Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          MFZXMyGKNcjtuQtn3BXBtK09+E/lianOXXpMvorA7Gg=
Subject key identifier:   BB:60:FB:A1:5B:33:F2:9D:04:33:75:FA:02:A0:8F:7C:17:D9:87:2B
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       0197B7B36F7E1809FA93D029FF772BE39526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          14F8
Signing time:             Sat 28 Jun 2025 18:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:19 +0000
Files and hashes:         1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=)
                          2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: BE2NTaUUiZzqyrt4NhHmNt04XrEBfNniYibAzYrCNt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:6f:7e:18:09:fa:93:d0:29:ff:77:2b:e3:95:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: Jun 28 18:01:19 2025 GMT
            Not After : Jun 29 18:01:19 2025 GMT
        Subject: CN=bb60fba15b33f29d043375fa02a08f7c17d9872b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:3a:bc:06:0f:78:e6:db:fa:f5:46:d9:bf:
                    7d:35:e0:44:de:5f:c0:15:c4:9f:56:05:10:9f:33:
                    b7:90:60:df:cd:18:f2:00:63:59:c2:7e:d5:c7:68:
                    42:00:03:0e:5e:10:82:09:51:b3:e5:88:f5:44:2d:
                    41:92:00:53:9d:77:4e:30:af:3f:79:45:03:e6:a2:
                    0b:b5:28:4c:66:47:bc:f9:0f:5f:f7:76:c4:f2:c4:
                    63:96:0d:78:b9:6e:81:22:db:b3:42:34:36:bd:76:
                    b0:82:80:0d:1e:2d:20:f3:83:99:23:19:38:5e:f2:
                    36:23:ff:22:e2:54:c8:20:a1:69:a9:16:46:9f:48:
                    17:27:39:a8:71:c1:43:6f:e8:01:09:e4:c3:9a:c4:
                    37:13:33:6b:5c:05:9c:56:b2:a2:3e:d8:28:2a:a1:
                    4d:a4:e3:af:00:31:b4:1d:43:6e:03:a2:b2:52:15:
                    94:c5:e9:af:67:0f:9d:5f:37:75:8e:d7:0b:2d:db:
                    a1:ee:f6:f8:b1:88:a5:cf:38:53:d8:92:f7:62:cc:
                    8f:c0:d6:34:9f:bc:80:33:99:6d:ba:fe:16:17:d8:
                    29:30:af:92:fc:83:c9:99:80:d2:b0:3f:14:1c:10:
                    6c:43:f1:45:d8:d7:cf:8d:7f:7d:86:8a:98:1d:c0:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:FB:A1:5B:33:F2:9D:04:33:75:FA:02:A0:8F:7C:17:D9:87:2B
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:3c:58:47:86:98:d2:01:98:30:01:8c:cc:ad:d2:14:c0:
         25:ee:2f:7d:8e:f5:4c:a2:47:8f:ad:35:72:bc:3c:20:54:c9:
         01:26:a1:13:ef:46:d3:f2:07:20:f4:d1:13:b7:fe:1c:3b:d1:
         e9:7a:44:fb:4d:d8:4b:d2:24:2f:23:66:7e:23:c1:c3:a5:73:
         f1:4f:0c:66:71:1b:bb:d4:3e:b3:dd:c7:a2:86:f2:f8:86:6c:
         7d:51:33:3e:2e:a3:59:7d:1d:bd:ee:a0:b6:1d:3b:f8:57:77:
         26:e3:af:d8:c6:5e:17:16:7f:b4:cf:3c:c9:f0:97:f9:cc:ce:
         e7:49:d3:06:d9:7a:02:62:4e:8d:8a:fb:0e:54:20:b9:5c:7a:
         78:39:2b:38:14:76:44:de:8e:6d:45:9c:e5:a8:6c:92:9f:e5:
         6b:be:0f:5b:da:cb:0d:ee:8f:51:6a:c4:b2:5d:25:a6:bc:2b:
         bf:1e:8d:a8:36:1d:9e:8f:31:50:fa:76:69:46:21:83:9f:93:
         89:85:4d:48:f2:9c:54:ad:be:ec:73:bc:ec:d1:66:08:cd:ef:
         92:84:33:59:4b:57:4e:34:0f:8e:26:e9:35:d7:3c:54:a3:71:
         9c:24:27:63:31:93:27:a6:af:0f:87:dc:cb:c9:ae:f7:61:8f:
         69:2e:eb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s29+GAn6k9Ap/3cr45UmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj
ZWZjYTkwHhcNMjUwNjI4MTgwMTE5WhcNMjUwNjI5MTgwMTE5WjAzMTEwLwYDVQQD
EyhiYjYwZmJhMTViMzNmMjlkMDQzMzc1ZmEwMmEwOGY3YzE3ZDk4NzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspc6vAYPeObb+vVG2b99NeBE3l/A
FcSfVgUQnzO3kGDfzRjyAGNZwn7Vx2hCAAMOXhCCCVGz5Yj1RC1BkgBTnXdOMK8/
eUUD5qILtShMZke8+Q9f93bE8sRjlg14uW6BItuzQjQ2vXawgoANHi0g84OZIxk4
XvI2I/8i4lTIIKFpqRZGn0gXJzmoccFDb+gBCeTDmsQ3EzNrXAWcVrKiPtgoKqFN
pOOvADG0HUNuA6KyUhWUxemvZw+dXzd1jtcLLduh7vb4sYilzzhT2JL3YsyPwNY0
n7yAM5ltuv4WF9gpMK+S/IPJmYDSsD8UHBBsQ/FF2NfPjX99hoqYHcDTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtg+6FbM/KdBDN1+gKgj3wX2YcrMB8GA1UdIwQY
MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt
MWEyNmI5ZDhmZWRlLzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl
LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9M8WEeG
mNIBmDABjMyt0hTAJe4vfY71TKJHj601crw8IFTJASahE+9G0/IHIPTRE7f+HDvR
6XpE+03YS9IkLyNmfiPBw6Vz8U8MZnEbu9Q+s93Hooby+IZsfVEzPi6jWX0dve6g
th07+Fd3JuOv2MZeFxZ/tM88yfCX+czO50nTBtl6AmJOjYr7DlQguVx6eDkrOBR2
RN6ObUWc5ahskp/la74PW9rLDe6PUWrEsl0lprwrvx6NqDYdno8xUPp2aUYhg5+T
iYVNSPKcVK2+7HO87NFmCM3vkoQzWUtXTjQPjibpNdc8VKNxnCQnYzGTJ6avD4fc
y8mu92GPaS7rPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:31 2025 by rpki-client