Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
File:                     TRCb5Q1A4ys9UW_B63LqsyxeC84.mft (raw, json)
Hash identifier:          IGYCJzfdaw5ah1S4BX9rcmY8dkElvZ5kEzV/Pm036bQ=
Subject key identifier:   EE:3D:C0:BB:F6:F6:9E:49:0C:27:F2:51:C9:A4:92:A7:F2:8F:CB:BB
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Certificate issuer:       /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial:       0198D4A7C66F4FA82AC330D206FCD6063F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
Manifest number:          013E
Signing time:             Sat 23 Aug 2025 02:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:21 +0000
Files and hashes:         1: TRCb5Q1A4ys9UW_B63LqsyxeC84.crl (hash: f/oHECp0qHQzxjBfBUb5KOdDDgk09GuFy0UoJQGZ2Gg=)
                          2: _ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa (hash: XDdFm9ijjrDqLsWMBsXWF0Txzhfv7gyIMnkn7RG7zb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:c6:6f:4f:a8:2a:c3:30:d2:06:fc:d6:06:3f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
        Validity
            Not Before: Aug 23 02:00:21 2025 GMT
            Not After : Aug 24 02:00:21 2025 GMT
        Subject: CN=ee3dc0bbf6f69e490c27f251c9a492a7f28fcbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:da:9a:27:ac:51:41:be:ba:f7:0a:3c:02:
                    c8:75:88:e2:23:8c:51:3f:d4:f8:a8:a6:34:14:86:
                    81:2a:04:8f:f2:61:a0:3f:e4:1b:1f:a4:89:75:29:
                    2a:21:55:e4:5b:66:dc:b6:e7:2c:47:01:4a:45:af:
                    cc:c8:ba:72:45:74:32:9f:a7:c3:f6:f8:9a:cf:08:
                    25:f6:8e:fb:cf:c7:9f:c8:d8:8c:6f:26:30:bd:94:
                    d0:2c:af:0f:35:12:24:d6:cc:f6:cc:8b:30:e2:57:
                    52:52:bc:ee:e7:15:08:81:21:2b:36:3b:05:f2:de:
                    01:7a:57:8d:ac:83:75:27:ce:43:02:6b:29:37:cc:
                    5d:1f:3f:94:47:fc:fa:94:08:5a:59:d5:76:82:4d:
                    de:ce:60:ce:50:c6:29:9c:f3:ef:1e:58:b8:38:af:
                    28:bf:d3:66:39:7b:99:41:e4:9d:52:a5:55:52:41:
                    af:be:40:05:9f:54:07:b9:53:93:c0:98:62:98:60:
                    d8:1c:34:6c:46:36:d9:1a:eb:d1:78:0a:19:af:2f:
                    bc:26:c7:2b:0b:cd:e9:71:99:8b:c0:4a:86:65:be:
                    f8:ff:e8:42:9c:62:35:33:da:e1:15:99:fa:29:e4:
                    74:c3:2b:7e:5d:95:a4:92:99:46:54:cf:93:6c:9b:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:C0:BB:F6:F6:9E:49:0C:27:F2:51:C9:A4:92:A7:F2:8F:CB:BB
            X509v3 Authority Key Identifier:
                keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:b3:fa:16:f5:6a:2f:e3:b6:5d:6f:ce:5a:6d:19:0a:e9:
         c0:e8:95:af:04:e2:1d:94:5f:5d:d3:8b:ff:af:b8:cd:ae:0c:
         e2:e7:f0:29:0d:ec:e9:99:00:87:a2:d7:d2:6f:23:66:d0:f0:
         90:91:fe:2f:1a:5e:c7:e3:28:33:f0:95:02:f8:c6:2e:ac:1b:
         68:51:e2:61:60:b5:61:d7:1e:f2:a4:cc:8e:68:83:64:22:16:
         8a:9c:79:56:bb:6a:77:24:2b:f2:85:6a:bd:9d:5c:80:1a:a2:
         73:5b:56:8d:38:3d:de:d4:12:8f:83:d3:4d:9e:80:e3:1a:44:
         f5:45:0f:3a:eb:31:f1:f2:a1:4b:18:a6:04:46:64:57:f5:ab:
         fc:e6:47:1b:6f:4f:bf:77:3d:7b:d6:da:a7:de:ce:8b:85:be:
         c8:89:0f:b8:79:65:a7:61:68:96:e6:30:57:ca:8f:2f:ae:8f:
         ab:11:49:1e:2c:17:08:2a:df:00:9a:15:59:ee:e7:d4:b7:12:
         a6:66:f1:5b:2e:46:26:09:c7:bb:b3:23:ea:4b:e5:78:07:6a:
         7d:fc:a6:f7:5b:2d:85:c8:fd:b2:e0:2f:05:5c:14:5c:38:62:
         e3:ba:e3:ec:94:83:75:69:0a:10:72:38:35:1c:49:d9:e7:c3:
         88:50:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:31 2025 by rpki-client