Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File:                     tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier:          3k0cIfB8TxWdmOqrod1gVEFDWK/0v7a/3B5xUhrEAmM=
Subject key identifier:   94:DB:E3:7D:A3:68:D0:3C:31:B1:5C:BA:61:44:06:B2:0C:C8:BB:29
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer:       /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial:       0198D54E44A4C4F673BDBF414636B0312558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 05:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:12 +0000
Files and hashes:         1: kKMC8jThQpDwK6v7GaumYPI4bHE.roa (hash: jzEV+uNk9P/+bwhKx1o1i5qEZ9QBMjGpsu47uocCOtY=)
                          2: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: P2mucCmaZA7jy2YLyMOvvxHwOCWH8zjJaxA/UWp9RK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:44:a4:c4:f6:73:bd:bf:41:46:36:b0:31:25:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
        Validity
            Not Before: Aug 23 05:02:12 2025 GMT
            Not After : Aug 24 05:02:12 2025 GMT
        Subject: CN=94dbe37da368d03c31b15cba614406b20cc8bb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:e9:9c:46:38:b7:16:41:e4:72:5a:ff:11:
                    46:17:25:85:f7:9f:a5:c3:cb:f8:d0:ac:8a:d6:32:
                    7c:13:df:8a:c0:f0:38:30:4f:a9:78:70:00:aa:8b:
                    5b:fb:db:5a:c5:7f:40:f7:6c:0c:f7:22:e3:66:2c:
                    52:ad:8a:03:d6:cb:11:08:8c:f3:47:fb:6e:46:20:
                    41:96:59:0a:1a:02:be:ff:75:f0:e5:97:2c:dd:ad:
                    1c:7b:cd:27:3a:5e:3c:64:30:9a:cf:b9:dd:5d:29:
                    de:d8:28:f7:67:a0:c8:a6:a4:80:04:80:9a:a5:79:
                    d8:ca:f5:17:6f:0b:bd:01:63:54:be:86:ef:b0:33:
                    df:a0:76:33:e9:6d:54:ef:40:36:c4:0c:71:04:f8:
                    f7:b2:c8:20:b5:0c:93:ce:61:84:e3:4c:62:dc:c6:
                    87:28:03:9b:fc:d3:2c:10:39:a4:37:d9:54:eb:e9:
                    f9:2a:03:a7:ef:68:9e:de:36:11:4c:ed:c9:48:84:
                    08:e6:e6:2c:01:1e:68:d3:2d:24:9f:ce:ca:51:80:
                    88:54:84:95:10:cb:88:88:c3:30:d3:14:ba:86:f3:
                    6b:d2:21:9e:d2:7e:c7:ff:e3:fa:c5:dc:78:ac:f4:
                    84:cd:ca:2e:6d:a0:be:30:f0:97:1d:ea:78:8a:0c:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:E3:7D:A3:68:D0:3C:31:B1:5C:BA:61:44:06:B2:0C:C8:BB:29
            X509v3 Authority Key Identifier:
                keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:20:34:6f:fe:1c:09:38:85:5f:1a:21:b5:69:6c:bf:64:2b:
         11:0a:37:be:69:8a:3c:aa:8b:2e:b3:d0:76:26:67:54:ff:b5:
         98:37:b7:41:76:10:da:d2:92:ff:10:49:40:93:a7:3d:3f:fd:
         e6:0d:48:91:81:49:c2:97:01:f7:ea:f7:d2:8e:30:15:0c:53:
         b1:dd:6f:49:88:d2:a2:50:fa:f3:d1:6a:62:33:79:b3:fc:d8:
         06:55:5f:29:2b:31:17:26:2f:48:17:ff:a3:b7:16:19:c8:13:
         bf:7c:bd:48:8e:fb:d0:4b:8b:79:36:bd:3b:9a:a8:87:54:de:
         df:73:98:91:6c:f3:ce:09:ae:21:5b:ca:b9:2e:2c:b2:d0:2c:
         34:c6:5f:0a:1c:d8:03:12:8a:b4:87:77:7e:8c:0c:02:86:ee:
         fe:fe:be:44:00:1d:bd:a4:81:1d:02:3f:a2:2e:58:41:1e:e6:
         88:5e:ef:20:db:3c:28:d6:f8:69:69:7f:6e:69:dc:9a:66:a7:
         9c:72:a1:7c:fb:8a:f2:c7:2d:ce:61:73:16:3f:c8:7d:8c:5a:
         a7:30:97:dd:de:ec:8c:52:17:a4:97:83:67:6c:a5:67:a1:da:
         26:35:9a:1c:10:2a:ba:70:16:24:84:fc:c8:19:de:c9:75:a6:
         b2:b4:63:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkSkxPZzvb9BRjawMSVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzJhMzFkNjBlZDI1NjExOTk3ZTdiN2RlNGE5YjZmMjYw
NmVkMzQwHhcNMjUwODIzMDUwMjEyWhcNMjUwODI0MDUwMjEyWjAzMTEwLwYDVQQD
Eyg5NGRiZTM3ZGEzNjhkMDNjMzFiMTVjYmE2MTQ0MDZiMjBjYzhiYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn37pnEY4txZB5HJa/xFGFyWF95+l
w8v40KyK1jJ8E9+KwPA4ME+peHAAqotb+9taxX9A92wM9yLjZixSrYoD1ssRCIzz
R/tuRiBBllkKGgK+/3Xw5Zcs3a0ce80nOl48ZDCaz7ndXSne2Cj3Z6DIpqSABICa
pXnYyvUXbwu9AWNUvobvsDPfoHYz6W1U70A2xAxxBPj3ssggtQyTzmGE40xi3MaH
KAOb/NMsEDmkN9lU6+n5KgOn72ie3jYRTO3JSIQI5uYsAR5o0y0kn87KUYCIVISV
EMuIiMMw0xS6hvNr0iGe0n7H/+P6xdx4rPSEzcoubaC+MPCXHep4igxYVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTb432jaNA8MbFcumFEBrIMyLspMB8GA1UdIwQY
MBaAFLbCox1g7SVhGZfnt95Km28mBu00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84NTA2YTEtOTFkZC00Y2ZjLThjMDQt
NmNkZjBkZTUyNzQ2LzEvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84NTA2YTEtOTFkZC00Y2ZjLThjMDQtNmNkZjBkZTUyNzQ2
LzEvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCA0b/4c
CTiFXxohtWlsv2QrEQo3vmmKPKqLLrPQdiZnVP+1mDe3QXYQ2tKS/xBJQJOnPT/9
5g1IkYFJwpcB9+r30o4wFQxTsd1vSYjSolD689FqYjN5s/zYBlVfKSsxFyYvSBf/
o7cWGcgTv3y9SI770EuLeTa9O5qoh1Te33OYkWzzzgmuIVvKuS4sstAsNMZfChzY
AxKKtId3fowMAobu/v6+RAAdvaSBHQI/oi5YQR7miF7vINs8KNb4aWl/bmncmman
nHKhfPuK8sctzmFzFj/IfYxapzCX3d7sjFIXpJeDZ2ylZ6HaJjWaHBAqunAWJIT8
yBneyXWmsrRjeA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:27 2025 by rpki-client