Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File:                     TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier:          +uKlPSTSoaauwrx1whqG9qKmhgZxLnFYcVuXeT6wQnY=
Subject key identifier:   E7:C9:16:9F:6D:5C:34:1A:A5:4B:1B:FC:98:65:7B:73:4E:09:8A:D7
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer:       /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial:       0198D4E0D5ACD7D694A517DBCB41D9ECA357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number:          05BA
Signing time:             Sat 23 Aug 2025 03:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:41 +0000
Files and hashes:         1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: 5Jfc9ewl2BwKwWpeI5meXxoj2ssv75DfF/eiX0wH7MQ=)
                          2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:d5:ac:d7:d6:94:a5:17:db:cb:41:d9:ec:a3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
        Validity
            Not Before: Aug 23 03:02:41 2025 GMT
            Not After : Aug 24 03:02:41 2025 GMT
        Subject: CN=e7c9169f6d5c341aa54b1bfc98657b734e098ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:56:c4:99:07:72:8c:ce:b6:62:7d:de:90:2b:
                    b2:8b:3b:57:7b:a5:d4:cc:c4:c1:51:b1:82:22:fa:
                    67:2d:2d:8f:39:6c:d8:de:1a:34:fb:c9:fa:f3:bc:
                    50:df:86:75:7e:78:8d:bc:c5:fd:70:03:08:1c:07:
                    aa:9d:68:2f:a2:84:b3:be:bd:a9:d4:d7:94:81:3a:
                    f3:49:75:c8:65:6a:dc:2b:1b:83:84:f1:89:23:c3:
                    ef:5c:5c:3f:2b:7e:71:66:71:b2:51:ff:7e:e7:8d:
                    fe:22:28:b4:c7:e9:3d:0d:7f:6f:56:d1:0c:95:c7:
                    95:8b:ea:4b:eb:0c:00:3a:e0:cb:c9:43:a6:1c:9b:
                    dc:7c:84:c6:66:56:ba:08:d2:83:ac:0d:87:5c:c9:
                    f0:0c:82:e3:7a:12:13:af:ef:dd:95:60:f0:65:d7:
                    b2:95:56:c3:47:79:1a:b5:ca:42:da:b9:6a:76:49:
                    b4:cb:37:78:bb:f0:02:20:fe:90:d4:a2:5f:e2:6e:
                    b0:0c:92:8f:81:7a:5b:8b:b5:6f:aa:82:7d:83:2a:
                    67:92:23:7e:45:09:7f:7c:5d:e4:fc:c4:a4:f4:7d:
                    41:95:27:d1:89:41:76:b6:df:d7:d8:5e:cd:9f:73:
                    56:34:92:b1:32:0f:3f:89:ba:d8:62:d3:8c:2b:87:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C9:16:9F:6D:5C:34:1A:A5:4B:1B:FC:98:65:7B:73:4E:09:8A:D7
            X509v3 Authority Key Identifier:
                keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:87:1e:83:8f:c6:43:0a:f2:64:47:42:eb:cb:c3:50:09:
         16:c0:19:13:7a:53:1b:7f:21:3f:2d:5b:ed:fc:c3:d3:81:c9:
         47:2e:0d:32:a5:9a:29:29:0e:99:96:f7:a6:7e:00:2f:9d:e4:
         c5:d0:3f:00:51:3f:30:b4:c1:3f:37:e4:2b:3a:cc:05:fb:a8:
         0c:cb:11:8d:cf:9f:32:3d:3c:66:ec:75:01:bf:4e:52:ca:01:
         08:1e:70:6f:5a:1a:c5:23:30:2c:df:70:76:1b:2d:3f:c7:b3:
         42:fc:ef:b1:a5:7a:75:bc:e7:cc:8d:7c:63:61:0f:98:a2:23:
         2e:97:de:66:21:42:c3:8c:d7:3e:de:83:3a:a5:20:df:20:3b:
         c8:90:ab:f1:2b:88:c3:51:2f:f5:8b:98:50:a6:6f:ac:ab:cb:
         93:09:89:f6:22:fa:31:69:4f:46:6b:0f:27:42:21:b2:f5:4a:
         46:ea:92:ea:cd:29:c9:14:d7:24:e4:c1:ed:b1:c9:0c:60:e3:
         e6:42:00:67:1e:40:53:36:df:78:fa:af:05:27:01:f5:95:89:
         0e:23:16:17:39:74:d0:31:84:8d:36:1b:04:74:c1:d6:85:22:
         d2:b6:b5:04:f1:be:fe:2e:55:7b:ba:88:55:7d:54:9d:4e:1d:
         e1:fb:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:42 2025 by rpki-client