Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          4jEjxni93wY3BhfKEx3ow/FQfkO0VxhFlnnUgW6ZKtA=
Subject key identifier:   5F:C0:98:0C:34:99:EF:19:AC:8B:56:69:52:EA:20:B8:DF:B5:52:81
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       0198D4A7B415186486E3D8BB4E816DF7908F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 02:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:17 +0000
Files and hashes:         1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: ASVY84XAbVZfpQignaKYFxhwFB4hkYV2bloAFAHas1s=)
                          2: vtod0X9q1UxXYWyU0iJvMZK0FuU.roa (hash: hazDQDv/KGyD5MQE7kb1mVj2PkHFae3QD7YWTocQdWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:b4:15:18:64:86:e3:d8:bb:4e:81:6d:f7:90:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Aug 23 02:00:17 2025 GMT
            Not After : Aug 24 02:00:17 2025 GMT
        Subject: CN=5fc0980c3499ef19ac8b566952ea20b8dfb55281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:c9:08:e3:b9:fc:40:73:6e:d0:cd:6a:ac:
                    f9:2b:41:79:31:71:64:c6:7b:8d:7e:bb:8c:8a:42:
                    8a:d3:3b:3b:47:6c:6b:aa:79:8f:e6:e3:90:9b:0d:
                    23:0d:4b:3b:e3:77:12:c9:89:63:ad:2d:51:98:bc:
                    f5:86:32:36:24:d4:b2:5f:95:f0:59:ec:e9:82:b5:
                    21:81:a3:32:43:e2:ef:8b:7b:77:3a:51:48:71:a5:
                    11:68:a9:37:5b:5f:86:28:f8:11:d8:2a:fd:a6:2b:
                    c1:6f:0f:fa:b9:cc:e2:a3:5a:04:e8:01:b2:15:6b:
                    b0:17:0c:d7:55:dc:50:36:43:cf:d6:0c:ff:99:32:
                    6d:57:f7:38:ae:b8:67:3e:1d:dd:5b:f8:57:0e:8d:
                    96:2a:e7:47:1e:dc:00:71:ac:95:c0:d7:f4:2e:39:
                    7a:74:dd:55:1d:88:3f:16:47:78:c7:e1:4a:69:4a:
                    38:1c:12:dc:d6:14:1c:5f:be:2d:d0:eb:6c:7a:29:
                    5b:84:fb:70:6d:45:44:ba:8e:86:59:dc:41:d1:49:
                    d3:1c:8b:ea:78:e0:23:10:63:a5:32:4d:60:b7:44:
                    63:c8:11:7d:de:a8:29:4b:c8:76:48:51:09:86:67:
                    8c:90:ff:71:e8:34:0b:31:97:a0:0b:5c:15:35:4b:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:98:0C:34:99:EF:19:AC:8B:56:69:52:EA:20:B8:DF:B5:52:81
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:5a:10:81:4c:d7:d9:ae:57:9c:89:d5:69:27:be:e2:33:
         61:a2:2c:aa:ec:ad:0f:79:cb:57:76:e3:be:a0:16:9f:87:f2:
         76:b2:2f:38:d7:9f:b6:77:2a:91:6b:17:2e:57:62:6a:41:96:
         6c:ec:4f:f9:3e:24:88:23:c9:55:5d:8b:86:fb:df:74:fb:30:
         c5:b4:7a:30:52:8f:3d:ae:d3:2a:1e:0d:4d:78:4a:d8:98:07:
         6f:a5:a4:52:8f:d5:4a:42:4c:5d:73:0d:68:1c:10:af:fc:00:
         77:29:4f:c5:dc:86:84:51:51:3c:c8:81:e1:50:7d:dd:c2:24:
         0f:1d:ba:61:2d:98:aa:30:7a:e9:d3:97:db:6f:f1:39:4f:19:
         fa:ea:0e:c3:4f:68:a6:26:90:46:83:0e:98:20:65:e3:e1:e2:
         f2:d7:e3:93:07:8b:f0:1b:d8:5f:18:cf:ed:c2:e9:5f:6d:78:
         68:83:a3:46:1d:4b:d4:d2:0c:20:9a:36:eb:5d:ee:92:49:e9:
         67:47:83:cd:bc:61:d5:7e:c9:08:44:ec:71:a5:5d:cf:77:f2:
         68:b6:2c:ce:52:3c:e7:f2:59:e6:30:d5:bd:6c:3e:60:15:2c:
         7d:50:43:f3:d2:b4:38:90:55:6d:c2:4b:b3:2f:d7:3a:7f:83:
         d4:53:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:02 2025 by rpki-client