Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
File:                     1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft (raw, json)
Hash identifier:          tbkARcMUv9Y6kNy9eZz6CAcJA0NFUyO13xzbNG9dOZ0=
Subject key identifier:   71:AA:E3:3E:20:29:C7:C9:5E:01:53:9C:E2:9D:BA:C1:48:8C:D2:15
Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA
Certificate issuer:       /CN=fadbe65b28ff25667409cce635be096e3e6defca
Certificate serial:       0198D515A594D939A1BE8735113C0B5653C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
Manifest number:          06D6
Signing time:             Sat 23 Aug 2025 04:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:22 +0000
Files and hashes:         1: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl (hash: jbXXmp7G2NfvEjFA/mndZFnVRIs2FJUtGGwrSKJP6jE=)
                          2: 9j_0JH4J-5EAPmf2JrVr2VdAHRQ.roa (hash: cUdYKnUDebxOFz1FHHICnxX67oQeRPMkJS2zAzgZtA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a5:94:d9:39:a1:be:87:35:11:3c:0b:56:53:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca
        Validity
            Not Before: Aug 23 04:00:22 2025 GMT
            Not After : Aug 24 04:00:22 2025 GMT
        Subject: CN=71aae33e2029c7c95e01539ce29dbac1488cd215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:66:64:0a:28:29:c8:14:57:d5:b5:ef:eb:
                    64:96:38:d9:3c:d6:a1:30:5b:d5:c8:20:73:39:91:
                    9d:b6:d9:2b:ea:c0:64:b7:45:c3:ef:af:9c:35:05:
                    aa:45:8c:00:cf:1c:d0:e4:8f:c8:b6:30:7b:cf:1b:
                    3e:d5:60:03:cf:01:47:47:ba:e5:f7:04:2f:d0:29:
                    21:a6:10:6b:48:e7:dc:91:0b:c7:8a:10:e2:f6:4c:
                    5b:03:03:fc:fd:40:c6:9f:98:05:59:56:1f:76:e1:
                    52:4f:7c:1c:10:21:cb:ca:8c:de:93:bc:a5:49:66:
                    73:e9:13:71:e2:65:6f:91:dc:74:c7:d3:37:e2:11:
                    ce:74:a4:f7:43:bf:03:65:10:19:24:a3:ca:78:6e:
                    a8:63:9e:c0:b2:f2:52:72:db:1a:7f:22:34:77:a2:
                    1b:ef:1e:53:dd:68:8e:b2:7b:f4:f0:54:42:20:8e:
                    a1:d8:ca:41:d7:31:57:91:88:27:06:c7:7e:11:73:
                    74:cf:ca:43:11:06:b2:cd:0a:2b:76:47:27:4a:9a:
                    91:d6:70:da:fe:6a:70:c7:ef:41:86:86:37:8f:59:
                    87:d1:fc:e2:87:ba:dd:50:a4:9a:cc:95:79:7d:cd:
                    cd:f5:64:b4:54:2e:8d:60:9f:68:f1:70:db:26:90:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:E3:3E:20:29:C7:C9:5E:01:53:9C:E2:9D:BA:C1:48:8C:D2:15
            X509v3 Authority Key Identifier:
                keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:94:a5:76:2e:3c:63:f4:68:08:be:77:3d:d9:79:11:95:2c:
         59:ee:00:80:69:3c:a9:b2:ca:4e:c2:f9:34:94:e6:e3:c3:88:
         94:21:3f:79:76:5c:16:f7:3d:b1:a2:26:8a:6c:56:2e:6e:58:
         0d:6e:ad:85:db:0d:d6:0d:2f:55:38:8d:fd:49:35:d2:9a:19:
         e2:21:52:1c:ce:9b:ca:14:ea:c5:46:50:d7:d3:3c:62:c1:d4:
         45:87:18:c3:44:70:e6:97:3c:b9:96:f9:12:90:1e:19:5b:72:
         31:ad:88:12:a0:03:30:c9:c3:4a:d8:68:b5:7d:a6:57:dc:b2:
         88:88:72:70:83:18:13:28:1e:a1:54:05:d4:20:fb:29:d8:a1:
         c9:09:7f:1c:09:a7:10:2f:83:0d:07:1b:23:28:bd:60:d0:33:
         b0:6b:89:55:4d:06:32:ac:a2:0f:a3:e3:51:e7:fa:a8:81:45:
         9b:37:db:5f:59:56:c3:d2:52:aa:e1:ed:32:f2:17:dc:07:24:
         8d:5f:e8:35:75:50:0f:70:71:02:f2:1f:b7:3b:ef:2d:99:ad:
         78:eb:54:6e:a6:82:b5:50:78:fd:c4:be:9b:e2:5a:e5:41:e7:
         12:10:80:1b:e1:1f:12:81:f5:88:3f:d1:1b:71:ba:9e:5f:28:
         ba:21:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:51 2025 by rpki-client