Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File:                     tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier:          Ek7JLumYnGoroX+RJlchhTHMeTpyKzkOkBD9F2drPkg=
Subject key identifier:   AF:8B:B2:64:27:CB:4E:ED:E2:BF:4E:91:08:23:0A:21:3F:4D:4E:7F
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       0198D583D43DE15C6D903101BBD24446F670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:43 +0000
Files and hashes:         1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
                          2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: LShUGM1Gd0kakPhwe+O2fPXuYJGZooHseQq/iJJVK4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d4:3d:e1:5c:6d:90:31:01:bb:d2:44:46:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: Aug 23 06:00:43 2025 GMT
            Not After : Aug 24 06:00:43 2025 GMT
        Subject: CN=af8bb26427cb4eede2bf4e9108230a213f4d4e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:df:e5:29:cf:19:e1:c2:5c:76:00:72:25:
                    f9:de:ed:ac:84:e2:1f:88:53:bf:32:75:8e:b9:8e:
                    a2:8a:8f:eb:fd:7e:7e:cb:b9:9a:77:48:db:15:86:
                    fc:f0:73:3f:b9:76:47:5d:13:3c:fb:46:ea:c6:7c:
                    a9:45:64:69:fb:1d:00:87:79:09:08:85:2e:8f:e2:
                    37:99:2c:db:13:e9:b5:07:15:78:8b:21:9f:c3:05:
                    ae:d4:02:32:43:4d:36:cf:ab:08:58:54:04:7c:4e:
                    f1:34:28:3f:c9:3e:43:de:09:d4:c0:d7:a4:1c:75:
                    00:90:ef:14:d0:c9:f2:a9:93:3f:e9:6b:64:6e:1a:
                    f1:5b:d5:9c:57:b1:30:cb:40:94:ba:ab:45:d0:75:
                    5f:b9:28:62:a6:ee:69:79:bf:b1:e6:9d:74:12:c3:
                    86:8e:83:9f:8a:e6:c5:70:7c:f8:93:6f:0b:b3:0c:
                    fa:21:b0:c3:3e:e2:8f:41:c1:44:f9:7b:ed:eb:f2:
                    b8:1b:09:5e:76:c7:64:1c:77:93:7c:e2:3e:d6:a5:
                    32:30:ed:3c:64:7d:c0:4a:df:ea:2d:fb:6a:1e:aa:
                    67:ff:16:64:63:c9:53:13:71:a0:43:95:d0:2f:d3:
                    87:d4:16:c4:16:0a:46:ed:9f:6f:83:db:de:2b:9f:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:B2:64:27:CB:4E:ED:E2:BF:4E:91:08:23:0A:21:3F:4D:4E:7F
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:9c:58:be:04:43:50:ca:91:ae:82:8f:78:85:06:17:38:
         3d:a3:f8:07:75:33:47:ba:03:cb:e2:e8:75:4c:e4:b8:54:8a:
         73:97:8c:d4:3b:80:d9:3a:32:38:23:18:f7:55:d7:90:fc:29:
         0a:7f:d1:87:a6:fc:17:7e:c3:37:53:48:8b:d2:d4:7e:7f:f3:
         ae:03:26:64:05:8d:3e:7d:cd:54:42:06:c1:00:c0:91:37:69:
         5f:31:9e:47:f3:77:b2:19:06:5f:42:da:34:54:21:59:bd:c9:
         ea:86:2d:cc:9b:15:2e:9a:c0:c5:12:04:a9:86:ee:58:65:77:
         74:38:65:df:e0:b5:ad:4b:c4:52:5e:cb:24:fd:06:bb:1d:17:
         3c:18:d2:dc:d8:98:ed:d0:67:e5:5a:1a:bc:5b:a3:2e:f9:98:
         0e:9b:ef:13:be:02:83:7b:e6:96:4d:43:32:fd:78:a2:aa:7f:
         ee:34:15:9c:2a:2b:f7:b5:ee:3f:b7:fa:d6:5c:30:2d:0b:9f:
         67:52:a8:4f:17:cb:a6:a7:f3:bf:f5:0a:c7:89:26:b3:4b:5d:
         ff:39:16:05:c3:ff:8d:04:af:c3:83:4b:39:a4:a2:7d:9a:46:
         bd:6c:ee:bc:8f:83:5f:4e:ef:cb:18:92:d2:09:f2:b0:8a:d8:
         f2:01:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:01 2025 by rpki-client