Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
File:                     TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json)
Hash identifier:          k65E7zBo4FIdJB8SubWItctO0g6o56n2QS1p4BasvaI=
Subject key identifier:   16:9C:93:41:C0:8B:B9:4F:E2:9B:A7:2A:CC:42:95:DC:0E:9D:EF:1F
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Certificate issuer:       /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial:       0198D58395A93C934F765A62344DBA0B3329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
Manifest number:          0B77
Signing time:             Sat 23 Aug 2025 06:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:27 +0000
Files and hashes:         1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: mLjy2+J+fjqRBE8V+N9MTjbV/JejT8BeLINGcziAyE0=)
                          2: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (hash: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:95:a9:3c:93:4f:76:5a:62:34:4d:ba:0b:33:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
        Validity
            Not Before: Aug 23 06:00:27 2025 GMT
            Not After : Aug 24 06:00:27 2025 GMT
        Subject: CN=169c9341c08bb94fe29ba72acc4295dc0e9def1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:0d:8b:72:22:71:53:20:7a:e5:1f:d8:94:
                    c9:31:77:58:d9:0e:87:69:54:14:b0:5c:d9:03:bf:
                    16:c2:6b:b9:11:4a:ab:6f:22:2a:1b:9f:e7:9a:31:
                    94:6d:72:ea:f0:2f:04:1b:76:f2:fa:55:b5:e1:64:
                    96:03:da:c9:c3:68:70:f5:06:a3:80:d4:c6:b6:eb:
                    4b:6f:1f:cb:ae:9f:83:bd:6f:97:7b:0f:50:cf:f8:
                    33:b1:72:68:27:91:f8:c0:67:48:ca:4d:c5:1e:a0:
                    6b:1e:1d:6d:1c:da:55:88:99:84:ac:a6:2c:05:95:
                    b3:bc:4c:d5:76:08:58:c7:ee:e2:bd:0d:53:7c:84:
                    c1:d5:c9:5a:19:dd:86:59:52:ab:2f:2f:6b:91:ee:
                    98:d7:45:16:43:63:08:04:09:20:4c:38:e2:22:57:
                    ca:f6:80:55:ee:44:ab:2e:88:65:f7:29:d2:9e:aa:
                    d2:14:1f:0d:db:84:07:cc:09:f7:62:36:61:89:26:
                    03:67:03:17:f4:2c:39:ca:6e:9d:3a:79:f2:da:24:
                    b4:a7:f4:03:88:6c:96:7c:52:c3:70:46:94:c2:27:
                    d4:95:39:13:8f:cb:71:66:1e:69:17:63:e7:6a:16:
                    bc:91:75:06:a0:1d:8d:bd:db:66:c7:2b:af:8e:a6:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9C:93:41:C0:8B:B9:4F:E2:9B:A7:2A:CC:42:95:DC:0E:9D:EF:1F
            X509v3 Authority Key Identifier:
                keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cf:c7:86:ed:c0:95:fc:90:48:41:d5:af:ea:41:65:1b:d8:
         54:1d:8f:74:e2:aa:d1:9c:18:cd:35:c7:bc:6b:8f:51:4f:18:
         93:1b:55:c6:bd:74:60:5e:45:61:7f:7c:1f:1f:55:e1:62:1a:
         0a:a4:9b:f7:b7:8d:da:78:14:e6:ba:49:43:f8:02:7e:9a:6b:
         83:08:c1:4d:56:03:77:fb:26:a7:27:7d:2b:d2:54:61:a0:ef:
         09:27:75:5d:1a:92:a3:9c:8e:1c:ab:25:3c:4d:29:d8:9c:47:
         92:1a:b9:6f:eb:bc:76:f7:bf:45:4d:63:67:b0:53:f3:05:a4:
         0d:39:7e:99:cc:d6:ea:2b:e0:17:06:75:97:66:90:61:0d:52:
         75:48:c7:25:c0:86:9e:5d:ee:d1:d8:23:99:8f:13:ab:39:fc:
         c5:d6:8e:3b:5d:dd:ae:3c:cf:21:c1:03:22:89:01:33:83:ef:
         38:d7:9a:12:fd:96:3f:3b:be:45:41:3b:9f:bc:22:6c:6c:46:
         0a:3f:8a:92:df:58:6f:6d:29:1d:5f:b7:55:27:b6:f8:25:49:
         b7:ff:bc:a3:11:c9:5b:88:12:7f:cb:c1:35:90:49:9b:4a:19:
         3d:f6:7e:ed:c1:a1:32:db:fb:cb:8f:23:2f:5d:8c:65:05:ee:
         1c:b3:8d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5WpPJNPdlpiNE26CzMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMjExMmNiZjZkY2M4ZGQzNDQ0ZTRlY2VkMjg0NDU3MzEw
ZjcwZDIwHhcNMjUwODIzMDYwMDI3WhcNMjUwODI0MDYwMDI3WjAzMTEwLwYDVQQD
EygxNjljOTM0MWMwOGJiOTRmZTI5YmE3MmFjYzQyOTVkYzBlOWRlZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEENi3IicVMgeuUf2JTJMXdY2Q6H
aVQUsFzZA78Wwmu5EUqrbyIqG5/nmjGUbXLq8C8EG3by+lW14WSWA9rJw2hw9Qaj
gNTGtutLbx/Lrp+DvW+Xew9Qz/gzsXJoJ5H4wGdIyk3FHqBrHh1tHNpViJmErKYs
BZWzvEzVdghYx+7ivQ1TfITB1claGd2GWVKrLy9rke6Y10UWQ2MIBAkgTDjiIlfK
9oBV7kSrLohl9ynSnqrSFB8N24QHzAn3YjZhiSYDZwMX9Cw5ym6dOnny2iS0p/QD
iGyWfFLDcEaUwifUlTkTj8txZh5pF2Pnaha8kXUGoB2NvdtmxyuvjqYzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBack0HAi7lP4punKsxCldwOne8fMB8GA1UdIwQY
MBaAFE8hEsv23MjdNETk7O0oRFcxD3DSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMt
YjI3OThjMWEwMzI3LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMtYjI3OThjMWEwMzI3
LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc/Hhu3A
lfyQSEHVr+pBZRvYVB2PdOKq0ZwYzTXHvGuPUU8YkxtVxr10YF5FYX98Hx9V4WIa
CqSb97eN2ngU5rpJQ/gCfpprgwjBTVYDd/smpyd9K9JUYaDvCSd1XRqSo5yOHKsl
PE0p2JxHkhq5b+u8dve/RU1jZ7BT8wWkDTl+mczW6ivgFwZ1l2aQYQ1SdUjHJcCG
nl3u0dgjmY8Tqzn8xdaOO13drjzPIcEDIokBM4PvONeaEv2WPzu+RUE7n7wibGxG
Cj+Kkt9Yb20pHV+3VSe2+CVJt/+8oxHJW4gSf8vBNZBJm0oZPfZ+7cGhMtv7y48j
L12MZQXuHLONjA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:56 2025 by rpki-client