Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File:                     TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier:          XjhPb5LceO8/Vpk7e4FKMWzztqu8gqZe4HBUAQwyorU=
Subject key identifier:   0C:EE:D3:3F:46:0D:ED:81:B7:21:FE:12:B3:06:6F:4A:34:FA:FC:71
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer:       /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial:       0198D515F17BEDCD0C5643C1120E776676A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number:          140F
Signing time:             Sat 23 Aug 2025 04:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:41 +0000
Files and hashes:         1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
                          2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: TjiAEP3zLee6p1niarhPZ4y4CDTD14E16libIa+eiJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f1:7b:ed:cd:0c:56:43:c1:12:0e:77:66:76:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
        Validity
            Not Before: Aug 23 04:00:41 2025 GMT
            Not After : Aug 24 04:00:41 2025 GMT
        Subject: CN=0ceed33f460ded81b721fe12b3066f4a34fafc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:b9:fb:00:8d:9f:2e:7d:79:08:25:97:7f:
                    76:a9:b1:3a:6d:75:cf:8e:2f:36:ed:91:4b:5c:71:
                    e5:3f:61:84:71:14:72:ee:f6:a4:28:ad:d9:eb:be:
                    69:f8:40:5c:06:14:2c:1c:1c:19:fe:96:73:35:25:
                    47:b3:7d:53:94:4b:2f:2d:78:23:ed:7d:ac:b6:e0:
                    94:2c:4c:52:9b:4a:ef:cb:3e:f1:6c:66:87:11:be:
                    df:29:63:75:78:fa:ba:6c:92:1f:2a:0e:65:dc:d8:
                    ea:ed:8b:fe:7b:be:27:bd:d8:bd:03:5e:50:e5:c0:
                    9b:fd:cb:6a:5a:99:40:ac:d3:08:29:8e:37:b4:9e:
                    15:f2:a5:b3:4d:ab:a8:04:3b:c4:37:47:a9:9a:0a:
                    4c:d9:28:14:2a:03:68:d6:e9:39:26:5f:7b:59:1e:
                    df:cd:0f:ae:0f:8d:63:43:92:8e:42:13:9a:18:55:
                    45:dc:0b:9b:29:1c:5c:1c:bf:b7:7d:03:f8:d0:c5:
                    73:5c:2a:70:1e:5a:5f:ff:bd:44:d4:55:3b:a0:3d:
                    cb:6b:44:00:3b:79:86:42:13:96:84:4e:86:6c:39:
                    66:d7:24:e0:83:20:ae:54:b9:67:ba:11:00:81:fb:
                    c4:5e:b2:ca:2e:82:8c:ff:a3:52:42:d5:67:e6:88:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:D3:3F:46:0D:ED:81:B7:21:FE:12:B3:06:6F:4A:34:FA:FC:71
            X509v3 Authority Key Identifier:
                keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:72:c6:32:70:00:b8:df:e6:06:1c:22:67:aa:0d:d8:b1:
         99:b3:b8:8c:35:ba:b8:dd:8f:33:3c:d3:0e:50:b4:70:9a:65:
         cb:a9:2d:25:52:a7:1c:bd:49:fa:0c:2e:7a:af:24:f7:4a:6a:
         79:cb:48:00:3a:be:37:7d:ec:12:da:31:9e:fc:bd:32:a0:37:
         94:73:10:33:4c:96:9a:57:6e:37:c1:75:b7:d3:a0:9f:42:24:
         f0:dc:bc:3e:cd:c0:15:7b:4a:bf:fe:28:19:3b:f3:40:4c:e7:
         73:b5:14:b2:ce:71:6c:7d:74:93:3b:94:3e:54:9c:06:79:46:
         48:2a:3c:5a:48:a0:ad:5a:14:86:ae:6c:e3:a1:c0:ef:90:2b:
         80:cc:87:ca:dd:92:08:8d:63:46:ad:b1:5e:78:85:ab:68:6d:
         27:17:c8:28:ca:ec:9a:bf:27:8a:1b:b3:e9:72:5c:df:35:79:
         0f:ab:d0:37:6f:0a:12:47:2d:b3:0e:6e:52:50:a0:ff:99:d4:
         2a:0b:0a:e7:23:5d:c8:54:40:f5:83:31:ad:95:2a:3c:6c:82:
         07:11:8a:e0:f4:c1:c5:82:3a:eb:f2:a8:86:3a:86:4b:eb:77:
         56:ab:47:36:e4:e7:fc:ed:25:4c:42:d2:e7:2e:45:98:96:f8:
         7d:82:a1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfF77c0MVkPBEg53ZnakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTViMmYzNzUyNGMzZDM4ZGM4MGE3MWQ4ZjAwMWVkMmM0
NWU4OWMwHhcNMjUwODIzMDQwMDQxWhcNMjUwODI0MDQwMDQxWjAzMTEwLwYDVQQD
EygwY2VlZDMzZjQ2MGRlZDgxYjcyMWZlMTJiMzA2NmY0YTM0ZmFmYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdK5+wCNny59eQgll392qbE6bXXP
ji827ZFLXHHlP2GEcRRy7vakKK3Z675p+EBcBhQsHBwZ/pZzNSVHs31TlEsvLXgj
7X2stuCULExSm0rvyz7xbGaHEb7fKWN1ePq6bJIfKg5l3Njq7Yv+e74nvdi9A15Q
5cCb/ctqWplArNMIKY43tJ4V8qWzTauoBDvEN0epmgpM2SgUKgNo1uk5Jl97WR7f
zQ+uD41jQ5KOQhOaGFVF3AubKRxcHL+3fQP40MVzXCpwHlpf/71E1FU7oD3La0QA
O3mGQhOWhE6GbDlm1yTggyCuVLlnuhEAgfvEXrLKLoKM/6NSQtVn5oi86wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzu0z9GDe2BtyH+ErMGb0o0+vxxMB8GA1UdIwQY
MBaAFE6lsvN1JMPTjcgKcdjwAe0sReicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmIt
MzY2YTk3NjFlYTIwLzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmItMzY2YTk3NjFlYTIw
LzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2tyxjJw
ALjf5gYcImeqDdixmbO4jDW6uN2PMzzTDlC0cJply6ktJVKnHL1J+gwueq8k90pq
ectIADq+N33sEtoxnvy9MqA3lHMQM0yWmlduN8F1t9Ogn0Ik8Ny8Ps3AFXtKv/4o
GTvzQEznc7UUss5xbH10kzuUPlScBnlGSCo8WkigrVoUhq5s46HA75ArgMyHyt2S
CI1jRq2xXniFq2htJxfIKMrsmr8nihuz6XJc3zV5D6vQN28KEkctsw5uUlCg/5nU
KgsK5yNdyFRA9YMxrZUqPGyCBxGK4PTBxYI66/KohjqGS+t3VqtHNuTn/O0lTELS
5y5FmJb4fYKhig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:25 2025 by rpki-client