Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File:                     tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier:          eKudxwAswsuJVrHJWMBDQL9+ZCvpcRBVvYhpfO432xk=
Subject key identifier:   5B:DB:CA:CD:8E:23:C0:99:ED:C5:24:E4:06:88:A3:27:15:6C:63:BF
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer:       /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial:       0198D54E3F94BE8B7D52B0BC32E14E18B8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number:          0816
Signing time:             Sat 23 Aug 2025 05:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:11 +0000
Files and hashes:         1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: MZGzGfGVDWlEKc7Je52vKTiWI0aqPN7SeV815Mh0y1g=)
                          2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3f:94:be:8b:7d:52:b0:bc:32:e1:4e:18:b8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
        Validity
            Not Before: Aug 23 05:02:11 2025 GMT
            Not After : Aug 24 05:02:11 2025 GMT
        Subject: CN=5bdbcacd8e23c099edc524e40688a327156c63bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:a2:14:d3:78:45:2d:f5:7b:1c:67:24:53:
                    74:36:ca:b7:fb:a0:48:a5:00:59:e6:ea:3f:5f:30:
                    6a:8d:6b:a6:bb:44:26:f8:06:8e:d8:3f:3a:1e:12:
                    4d:c5:56:86:0d:bf:22:f7:06:a1:b9:2c:24:3a:75:
                    ee:cc:a7:1c:1c:27:f3:0a:38:82:84:4e:5f:c8:ea:
                    9f:8f:93:35:dd:4c:cf:7f:c6:10:8c:9b:27:bb:bc:
                    d0:25:af:e3:d1:4a:3f:4d:92:01:b0:ad:c4:ed:03:
                    8e:24:65:d2:be:80:4c:dd:bd:d7:22:24:94:a7:3d:
                    71:8f:1c:8c:f8:f8:72:cf:b6:f0:7d:fe:c0:98:91:
                    23:ac:1f:ad:98:c0:ad:5d:0f:a9:a5:e6:c8:f6:92:
                    90:eb:e7:51:6e:b1:ea:74:8e:9f:36:62:80:c7:fb:
                    53:1c:e9:d0:8f:8c:69:d5:8b:3c:18:a8:cd:db:d1:
                    da:3a:a7:97:db:18:f7:04:fd:3f:c2:92:28:60:1a:
                    38:09:19:d4:4c:3c:6f:f0:a4:95:82:0d:67:04:59:
                    46:8b:b6:63:db:af:80:e6:46:3f:ca:5f:70:0d:f1:
                    15:30:ac:45:a7:85:43:2f:0e:8e:a8:44:17:19:80:
                    67:98:26:37:ce:87:8c:21:69:bf:68:29:86:0a:7a:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:CA:CD:8E:23:C0:99:ED:C5:24:E4:06:88:A3:27:15:6C:63:BF
            X509v3 Authority Key Identifier:
                keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:df:ce:0e:32:ad:f0:de:87:6a:74:4c:4d:61:e7:b3:68:eb:
         3f:36:9a:eb:5e:a5:26:b1:5b:23:dd:0d:f5:43:89:d7:72:ae:
         8e:c5:d0:95:8d:4c:e3:03:01:7d:9a:94:dc:0d:6b:aa:f0:52:
         06:f0:92:92:92:be:f8:59:cb:35:fe:57:a0:d6:6d:58:9f:e8:
         76:85:63:8e:5b:3b:23:c6:a7:99:d5:cd:07:c0:d0:78:e3:d3:
         34:0d:e0:a9:c9:a6:46:a9:86:f2:53:03:0e:03:fb:2f:16:08:
         2b:e6:f7:be:84:dc:d8:e0:7e:be:fa:26:7c:f8:de:71:fe:25:
         7b:71:9b:13:a9:81:ca:8f:b4:f3:08:c3:e2:49:73:f8:7b:be:
         af:95:b8:b2:c7:b4:f5:48:54:6e:28:75:42:42:a2:25:a9:70:
         f8:23:4d:5b:ab:5a:3d:d6:3a:55:27:92:b6:b7:c6:38:a4:82:
         64:f8:7c:aa:35:ed:ce:70:73:a5:a7:b3:81:00:bc:46:65:e7:
         02:b9:5b:0a:27:af:d5:40:21:9e:bc:b0:29:ba:65:46:77:53:
         92:fc:e8:45:e2:33:07:0d:38:29:0e:10:b1:3e:55:6f:a0:f2:
         cb:ad:54:74:c4:38:2c:11:b0:40:ab:96:63:e8:14:a5:b4:87:
         b6:37:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:06 2025 by rpki-client