Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File:                     Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier:          yyM6UnvemKJ4dmcwID9Ywsoecgai/esQYW5Xwzulv9Q=
Subject key identifier:   3F:15:BC:AD:24:E7:0F:85:83:7D:22:7C:21:2C:5D:71:31:B7:D2:02
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer:       /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial:       0198D660DF0070FE519D19C7D821CADF0E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:09 +0000
Files and hashes:         1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: qemniwjxSrh1nd4l26UfXQWKW1EqtD5JatemJCun8GE=)
                          2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:df:00:70:fe:51:9d:19:c7:d8:21:ca:df:0e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
        Validity
            Not Before: Aug 23 10:02:09 2025 GMT
            Not After : Aug 24 10:02:09 2025 GMT
        Subject: CN=3f15bcad24e70f85837d227c212c5d7131b7d202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:e0:8b:b0:83:55:2a:b3:f8:8e:8a:37:73:
                    7c:6c:2e:41:5b:1b:ab:f5:b7:24:7f:89:fc:84:91:
                    09:32:c7:51:24:07:88:4e:a8:0c:13:1a:0e:bc:ae:
                    e6:d6:9c:8e:4f:6f:1f:f5:f0:90:c4:16:21:0f:d9:
                    8d:85:9c:8a:93:38:3f:8b:dc:51:92:79:14:94:33:
                    c1:46:8a:77:7b:2a:0c:5f:5b:4b:ee:d5:d2:b8:04:
                    fe:f3:8d:62:6d:4a:c4:d9:7c:37:27:aa:74:32:ea:
                    97:7c:e8:1e:62:3c:80:57:1b:7a:b8:4c:0b:aa:f7:
                    64:5a:49:20:2c:b5:0e:8c:f3:14:49:87:a3:0b:34:
                    0e:6c:b5:3a:ff:6d:ac:48:af:b4:2e:85:50:12:f9:
                    71:10:ea:f7:7c:ea:e0:a3:2e:03:f1:f9:c0:7d:46:
                    eb:7f:24:a6:cb:e9:50:02:e3:47:2f:7b:ae:26:7b:
                    90:4c:5e:cc:d2:67:8f:99:50:9e:64:16:b6:c4:ec:
                    56:67:6b:72:88:f5:39:1c:ea:f4:f9:be:40:45:40:
                    bb:1d:de:36:66:25:9e:b8:04:bc:06:02:27:12:25:
                    1f:1a:3c:65:9e:a2:fc:c3:7f:c2:76:f6:26:1c:32:
                    87:0a:3e:2f:15:10:38:f9:70:b5:9f:15:06:6a:74:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:15:BC:AD:24:E7:0F:85:83:7D:22:7C:21:2C:5D:71:31:B7:D2:02
            X509v3 Authority Key Identifier:
                keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:f2:f5:c6:7f:cf:f8:0d:02:13:77:ef:8a:8e:44:f0:c1:
         49:a1:fb:44:c8:98:ab:41:22:af:b3:cb:af:bd:11:15:4b:80:
         31:f7:83:92:6d:63:af:ce:e7:95:c7:8b:1a:5f:e5:4b:97:98:
         32:26:8e:d8:76:ab:a2:71:05:5c:44:97:4f:bc:2f:f3:f6:aa:
         12:d2:51:80:49:0d:2b:28:5c:0e:5e:f6:52:34:78:05:69:28:
         89:0f:a6:6a:14:0c:07:ec:9b:ab:d2:d4:3f:75:62:ea:7c:95:
         e3:25:30:88:3f:2c:f4:7f:45:37:a5:40:b2:8a:41:31:dd:70:
         82:52:67:d8:74:cc:13:eb:40:fc:20:c8:34:36:24:70:dc:d1:
         bd:0e:d2:7a:0d:95:21:9d:64:40:86:2b:c2:41:5c:c1:43:95:
         f8:eb:39:60:2b:22:e3:57:c4:ce:40:1e:06:92:41:f3:b7:94:
         2b:84:78:bd:2c:8c:82:a0:ce:c2:b1:5a:b2:d6:c6:97:4a:63:
         54:ee:73:0e:6e:79:da:26:08:fc:cd:99:8d:da:c9:5e:6c:ad:
         9f:c8:a3:fe:36:4c:21:18:9c:75:53:d7:c0:bf:15:ee:51:fa:
         ac:a5:20:6b:76:46:d7:b7:2e:2a:20:ce:11:e3:92:20:95:c2:
         8c:22:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:22 2025 by rpki-client