Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File:                     TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier:          oB9KM7nZthyZqGkVIroZoi2WB9QVA7GCUommZHEO/kc=
Subject key identifier:   F2:CA:10:9F:12:B7:D0:DD:01:9D:82:D9:30:BB:80:C6:07:4A:D3:EB
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       0198D4E06237510387A52971130E57B98128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number:          1672
Signing time:             Sat 23 Aug 2025 03:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:11 +0000
Files and hashes:         1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=)
                          2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=)
                          3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=)
                          4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=)
                          5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=)
                          6: BtYymVysztiqPvFalU2qw0BxdUI.roa (hash: fnna/fe+7wvOm7SoakeRGOUh4jW8Mh/j9bKBLG7yuY8=)
                          7: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=)
                          8: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=)
                          9: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=)
                          10: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=)
                          11: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: Txj2zXWHTAmGcH7slWxdfm04iD4WcBG3v249xJ7ETs4=)
                          12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=)
                          13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=)
                          14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=)
                          15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=)
                          16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=)
                          17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=)
                          18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=)
                          19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=)
                          20: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=)
                          21: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=)
                          22: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=)
                          23: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:62:37:51:03:87:a5:29:71:13:0e:57:b9:81:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Aug 23 03:02:11 2025 GMT
            Not After : Aug 24 03:02:11 2025 GMT
        Subject: CN=f2ca109f12b7d0dd019d82d930bb80c6074ad3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:50:fe:39:9b:67:ad:4b:54:9b:b9:b6:55:
                    7d:75:7f:ac:7c:4a:8f:f3:0c:3d:98:e2:82:37:bf:
                    9a:20:8a:d9:85:2f:5c:e2:21:f8:ef:b0:0c:e7:2b:
                    60:93:d5:53:4c:10:a0:34:92:2f:d7:59:98:fa:2d:
                    be:cd:2a:6c:2f:be:7f:5e:6c:c0:5e:4c:eb:a6:3c:
                    8d:1e:26:08:e3:d9:30:ae:9b:36:01:42:c3:96:de:
                    87:af:50:55:c2:50:61:6f:53:2d:c4:c1:d8:a6:2b:
                    80:6e:7b:ac:35:c6:27:23:4f:55:b9:72:23:1d:04:
                    f4:1f:0b:48:a4:ff:e1:1d:c3:e9:49:da:33:e5:bf:
                    00:c6:73:20:dd:81:dc:e6:af:24:df:60:08:55:1e:
                    47:53:72:87:fa:b3:d4:2b:c6:b3:77:dd:f3:2c:a3:
                    9d:84:22:0b:83:0e:be:17:f7:17:a8:d8:d2:37:22:
                    a4:8d:8b:ec:f2:5a:a2:0c:39:ac:e0:1d:5e:10:3c:
                    fe:27:c4:81:5f:d2:09:f7:2c:a2:bc:1e:74:27:ab:
                    02:34:49:ee:e6:d2:50:2f:17:df:ec:08:01:33:1d:
                    66:b2:37:14:21:34:5b:24:05:06:0f:2f:ec:34:72:
                    3f:87:9b:f6:20:3e:a9:52:5c:85:40:45:b4:4a:1d:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:10:9F:12:B7:D0:DD:01:9D:82:D9:30:BB:80:C6:07:4A:D3:EB
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:1b:c3:05:99:2a:14:85:82:6e:f3:9f:99:ae:de:13:04:
         75:02:2c:3b:86:c6:18:f6:88:24:7b:9b:cc:b9:1b:bf:0b:70:
         49:0f:ee:ca:05:19:c7:20:97:c9:db:ff:dd:73:80:5a:46:a2:
         33:bc:a2:b8:ca:f3:e0:cd:35:f7:27:53:89:a8:4b:25:6c:7b:
         f8:3f:cd:92:e8:c1:9e:4d:3a:c5:fd:92:44:0c:3b:d9:7c:18:
         72:e3:5e:4f:04:0c:02:7d:4d:fc:16:c3:f0:48:51:31:8c:25:
         b0:be:d3:64:fb:32:e2:5b:34:1b:28:42:32:9c:13:ff:e3:7b:
         00:06:5f:ea:d0:26:ae:27:24:67:f4:ab:a9:1d:9c:1c:58:2b:
         ec:1d:73:48:44:df:8d:63:d5:ff:7f:3f:00:d4:5f:87:86:cb:
         aa:3e:86:12:1f:a1:a8:13:17:d7:89:d3:69:e4:aa:ef:5e:d1:
         35:fc:e2:db:0e:bb:29:45:25:e8:4d:72:89:fc:3c:8a:73:8e:
         11:6d:c9:93:c3:eb:6d:f0:ed:ea:7d:0f:ea:af:6e:3a:5f:10:
         be:1d:48:cc:7b:9d:3c:1c:9b:2a:f8:95:b2:30:c5:49:bb:b9:
         a6:e6:e2:63:6e:43:be:3e:9b:0e:09:52:07:e4:4e:82:a7:60:
         df:3a:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:18 2025 by rpki-client