJaSE02+Tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:95:1f:4c:e9:88:5e:e2:0d:8e:09:1a:85:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
        Validity
            Not Before: Aug 23 13:02:03 2025 GMT
            Not After : Aug 24 13:02:03 2025 GMT
        Subject: CN=506013cc2b807409c42e6d5f1ed292e67845860a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:9a:c6:1f:f1:0e:74:40:37:c2:43:72:a1:
                    11:56:42:68:06:2b:7d:cb:fc:34:c7:20:b2:70:f3:
                    0e:63:84:a8:2b:cb:f3:04:e0:c0:46:c2:ed:e8:8d:
                    92:93:e0:92:30:71:76:f6:99:03:df:f1:d8:9b:6b:
                    a1:37:a9:8f:7a:92:43:24:2a:90:06:15:ef:0d:2e:
                    b3:5a:87:cc:23:a0:96:c0:45:de:d6:d1:12:4e:88:
                    17:6c:51:98:df:34:62:da:ea:d7:7f:37:6f:84:bb:
                    c8:a4:23:05:42:13:69:0e:43:dc:09:8e:39:96:95:
                    78:af:1a:f5:5b:ee:09:75:5f:5c:9a:b1:5d:af:3a:
                    e7:bf:7d:db:f4:b0:37:1c:7e:e6:76:e2:67:f8:f1:
                    48:04:7f:33:ef:3a:67:7a:63:19:d3:ca:83:e0:aa:
                    bd:b9:57:03:49:30:20:8a:09:2d:de:89:e7:e2:cc:
                    68:08:d6:d2:10:ee:60:96:36:71:d4:42:1c:85:60:
                    12:ae:a1:67:f7:cc:aa:04:eb:62:61:2f:e5:a1:ea:
                    28:71:fe:2d:a5:2c:10:17:0f:94:07:ff:50:78:f5:
                    c9:f2:f4:43:66:7e:b4:d3:ba:e2:78:ab:33:08:eb:
                    04:6e:b6:15:2a:36:6f:fe:bc:58:9e:4b:5d:b0:0a:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:60:13:CC:2B:80:74:09:C4:2E:6D:5F:1E:D2:92:E6:78:45:86:0A
            X509v3 Authority Key Identifier:
                keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:1f:ce:e9:d1:97:5b:e8:4b:5c:d4:20:49:8c:66:cb:13:
         59:ff:24:53:41:8e:73:fd:26:e3:15:51:51:a3:29:b9:1b:ab:
         0d:6b:df:e8:75:4b:c8:c4:9a:9b:ac:9a:e3:3a:fc:46:90:5d:
         62:a6:24:10:57:49:40:dd:e9:ad:e7:66:5b:99:f6:b5:36:ff:
         c9:25:01:34:6c:c4:4c:2a:f7:ba:e9:ed:9d:24:be:17:85:d3:
         15:be:78:c7:36:fd:8d:91:e6:61:c7:60:98:d2:4b:46:88:db:
         51:df:cc:2a:65:d6:74:dc:e8:f5:de:87:0c:4e:b2:10:d1:3d:
         85:7c:01:8d:be:fe:d1:15:00:ca:fe:b6:44:64:03:98:b0:2b:
         ed:c9:67:1c:c3:d1:ab:e9:b8:bd:22:5a:a0:15:ca:10:0a:59:
         87:71:e7:f8:61:14:7e:c9:a1:d7:65:86:3d:ce:b5:8e:b6:fa:
         18:38:6f:22:5f:40:05:5b:22:23:09:82:52:b9:a6:f4:9e:9f:
         c6:1c:f7:9c:4e:24:28:df:d4:09:96:e8:78:98:06:37:6e:6f:
         c0:6b:e7:ea:61:5d:8f:96:7f:fd:83:ab:91:b0:87:d6:f5:ef:
         f3:5f:28:a5:35:2c:38:a7:53:fc:b2:24:19:93:7c:bb:bd:f1:
         7f:5f:82:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:03 2025 by rpki-client