Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File:                     v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier:          UGHjDGIZfA8ErKP/v2bMlJckdzh0jL/4ASRsT/r04r4=
Subject key identifier:   43:46:3B:55:B4:8C:77:EB:5F:78:5F:86:30:95:D7:C5:A8:AC:93:4F
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       019A00A369821990E28DEA336D6BB143715E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number:          051D
Signing time:             Mon 20 Oct 2025 08:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:40 +0000
Files and hashes:         1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: muAYj6egYUpMhFUGmscQ47saVjLP9YCUutMCHmMyIDI=)
                          2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:69:82:19:90:e2:8d:ea:33:6d:6b:b1:43:71:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Oct 20 08:01:40 2025 GMT
            Not After : Oct 21 08:01:40 2025 GMT
        Subject: CN=43463b55b48c77eb5f785f863095d7c5a8ac934f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:38:d4:62:d1:29:ff:13:f1:1c:87:df:43:
                    d8:6b:1b:bf:34:b7:13:ed:72:75:51:98:f3:d7:83:
                    05:c6:02:ee:08:44:3f:f4:a5:03:ae:72:36:85:a0:
                    2e:2f:a7:d5:17:6b:cf:f6:30:56:3b:3e:bf:f3:76:
                    a5:9b:80:86:13:46:50:3e:66:e9:52:29:ce:12:cf:
                    06:cf:0f:c6:c4:16:92:69:3d:6c:85:73:0d:60:e7:
                    5b:fe:23:cd:fa:64:2a:21:e9:43:ab:e2:19:ad:4b:
                    85:4f:46:c9:3c:b0:ce:75:62:30:f4:bf:76:2f:3f:
                    88:84:45:70:29:92:c0:c7:83:82:a4:cb:55:f0:32:
                    97:6c:52:1e:7d:a6:ab:2f:04:5c:cf:62:f1:3a:1a:
                    ef:21:0b:78:ce:8c:96:57:ce:01:46:9e:86:78:8e:
                    e1:ea:f1:ef:8c:7e:06:73:81:8e:95:e1:bb:bb:0c:
                    63:2d:29:a2:8a:48:af:0b:70:6c:20:99:35:16:52:
                    ba:67:8f:bc:20:44:8e:24:2a:6d:26:62:17:04:dc:
                    2f:7b:bc:fe:94:75:ef:06:aa:47:d1:3d:a6:7d:db:
                    81:e6:50:67:09:42:6e:72:35:13:fc:4b:1c:b9:f9:
                    f3:cb:4a:90:07:ca:f5:12:af:34:c0:ce:d8:be:2c:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:46:3B:55:B4:8C:77:EB:5F:78:5F:86:30:95:D7:C5:A8:AC:93:4F
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:ba:f4:c5:88:a8:71:ba:b0:c3:5d:87:b2:0b:94:ec:cc:0d:
         4a:a6:0e:b9:5f:e9:3b:56:11:2a:f8:87:b6:92:b2:cb:f4:af:
         7c:0d:72:0d:f8:70:ee:65:fb:00:61:13:c4:b8:18:40:52:33:
         04:e8:d1:78:e2:ef:9b:70:a4:9c:a1:b3:d9:ea:e5:61:c7:75:
         c5:98:8e:c8:71:b6:8b:fd:45:32:df:cd:48:e3:32:9a:f0:6d:
         f7:a2:4c:3a:1d:43:33:a7:80:ef:c5:6e:3f:d3:25:d7:e3:b8:
         47:c6:72:e6:30:26:e9:5d:eb:c5:85:60:fc:fa:d9:99:8d:7d:
         05:d1:12:98:15:a9:b0:ec:6f:c4:39:c6:ed:5c:bc:f3:13:77:
         34:6b:2c:f3:62:ab:b2:26:82:f1:92:e4:3d:90:fe:52:df:f8:
         84:7f:54:21:0f:5b:bf:4e:55:94:d4:d0:61:91:d4:78:ca:e3:
         79:f9:41:57:de:a0:77:63:58:59:c5:69:d1:56:a0:25:f3:f4:
         d5:6f:a3:70:4c:c9:49:5e:55:ce:eb:2f:82:8a:12:ac:73:37:
         ac:54:e4:6f:55:02:8e:7e:1e:f7:26:76:78:c4:d0:30:f0:46:
         e9:fc:8e:a9:e2:61:7e:12:f5:8f:64:39:f8:59:1a:ef:a9:76:
         28:40:5c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo2mCGZDijeozbWuxQ3FeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTRkYmYwMGQ3NDU5MGM4OTEzZGVjOGIxY2YwODRkOGZj
ZjY5M2MwHhcNMjUxMDIwMDgwMTQwWhcNMjUxMDIxMDgwMTQwWjAzMTEwLwYDVQQD
Eyg0MzQ2M2I1NWI0OGM3N2ViNWY3ODVmODYzMDk1ZDdjNWE4YWM5MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsY41GLRKf8T8RyH30PYaxu/NLcT
7XJ1UZjz14MFxgLuCEQ/9KUDrnI2haAuL6fVF2vP9jBWOz6/83alm4CGE0ZQPmbp
UinOEs8Gzw/GxBaSaT1shXMNYOdb/iPN+mQqIelDq+IZrUuFT0bJPLDOdWIw9L92
Lz+IhEVwKZLAx4OCpMtV8DKXbFIefaarLwRcz2LxOhrvIQt4zoyWV84BRp6GeI7h
6vHvjH4Gc4GOleG7uwxjLSmiikivC3BsIJk1FlK6Z4+8IESOJCptJmIXBNwve7z+
lHXvBqpH0T2mfduB5lBnCUJucjUT/Escufnzy0qQB8r1Eq80wM7Yviz0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENGO1W0jHfrX3hfhjCV18WorJNPMB8GA1UdIwQY
MBaAFL9U2/ANdFkMiRPeyLHPCE2Pz2k8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjIt
YTQ3ZmI5YTk0ZmZkLzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjItYTQ3ZmI5YTk0ZmZk
LzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA47r0xYio
cbqww12HsguU7MwNSqYOuV/pO1YRKviHtpKyy/SvfA1yDfhw7mX7AGETxLgYQFIz
BOjReOLvm3CknKGz2erlYcd1xZiOyHG2i/1FMt/NSOMymvBt96JMOh1DM6eA78Vu
P9Ml1+O4R8Zy5jAm6V3rxYVg/PrZmY19BdESmBWpsOxvxDnG7Vy88xN3NGss82Kr
siaC8ZLkPZD+Ut/4hH9UIQ9bv05VlNTQYZHUeMrjeflBV96gd2NYWcVp0VagJfP0
1W+jcEzJSV5VzusvgooSrHM3rFTkb1UCjn4e9yZ2eMTQMPBG6fyOqeJhfhL1j2Q5
+Fka76l2KEBc1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:38 2025 by rpki-client