Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File:                     Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier:          1CIF4AQonjr6cN8VgkCbQu6Qr11wM8Pg9XX7qT+3YdI=
Subject key identifier:   74:8A:BC:5A:73:42:81:9A:50:AF:40:DB:13:69:6B:83:3C:31:4B:21
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer:       /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial:       0198D5BBDE1A7BFFB2B42B918CF2106CAED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number:          088A
Signing time:             Sat 23 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:55 +0000
Files and hashes:         1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
                          2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: 9RCf2eZYJyugZxEUW1jsO8iPYjP0Pbzr1n1JQKr7IiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:de:1a:7b:ff:b2:b4:2b:91:8c:f2:10:6c:ae:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
        Validity
            Not Before: Aug 23 07:01:55 2025 GMT
            Not After : Aug 24 07:01:55 2025 GMT
        Subject: CN=748abc5a7342819a50af40db13696b833c314b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:fb:2b:4f:f3:cf:3a:29:80:ea:6e:6d:7e:
                    36:af:68:78:c1:29:d1:b5:1c:0c:b5:47:59:4d:c4:
                    45:c2:0e:0b:9c:d0:7e:94:b0:d4:97:21:23:1e:6a:
                    ca:43:2c:ce:ca:32:64:23:64:04:46:fc:f4:f3:83:
                    1b:79:e9:42:88:c2:b4:ea:ff:19:a2:2f:f9:5f:92:
                    32:c9:8c:85:87:78:67:0f:2c:4f:dd:51:8c:08:6a:
                    a2:14:81:1e:f2:a7:99:90:fc:0b:83:f9:c3:18:9a:
                    34:b0:31:ac:bf:29:b2:86:d6:c8:e9:85:a4:b7:1b:
                    98:89:1e:cf:1a:5c:d8:5e:a3:95:3d:33:70:d2:30:
                    93:e6:1f:f8:65:09:ba:85:3d:26:e9:20:4a:82:b2:
                    aa:2a:b0:56:9c:65:e6:c5:ae:5a:41:b9:74:88:52:
                    e4:c0:d9:79:68:cc:5d:60:c6:2a:8f:3b:51:a4:45:
                    37:89:db:ae:e1:15:24:ed:cf:8e:fa:7d:22:5d:4f:
                    33:1d:ee:64:f6:86:c9:9a:2c:d9:2c:79:18:c3:80:
                    df:8e:c3:8d:af:fa:de:47:9a:70:cb:2b:34:c5:ef:
                    cd:ba:99:de:ac:1e:a8:e5:ed:77:99:bb:87:8f:41:
                    eb:d4:46:09:b7:e7:fc:f0:92:b3:8a:c6:4a:de:62:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:BC:5A:73:42:81:9A:50:AF:40:DB:13:69:6B:83:3C:31:4B:21
            X509v3 Authority Key Identifier:
                keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:20:12:e2:20:99:43:20:27:d5:ea:e8:6f:f3:56:96:a9:
         f1:9e:f9:a3:b2:30:ba:de:b7:5e:bd:0d:32:64:3c:2f:5a:fe:
         87:12:8e:5c:ec:99:df:28:c8:70:42:7e:b5:3e:9e:bf:86:8f:
         15:71:a4:64:c4:50:0e:8f:60:5b:e8:e4:bf:d0:01:2a:a5:e8:
         81:82:c6:35:b5:8a:b5:10:80:aa:57:0e:e2:a4:a0:a7:3a:dd:
         fc:ce:e9:e8:cf:f8:f5:dd:38:85:ba:c1:a1:e7:7d:b8:01:9b:
         ed:c5:1e:5d:d6:23:18:5a:a0:b5:06:0c:3e:8c:c8:6c:d2:82:
         83:bc:0a:64:cd:3d:e1:81:a0:df:e0:de:fc:09:4c:07:b3:09:
         6f:b7:c2:f1:54:fa:80:b6:d0:71:11:a9:26:c6:2a:45:96:37:
         58:5c:4b:9c:b4:2d:82:26:13:af:89:23:78:98:10:75:f2:76:
         5f:18:cd:93:f7:17:61:7a:23:96:69:87:76:67:6f:cc:59:76:
         a3:8c:22:8d:d6:bf:c5:51:f5:c1:fa:ed:97:4b:03:e7:c1:2c:
         56:fe:12:85:0b:9f:d6:86:cf:93:e2:2f:8e:15:16:74:df:12:
         4b:ab:91:31:62:42:52:32:a6:81:fc:eb:e0:9d:c2:c7:92:80:
         16:01:ab:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu94ae/+ytCuRjPIQbK7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGU0YzY1ZDczNWFmNzkyNzdlZDE0ZWI2YzRjZjU0MDRj
Nzg4ZDUwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
Eyg3NDhhYmM1YTczNDI4MTlhNTBhZjQwZGIxMzY5NmI4MzNjMzE0YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8T7K0/zzzopgOpubX42r2h4wSnR
tRwMtUdZTcRFwg4LnNB+lLDUlyEjHmrKQyzOyjJkI2QERvz084MbeelCiMK06v8Z
oi/5X5IyyYyFh3hnDyxP3VGMCGqiFIEe8qeZkPwLg/nDGJo0sDGsvymyhtbI6YWk
txuYiR7PGlzYXqOVPTNw0jCT5h/4ZQm6hT0m6SBKgrKqKrBWnGXmxa5aQbl0iFLk
wNl5aMxdYMYqjztRpEU3iduu4RUk7c+O+n0iXU8zHe5k9obJmizZLHkYw4DfjsON
r/reR5pwyys0xe/NupnerB6o5e13mbuHj0Hr1EYJt+f88JKzisZK3mKw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSKvFpzQoGaUK9A2xNpa4M8MUshMB8GA1UdIwQY
MBaAFE7eTGXXNa95J37RTrbEz1QEx4jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYt
N2FhNDliZWNmNDY3LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYtN2FhNDliZWNmNDY3
LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8sgEuIg
mUMgJ9Xq6G/zVpap8Z75o7Iwut63Xr0NMmQ8L1r+hxKOXOyZ3yjIcEJ+tT6ev4aP
FXGkZMRQDo9gW+jkv9ABKqXogYLGNbWKtRCAqlcO4qSgpzrd/M7p6M/49d04hbrB
oed9uAGb7cUeXdYjGFqgtQYMPozIbNKCg7wKZM094YGg3+De/AlMB7MJb7fC8VT6
gLbQcRGpJsYqRZY3WFxLnLQtgiYTr4kjeJgQdfJ2XxjNk/cXYXojlmmHdmdvzFl2
o4wijda/xVH1wfrtl0sD58EsVv4ShQuf1obPk+IvjhUWdN8SS6uRMWJCUjKmgfzr
4J3Cx5KAFgGrNg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:02 2025 by rpki-client