Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          84yE9fnXx4Y52vVG05xk9+oUiPh/shgEZxhW/IOtMeY=
Subject key identifier:   9D:AA:B7:DE:4E:D1:BE:D7:B3:97:AC:90:0C:E4:B0:0C:14:68:8B:6B
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       0197B8213998B7C8AFC07AE2D3A63C092D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 20:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:14 +0000
Files and hashes:         1: HhltdqvEvMp1haFhX3fIv16Ni_Q.roa (hash: NacxfWEhGCqjQzcJPOYmDDogo7Rv0RM9x208Jen3m0s=)
                          2: sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa (hash: kx5EWM4e9UqILncO7G7gUfdu6rl4RFiOFynpDnpX02c=)
                          3: sxbnQp-HZOAWEFzphM2K1lCVnVg.roa (hash: kEKMwrabqx6d8HV9sni4rJcCg8Olec1gaFW1f6LNEvE=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: OFXGNMg8sad3OKLBP3XCU0d8NqNoxldVt13pE6+N4A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:39:98:b7:c8:af:c0:7a:e2:d3:a6:3c:09:2d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Jun 28 20:01:14 2025 GMT
            Not After : Jun 29 20:01:14 2025 GMT
        Subject: CN=9daab7de4ed1bed7b397ac900ce4b00c14688b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:bb:83:ac:13:4c:fa:32:fc:1d:ab:79:13:
                    eb:0a:46:5a:88:5f:a7:fe:f4:56:bc:90:95:62:cf:
                    59:9d:28:98:43:95:6e:06:5e:f8:8a:d0:8a:c0:b1:
                    15:d1:2c:f2:09:bb:32:34:5e:f8:01:14:ac:83:92:
                    51:c4:a4:60:91:7d:bf:69:75:f1:6f:a5:d4:5e:d1:
                    bf:0b:fa:e2:93:77:e4:90:0a:76:0c:76:51:30:0b:
                    9e:f7:a8:58:33:7f:5a:fa:98:2d:1b:52:66:06:da:
                    54:da:56:57:c1:7d:48:74:e4:ed:01:28:a7:27:f1:
                    b3:56:76:14:53:e1:8e:88:13:dd:3b:4c:39:b9:a2:
                    ea:ab:65:5e:c1:e9:d4:d4:0d:0e:24:d1:8b:e5:d2:
                    9a:e5:0e:e7:11:22:5a:1d:09:46:b1:63:79:e8:91:
                    0a:a3:a6:9c:91:b9:4a:57:1e:ad:c9:64:c0:9c:f6:
                    18:fb:51:f7:c6:7a:54:9a:30:5d:ca:02:98:60:1a:
                    eb:5e:37:bd:83:50:c9:70:23:70:0a:32:74:b7:e8:
                    4a:e6:0b:03:1c:d1:ba:e4:dd:f0:c4:8e:9c:b3:cc:
                    7c:dd:95:4e:cf:41:43:c0:0f:e1:55:ae:dd:b9:81:
                    53:90:95:9e:59:44:19:4d:56:66:d7:92:60:e5:37:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:B7:DE:4E:D1:BE:D7:B3:97:AC:90:0C:E4:B0:0C:14:68:8B:6B
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:04:ed:61:26:13:54:1c:d6:83:07:2a:6b:b6:02:e9:d3:1f:
         cd:df:ff:7c:d3:b9:ac:22:d6:27:46:16:1d:3b:3e:50:c5:89:
         c4:e7:b0:89:0d:eb:d3:87:db:05:5e:8f:aa:af:c9:15:6e:22:
         2f:1e:62:a4:e9:4a:14:b6:15:ea:6c:b5:5b:be:8e:ab:e0:ef:
         a1:bc:f2:9b:60:fa:6a:54:d2:80:79:1a:9b:76:f4:f0:52:e3:
         67:25:d6:46:cb:b5:34:c0:f1:93:94:6b:c8:b4:66:e5:2b:58:
         66:5d:49:53:0f:91:6b:50:a3:1b:cf:8b:dc:0e:e8:61:49:55:
         08:83:5a:26:b4:8f:94:f8:26:df:ee:35:00:6f:59:87:5f:19:
         8e:e8:2f:e5:0f:c2:46:a1:ad:67:94:88:f6:a5:37:39:3a:ed:
         7f:10:55:c7:97:03:a8:71:01:d9:f5:eb:fe:df:91:c8:0b:3b:
         dc:0c:52:80:a9:a1:2c:c6:e2:36:cd:9e:85:63:3f:56:9e:f4:
         92:25:e3:f9:35:e3:fd:6a:32:dd:91:70:ff:20:cb:06:2a:a8:
         aa:bb:53:a4:1a:b9:05:a4:fd:fe:ed:30:19:ce:81:8b:e5:54:
         c0:69:a3:45:fc:83:3b:0c:38:b6:62:34:69:f3:08:c8:29:28:
         7a:4f:a0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITmYt8ivwHri06Y8CS2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0
M2UwZDYwHhcNMjUwNjI4MjAwMTE0WhcNMjUwNjI5MjAwMTE0WjAzMTEwLwYDVQQD
Eyg5ZGFhYjdkZTRlZDFiZWQ3YjM5N2FjOTAwY2U0YjAwYzE0Njg4YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaa7g6wTTPoy/B2reRPrCkZaiF+n
/vRWvJCVYs9ZnSiYQ5VuBl74itCKwLEV0SzyCbsyNF74ARSsg5JRxKRgkX2/aXXx
b6XUXtG/C/rik3fkkAp2DHZRMAue96hYM39a+pgtG1JmBtpU2lZXwX1IdOTtASin
J/GzVnYUU+GOiBPdO0w5uaLqq2VewenU1A0OJNGL5dKa5Q7nESJaHQlGsWN56JEK
o6ackblKVx6tyWTAnPYY+1H3xnpUmjBdygKYYBrrXje9g1DJcCNwCjJ0t+hK5gsD
HNG65N3wxI6cs8x83ZVOz0FDwA/hVa7duYFTkJWeWUQZTVZm15Jg5TfbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2qt95O0b7Xs5eskAzksAwUaItrMB8GA1UdIwQY
MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt
Y2Q0YmQ0NDI3NWM1LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1
LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQTtYSYT
VBzWgwcqa7YC6dMfzd//fNO5rCLWJ0YWHTs+UMWJxOewiQ3r04fbBV6Pqq/JFW4i
Lx5ipOlKFLYV6my1W76Oq+Dvobzym2D6alTSgHkam3b08FLjZyXWRsu1NMDxk5Rr
yLRm5StYZl1JUw+Ra1CjG8+L3A7oYUlVCINaJrSPlPgm3+41AG9Zh18Zjugv5Q/C
RqGtZ5SI9qU3OTrtfxBVx5cDqHEB2fXr/t+RyAs73AxSgKmhLMbiNs2ehWM/Vp70
kiXj+TXj/Woy3ZFw/yDLBiqoqrtTpBq5BaT9/u0wGc6Bi+VUwGmjRfyDOww4tmI0
afMIyCkoek+gNA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:39:04 2025 by rpki-client