Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File:                     T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier:          uWnmz/X1Sa1HTSSdlowJN3fHQFnBF+9KEy04OccrhLE=
Subject key identifier:   4A:59:E5:F4:B8:66:D1:39:8C:86:F0:49:C7:1B:22:C7:9F:9E:2D:2C
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer:       /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial:       0198D54E8C0D2DECA60A72898440438F6943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number:          05A8
Signing time:             Sat 23 Aug 2025 05:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:31 +0000
Files and hashes:         1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: mzpZ10Xt9Jvw0XFSBw8TmDyR8pQCV290rciCp+7aGyc=)
                          2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:8c:0d:2d:ec:a6:0a:72:89:84:40:43:8f:69:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
        Validity
            Not Before: Aug 23 05:02:31 2025 GMT
            Not After : Aug 24 05:02:31 2025 GMT
        Subject: CN=4a59e5f4b866d1398c86f049c71b22c79f9e2d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:7d:16:29:75:cc:d8:c0:a4:24:aa:f6:e1:
                    c2:17:95:7b:ad:85:5a:b0:fc:8f:36:e7:e8:8e:a3:
                    40:09:ed:0f:b3:ff:e9:23:a4:dd:7b:9f:07:30:a2:
                    a0:cc:4a:8f:5d:3d:a2:f5:18:83:cb:4b:16:32:52:
                    c8:68:0f:73:d8:01:fe:b3:9b:9d:a7:4a:49:f3:8d:
                    c2:a8:9a:1d:f3:33:12:aa:f8:82:c5:b2:ce:af:7c:
                    f3:51:48:0a:11:f4:09:c4:98:23:cc:c4:33:2b:bf:
                    0d:d9:df:8c:87:c5:97:61:96:72:85:9a:9b:1a:02:
                    b8:ab:6d:3b:e2:79:7a:32:90:dc:52:2c:33:82:30:
                    8f:b3:01:7e:e2:bc:96:85:f9:52:19:a8:72:ed:ba:
                    44:90:fc:40:7c:45:5a:12:2f:a7:51:76:1c:c6:b0:
                    cb:fa:b7:b3:71:7b:3d:b5:10:f8:46:d3:93:b1:69:
                    93:e1:0c:20:e4:91:19:dd:08:19:8f:c7:a7:51:71:
                    f7:5f:c1:7c:d3:f1:c8:20:e4:ad:5a:a2:fb:b5:be:
                    72:ce:15:04:24:03:46:9c:7f:0c:15:e5:54:db:79:
                    03:71:21:ce:ce:2e:af:6d:2a:7d:97:bf:a7:f9:98:
                    e5:03:c4:d3:df:54:0c:da:26:53:aa:8d:1b:7c:9e:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:E5:F4:B8:66:D1:39:8C:86:F0:49:C7:1B:22:C7:9F:9E:2D:2C
            X509v3 Authority Key Identifier:
                keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:40:9b:91:e1:90:ac:a0:ff:32:f7:9f:f8:13:46:ec:f9:5e:
         72:77:1b:14:8c:aa:23:6e:65:25:7e:9e:05:9a:53:85:29:1f:
         7b:b2:95:42:29:9d:2d:76:87:9d:9d:21:9e:c6:9d:78:71:33:
         9f:9a:ef:50:a5:d3:4e:88:eb:a9:a2:9a:a3:18:96:1c:60:e9:
         48:31:28:4d:52:44:cf:86:e3:f1:5d:b3:47:f7:74:c8:81:d0:
         4b:12:e0:25:e1:b1:51:cb:cb:c3:44:d1:c5:36:81:fc:98:3a:
         f4:3b:1b:9e:f2:31:10:0c:a0:18:a4:95:cd:ff:48:f9:bb:83:
         81:07:61:ca:34:dc:df:b4:98:15:b6:de:a4:cb:7b:0f:05:e5:
         4d:5c:47:b4:ba:fe:d0:31:1f:48:ca:60:fc:3c:bd:76:4c:1d:
         d6:26:33:e6:3e:ca:55:d8:f9:29:3d:83:53:6b:4e:b5:a7:d4:
         77:12:18:63:aa:12:1a:99:ca:29:c4:8f:31:c2:24:fc:d1:3a:
         9e:b9:b5:9e:cf:10:7c:1f:fa:d8:9c:0f:32:11:09:c0:42:26:
         08:24:18:43:d1:9c:d1:d8:82:d7:bd:5b:92:42:79:19:9b:fc:
         da:1f:b6:57:4c:b8:24:6b:70:77:47:25:60:e3:de:58:7f:98:
         5a:46:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:59 2025 by rpki-client