Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File:                     tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier:          oggnWfz17Wg5YhJg6vfTXaY27IGHQlZGe5BhQ/ZZiTk=
Subject key identifier:   39:EA:AA:19:C9:F6:1A:50:E9:2B:43:65:86:76:73:B1:0E:12:2B:6C
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer:       /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial:       0198D6CD6B9A46A534DE6482714F9532F612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number:          1460
Signing time:             Sat 23 Aug 2025 12:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:43 +0000
Files and hashes:         1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
                          2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: O+QzHI5oVj34ANBP+PeLV8dPFi1PUbrSyXGl2BvQvFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:6b:9a:46:a5:34:de:64:82:71:4f:95:32:f6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
        Validity
            Not Before: Aug 23 12:00:43 2025 GMT
            Not After : Aug 24 12:00:43 2025 GMT
        Subject: CN=39eaaa19c9f61a50e92b4365867673b10e122b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:5c:4a:8b:2b:16:b3:15:b2:35:76:25:22:
                    8c:9a:cc:00:0d:ba:a3:2d:f4:e7:3a:a5:54:4a:0e:
                    92:cb:97:8c:2f:85:75:f6:d2:ac:6f:87:48:f3:b8:
                    25:0e:8a:7d:2e:20:55:64:9a:3c:e1:da:23:0a:f2:
                    78:18:62:35:2c:f9:9e:ca:9e:70:54:1d:55:72:d0:
                    1e:69:10:77:4c:e3:72:f5:05:06:1c:90:70:29:0a:
                    0f:10:90:ab:ea:cd:e5:1b:99:2e:21:b0:27:df:bf:
                    5f:22:5e:d1:66:d3:49:6a:89:44:7c:bc:44:a7:96:
                    7d:a2:be:97:a6:c1:fe:48:60:e3:e6:4f:76:c2:10:
                    db:0c:c6:a7:36:68:f2:ca:0d:37:6f:d6:86:b5:d4:
                    fe:70:90:1d:9c:73:2b:2a:e1:6f:82:a6:82:43:67:
                    50:16:8b:df:d3:3b:d7:d7:32:71:c9:5e:cf:42:42:
                    1a:23:41:04:e5:15:7c:81:e1:0a:ef:db:f7:cb:42:
                    59:57:c9:6f:4d:66:f2:63:3f:5f:b8:21:a2:bb:ec:
                    c3:f8:57:17:32:6b:5a:41:ba:84:b5:ad:d7:3c:b5:
                    df:c9:63:b6:52:d9:25:22:e9:4d:fe:f7:88:cd:d2:
                    5e:12:e4:5b:59:21:0b:53:72:71:28:cc:d7:9a:ed:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EA:AA:19:C9:F6:1A:50:E9:2B:43:65:86:76:73:B1:0E:12:2B:6C
            X509v3 Authority Key Identifier:
                keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:46:d2:70:9e:73:3a:96:85:6e:22:04:ab:fa:0e:33:26:
         60:4c:7a:45:37:54:2a:a3:9b:82:c3:8d:95:3c:4a:10:27:5d:
         da:c1:ad:5b:fa:da:56:80:14:de:b0:24:87:13:a4:b0:46:f4:
         99:79:05:6c:10:c8:31:46:54:c4:f4:7a:e0:23:25:ca:79:f8:
         cb:aa:df:eb:c0:32:1a:46:2d:9f:e8:23:4c:df:7d:b5:46:58:
         5c:7a:7c:c3:04:f3:d0:03:2d:35:6b:bf:e1:fb:da:aa:72:e9:
         5e:ef:9b:1c:1e:a4:d6:4f:95:46:da:3a:c7:62:d3:54:af:bb:
         5a:38:3c:64:df:e5:bc:67:0d:19:4d:48:e6:6a:90:7f:58:bb:
         ab:97:b7:f1:6a:40:a0:fc:dc:ed:2c:45:60:ce:d6:3f:e0:1b:
         58:6a:e7:2a:9a:70:3b:6d:aa:1b:a3:11:10:9d:fb:c2:17:0c:
         39:f6:f9:05:cf:95:4c:9c:26:0b:81:6b:64:4f:5b:8c:a3:dc:
         8a:63:92:12:27:18:b4:04:67:89:3d:f4:d6:d7:6a:5b:b4:ae:
         80:8c:64:cc:fb:2a:c2:97:30:a7:91:0d:23:23:41:f4:be:79:
         05:2e:cd:4a:95:c7:ab:fd:d4:28:a5:a4:61:a8:3a:03:e8:ed:
         33:61:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:43 2025 by rpki-client