Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File:                     tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier:          7U9ZRjh2eT/eVhmcVh5fF+ITRCEwXRSWFlRMNcFhqtE=
Subject key identifier:   78:DA:69:2C:AD:F3:2D:94:47:D0:DE:07:37:79:09:A0:14:0F:15:A4
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer:       /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial:       0198D583CBF6BD63227D449ACA61BAFE94BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
                          2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: kopQQ73o62K71BeJFmtpru1c/JOK3zTuDRd73Gy66aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:cb:f6:bd:63:22:7d:44:9a:ca:61:ba:fe:94:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=78da692cadf32d9447d0de07377909a0140f15a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:16:ba:e5:37:d9:15:c3:17:57:46:57:43:
                    45:d8:bf:6f:91:b7:3e:7d:4c:d5:98:e2:4c:e5:2f:
                    e8:82:6a:59:f3:ae:d8:3c:af:3e:87:77:82:5c:c4:
                    ad:b2:bb:44:de:54:ad:e9:ac:12:62:5d:e6:3b:04:
                    36:71:0c:be:31:08:d2:67:6a:f9:64:9c:0c:18:5c:
                    95:f3:01:bd:f8:8a:72:51:98:6c:54:b9:10:5f:69:
                    c0:fb:5d:3f:75:ba:2b:b2:5f:65:25:aa:19:7b:40:
                    13:21:ba:0a:aa:42:02:79:36:e7:47:c2:31:d7:7d:
                    7f:26:7b:f1:5b:c3:77:d6:16:c7:16:ca:cd:60:c1:
                    fe:3e:58:87:8d:bb:dc:99:b2:aa:16:56:c3:12:87:
                    38:9b:33:02:02:9c:35:20:88:24:3d:f4:b4:5f:d5:
                    9b:d3:29:36:10:47:1d:c3:df:11:ec:41:26:d4:1e:
                    4c:3f:79:32:a2:2a:19:87:84:14:d3:8f:6b:9f:0f:
                    81:c9:05:2d:c1:1b:09:62:dd:7d:05:22:30:73:fa:
                    aa:07:1e:8c:bc:32:56:3f:80:74:41:c0:98:85:be:
                    9c:ee:40:81:56:8e:d1:cc:6e:26:62:37:56:cd:cd:
                    55:cc:ed:cf:c5:ce:34:df:83:fe:81:16:38:96:1a:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:69:2C:AD:F3:2D:94:47:D0:DE:07:37:79:09:A0:14:0F:15:A4
            X509v3 Authority Key Identifier:
                keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:9c:86:ae:8d:76:3a:79:b6:28:75:0e:b4:fa:7e:f7:d0:
         3e:5c:8a:55:9b:2f:61:1b:01:69:82:23:7b:72:d0:ae:9e:1f:
         13:ed:c8:8f:57:92:80:96:c7:ec:8f:83:b5:39:1b:1c:3f:af:
         4a:d3:82:61:40:f0:ad:d6:34:c2:fa:23:c9:1f:81:12:43:f9:
         bb:b5:f4:d1:76:cd:ba:09:13:9b:2b:27:cc:8f:5e:f4:dd:7a:
         94:f6:1f:a4:87:ae:ef:4c:d3:f4:82:30:72:6d:c4:4a:a5:bd:
         70:6b:0d:e2:7f:6b:05:66:bd:35:7f:6b:d4:5c:2f:77:39:36:
         8f:37:86:c4:74:c6:7e:95:b2:38:be:61:c8:54:78:de:5b:a8:
         a6:6a:05:99:1e:5a:66:e3:89:c0:58:b8:13:8d:d1:83:09:4c:
         9d:2a:17:52:28:0a:f5:15:fb:a3:3f:4c:5d:d0:41:77:aa:b7:
         53:9e:6b:71:39:8d:4f:0c:43:bd:b9:d9:31:03:e7:e4:fd:d8:
         c2:64:9d:a7:aa:f5:7d:a1:25:30:b5:ca:5d:33:b3:20:e4:0f:
         5e:ca:ae:71:6b:f9:28:3e:ba:98:25:0f:35:d0:aa:c1:7c:ce:
         1f:38:36:8b:80:3a:07:53:3f:37:d8:22:e1:96:77:70:20:4b:
         33:fd:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:47 2025 by rpki-client