Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          b6R+l0y9xgLYgSRchfKMW3KNjoKMKDnyjLler6mPciI=
Subject key identifier:   F5:96:D0:B5:94:72:1E:3D:12:CE:DE:54:F4:B6:3B:62:59:5D:17:CF
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       0198D583734085BD66AE7D334B8272495597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          1045
Signing time:             Sat 23 Aug 2025 06:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:18 +0000
Files and hashes:         1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: kXB7NIy7Jjt9RQRvCE2E3PBuI4I/+oQ+r/wnHmnujB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:73:40:85:bd:66:ae:7d:33:4b:82:72:49:55:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Aug 23 06:00:18 2025 GMT
            Not After : Aug 24 06:00:18 2025 GMT
        Subject: CN=f596d0b594721e3d12cede54f4b63b62595d17cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:3b:58:79:d5:5e:51:d5:26:61:00:ab:ab:
                    e5:14:e3:36:b6:51:ab:e1:2b:b2:0f:94:43:82:f9:
                    59:e2:77:af:53:d6:30:f7:dd:2b:50:ee:1e:58:e3:
                    24:8f:4e:37:d0:29:92:e4:35:12:38:02:28:63:c8:
                    5b:55:71:74:30:10:a6:81:bb:4a:87:6f:49:c4:6a:
                    73:1c:e5:ea:ec:88:92:d1:1b:9b:bb:b2:a2:da:cc:
                    7c:3e:49:b5:85:c8:04:ad:5b:cb:79:42:f6:db:8c:
                    94:4b:4d:3f:9f:87:c9:28:31:e5:e0:41:e2:ef:f6:
                    25:c5:98:ea:11:a4:48:7c:32:21:2e:3b:d7:72:4e:
                    74:64:f5:01:15:c9:af:91:5e:21:b4:9b:ba:a6:22:
                    8c:47:56:0f:31:f6:d5:aa:c3:df:f3:e3:5d:4c:34:
                    e2:67:83:56:ff:d8:0c:06:bb:d6:75:41:04:8f:22:
                    c5:cf:88:37:09:4f:19:09:bd:89:73:3d:db:a0:e7:
                    71:ae:e5:e0:1f:b9:06:a0:ba:d2:16:42:df:4b:95:
                    75:c6:10:b2:b0:de:2e:25:7c:46:da:15:74:25:32:
                    de:5a:a3:49:87:00:a2:07:ac:92:a5:2e:bb:43:0b:
                    bc:4d:95:00:fe:36:34:35:b4:b8:29:90:12:96:09:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:96:D0:B5:94:72:1E:3D:12:CE:DE:54:F4:B6:3B:62:59:5D:17:CF
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:59:54:fd:6f:b3:21:10:21:3f:1d:bf:e3:e1:cb:08:fe:49:
         15:21:a2:3b:14:6a:86:10:ea:fa:bf:7a:d2:58:66:eb:db:d2:
         2a:02:90:79:e3:24:8d:82:ea:66:8c:f2:65:32:6b:38:16:f5:
         a6:9a:73:b3:34:99:bc:10:bc:ff:db:c6:ea:5f:6d:ba:67:ba:
         4a:8f:be:62:7c:b9:71:e4:1b:c0:fb:a0:9a:5b:80:95:75:d3:
         5f:d8:ca:a2:fd:4c:d9:2c:2b:fc:12:77:ca:0f:57:c1:bb:9e:
         18:ed:58:30:70:19:00:16:c3:71:d8:1f:ca:51:21:13:1f:90:
         11:69:69:01:08:74:c6:a5:fe:4a:aa:ad:fc:e9:ec:b7:4d:ad:
         35:96:35:ad:f7:47:9e:e4:0e:a0:7d:29:5b:d5:b9:cd:5e:f4:
         65:f9:37:31:5b:36:5c:3f:ef:a8:43:86:86:ae:88:10:ec:49:
         52:b1:47:fe:a6:a7:63:47:ee:e3:65:b1:2a:9e:5c:0c:d2:4e:
         b7:14:35:85:f9:a4:5a:e3:ac:b8:44:e2:59:a9:08:bc:59:dd:
         18:66:07:69:ef:29:f1:2b:dc:4f:71:58:ed:4d:88:d8:27:3d:
         1f:f5:52:3f:1b:4f:df:8d:61:aa:af:51:53:23:ab:3c:2a:e0:
         17:f4:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:38 2025 by rpki-client