Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
File:                     TpisyG9BxHFbEMHdUmMcMqgZSjA.mft (raw, json)
Hash identifier:          PJD+MNiRMJOTH72zSjwI2EM/u1hKmUYmGAgNiete+N0=
Subject key identifier:   89:6D:48:37:EA:17:A6:98:13:7B:E0:FC:40:99:35:61:C5:6A:C1:7F
Authority key identifier: 4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30
Certificate issuer:       /CN=4e98acc86f41c4715b10c1dd52631c32a8194a30
Certificate serial:       0198D6987D4178605F52E69E5A4F97939C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
Manifest number:          1133
Signing time:             Sat 23 Aug 2025 11:02:54 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:54 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:54 +0000
Files and hashes:         1: TpisyG9BxHFbEMHdUmMcMqgZSjA.crl (hash: JHF3/WBnMpwKCMN44izhCBaljnowadOaCyoSLSV28T0=)
                          2: ohqKuhVASRrB9T2VKGm2oxF8gPE.roa (hash: BAH92y9b1xJW2sbjfw7QOsduF26YD433wmBfFvaPMSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:7d:41:78:60:5f:52:e6:9e:5a:4f:97:93:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e98acc86f41c4715b10c1dd52631c32a8194a30
        Validity
            Not Before: Aug 23 11:02:54 2025 GMT
            Not After : Aug 24 11:02:54 2025 GMT
        Subject: CN=896d4837ea17a698137be0fc40993561c56ac17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:bc:7e:a5:46:72:d7:ab:12:5b:54:ab:77:
                    82:c0:c5:7f:01:9a:e9:01:57:cb:d5:5b:ac:bb:0f:
                    4d:17:4d:33:62:65:03:17:6a:c8:ec:f8:f0:08:eb:
                    46:17:bc:54:47:b1:4b:93:e7:45:9c:ee:4f:84:d3:
                    fa:9a:2d:9a:2c:35:1f:78:b3:ed:bf:50:1b:06:e5:
                    c1:ed:4a:ff:83:6b:6f:4c:5e:d4:01:9a:76:af:b6:
                    8c:01:8d:93:b5:1d:3b:62:6d:43:0e:bd:b5:25:b4:
                    7d:a2:dc:35:17:da:6f:ab:ab:e6:e6:11:61:3e:10:
                    9e:b1:80:fd:c8:af:fd:a7:39:4e:eb:e3:3f:fb:2d:
                    7f:17:7d:4e:60:2e:ea:0b:f9:cf:a7:20:9a:89:b5:
                    dc:a7:a6:a9:4f:f0:47:1f:2b:ca:9a:a6:a4:26:63:
                    94:df:3d:c0:0c:89:83:9b:0e:24:c5:04:e4:10:0c:
                    2f:6c:9e:c8:14:27:0b:ab:4f:c4:f0:31:2a:f2:18:
                    00:94:ab:1f:f8:19:ff:d5:2a:80:cf:01:cf:36:59:
                    3a:ea:11:c5:5b:cf:df:86:9d:d0:01:be:da:01:b5:
                    a3:ba:7e:fb:76:a5:3e:22:05:18:4f:3f:58:19:f5:
                    f9:54:ba:97:79:ea:84:05:a4:8a:d7:b2:c5:04:18:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6D:48:37:EA:17:A6:98:13:7B:E0:FC:40:99:35:61:C5:6A:C1:7F
            X509v3 Authority Key Identifier:
                keyid:4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6f:35:df:70:5e:50:57:e1:4e:09:c4:8a:7b:c9:09:05:9b:
         ba:00:15:fc:5e:78:31:77:85:cb:5a:36:f9:a5:75:a6:08:d7:
         63:a6:d2:ad:94:2f:c1:16:10:21:dd:47:4b:ac:c5:0b:4f:30:
         0d:f7:a0:a3:87:e0:e8:0d:e4:0e:7e:62:ea:03:5d:85:c4:6a:
         bc:9c:ca:7a:72:60:3e:51:ee:ae:27:3d:12:cd:74:bd:e2:35:
         cc:b7:86:aa:a8:bc:d7:e0:39:2d:d4:48:27:eb:01:dc:86:9a:
         3b:c2:ca:18:02:08:45:fa:dd:7c:e9:e5:30:ac:8a:19:fa:e3:
         d7:ec:6c:92:c3:61:7a:19:d5:65:42:2d:a9:10:b3:77:ef:8a:
         0c:6c:55:a1:3b:b2:86:02:a4:8a:f6:b8:ec:57:3f:52:7f:a8:
         e0:ae:bb:77:d0:f6:35:19:0e:8c:3b:87:0b:d0:e7:0e:4a:ae:
         74:4a:dd:8f:1d:7d:71:11:cf:d7:1b:4d:b0:ce:cd:5e:cd:12:
         f4:7a:a3:a1:09:13:9a:d6:90:cc:57:99:ff:85:24:e3:27:ec:
         d1:c6:12:f2:86:e1:23:2a:3e:4d:c1:40:8b:f3:68:b1:2e:53:
         31:04:2c:88:e6:b6:fa:8b:18:68:dc:bf:49:3d:14:ab:ab:92:
         cb:52:87:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmH1BeGBfUuaeWk+Xk5wfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOThhY2M4NmY0MWM0NzE1YjEwYzFkZDUyNjMxYzMyYTgx
OTRhMzAwHhcNMjUwODIzMTEwMjU0WhcNMjUwODI0MTEwMjU0WjAzMTEwLwYDVQQD
Eyg4OTZkNDgzN2VhMTdhNjk4MTM3YmUwZmM0MDk5MzU2MWM1NmFjMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQi8fqVGcterEltUq3eCwMV/AZrp
AVfL1Vusuw9NF00zYmUDF2rI7PjwCOtGF7xUR7FLk+dFnO5PhNP6mi2aLDUfeLPt
v1AbBuXB7Ur/g2tvTF7UAZp2r7aMAY2TtR07Ym1DDr21JbR9otw1F9pvq6vm5hFh
PhCesYD9yK/9pzlO6+M/+y1/F31OYC7qC/nPpyCaibXcp6apT/BHHyvKmqakJmOU
3z3ADImDmw4kxQTkEAwvbJ7IFCcLq0/E8DEq8hgAlKsf+Bn/1SqAzwHPNlk66hHF
W8/fhp3QAb7aAbWjun77dqU+IgUYTz9YGfX5VLqXeeqEBaSK17LFBBji4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIltSDfqF6aYE3vg/ECZNWHFasF/MB8GA1UdIwQY
MBaAFE6YrMhvQcRxWxDB3VJjHDKoGUowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgt
NDkxZDMwZjRhMmM4LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgtNDkxZDMwZjRhMmM4
LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq28133Be
UFfhTgnEinvJCQWbugAV/F54MXeFy1o2+aV1pgjXY6bSrZQvwRYQId1HS6zFC08w
Dfego4fg6A3kDn5i6gNdhcRqvJzKenJgPlHuric9Es10veI1zLeGqqi81+A5LdRI
J+sB3IaaO8LKGAIIRfrdfOnlMKyKGfrj1+xsksNhehnVZUItqRCzd++KDGxVoTuy
hgKkiva47Fc/Un+o4K67d9D2NRkOjDuHC9DnDkqudErdjx19cRHP1xtNsM7NXs0S
9HqjoQkTmtaQzFeZ/4Uk4yfs0cYS8obhIyo+TcFAi/NosS5TMQQsiOa2+osYaNy/
ST0Uq6uSy1KHaA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:19 2025 by rpki-client